Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: LxzuAl+rz5DiJhm0k4SfYrHcdif2pcfTOI4IpluYwf4=
Subject key identifier: 73:DB:7F:E4:ED:C6:7B:6A:6E:9F:1A:4E:CE:C5:85:FD:73:61:95:99
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019A0A81278AD58B48EDA44A0EC645EDC49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 137C
Signing time: Wed 22 Oct 2025 06:00:27 +0000
Manifest this update: Wed 22 Oct 2025 06:00:27 +0000
Manifest next update: Thu 23 Oct 2025 06:00:27 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: bWlni+/WqbrYssqBet8qEd8/PdXUCTHBLyGPiglZVqo=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:27:8a:d5:8b:48:ed:a4:4a:0e:c6:45:ed:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Oct 22 06:00:27 2025 GMT
Not After : Oct 23 06:00:27 2025 GMT
Subject: CN=73db7fe4edc67b6a6e9f1a4ecec585fd73619599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:89:c9:5d:32:95:64:29:9c:5b:4a:1b:ee:
db:15:83:94:d0:66:d1:aa:63:85:32:b3:0b:c7:a8:
99:e5:da:72:2a:28:5b:35:3b:0e:19:fb:3c:2c:7d:
05:4b:38:32:c8:97:6d:f2:38:28:92:b1:23:02:81:
e1:69:28:c6:ec:4d:7e:6f:a8:d7:d4:c5:81:f1:d2:
2a:a1:55:25:31:e0:e0:d4:d1:c0:bb:52:ac:fe:99:
b9:8d:73:d3:ad:4e:93:4e:69:59:2f:1f:70:9b:e0:
96:4d:d1:eb:d0:a8:9f:af:41:39:86:cb:26:6c:7b:
b0:f3:28:52:fd:18:7b:60:a7:8f:1e:66:3a:12:11:
83:07:51:5f:f4:c4:4f:7c:97:bc:5d:cb:05:b3:95:
4c:31:27:23:8a:01:1f:e8:b9:7c:5d:19:10:3a:79:
24:9b:7c:1b:53:91:88:1e:7f:a2:fd:14:08:14:a7:
2e:59:79:d2:b1:35:8b:ef:e4:1c:ae:0c:89:4c:a5:
e7:00:8e:0e:24:9f:cd:9d:4f:b2:21:e5:70:6f:f5:
89:93:83:2a:3d:89:54:c7:d7:bd:dc:dc:f1:c6:81:
39:f8:74:31:91:f5:b2:41:13:2e:8d:fc:ec:41:54:
d3:8d:36:b8:56:8a:98:43:de:13:0b:6a:aa:25:d1:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:7F:E4:ED:C6:7B:6A:6E:9F:1A:4E:CE:C5:85:FD:73:61:95:99
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:a3:ef:2a:43:15:37:c9:52:ca:10:e8:cc:d9:3a:82:42:e6:
f7:25:1e:05:a1:b0:9b:a7:89:6c:c0:46:92:b3:da:fa:1a:f7:
4f:1a:90:7a:33:05:84:4a:60:32:c4:3f:fb:a3:0c:e7:bb:31:
f1:bf:f5:82:0c:64:13:98:1a:90:87:4d:d3:9a:4a:cb:1e:7e:
37:c8:bd:99:36:a3:bc:a1:e1:c9:68:b1:bc:34:fa:fc:de:e7:
31:9e:bd:db:c7:23:27:70:74:e3:52:ae:01:75:07:48:9d:49:
23:3b:34:ee:e8:c3:47:91:11:15:84:a7:ea:b2:95:b8:d5:35:
7e:53:01:c1:81:20:41:38:57:89:33:45:38:d0:7c:86:5e:59:
5d:36:f2:40:22:a8:35:21:cf:fa:62:cd:2e:8d:e6:dc:4f:86:
14:71:00:cc:aa:86:a8:e7:e3:40:c2:1a:77:b9:3c:59:8c:a0:
6d:82:6a:53:11:f7:05:53:f0:fc:80:a3:d0:4d:bc:02:d2:56:
80:da:bb:f3:a4:97:e1:73:6b:8b:a6:bb:a4:ee:29:68:25:c5:
e7:39:ed:30:6d:c8:53:33:ef:f5:13:85:60:1a:72:0f:ae:00:
f0:bd:ae:6c:92:68:09:1f:83:c9:15:8e:48:2f:50:d4:9a:f6:
66:79:66:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKgSeK1YtI7aRKDsZF7cSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3
ZmFlOTIwHhcNMjUxMDIyMDYwMDI3WhcNMjUxMDIzMDYwMDI3WjAzMTEwLwYDVQQD
Eyg3M2RiN2ZlNGVkYzY3YjZhNmU5ZjFhNGVjZWM1ODVmZDczNjE5NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GKJyV0ylWQpnFtKG+7bFYOU0GbR
qmOFMrMLx6iZ5dpyKihbNTsOGfs8LH0FSzgyyJdt8jgokrEjAoHhaSjG7E1+b6jX
1MWB8dIqoVUlMeDg1NHAu1Ks/pm5jXPTrU6TTmlZLx9wm+CWTdHr0Kifr0E5hssm
bHuw8yhS/Rh7YKePHmY6EhGDB1Ff9MRPfJe8XcsFs5VMMScjigEf6Ll8XRkQOnkk
m3wbU5GIHn+i/RQIFKcuWXnSsTWL7+QcrgyJTKXnAI4OJJ/NnU+yIeVwb/WJk4Mq
PYlUx9e93NzxxoE5+HQxkfWyQRMujfzsQVTTjTa4VoqYQ94TC2qqJdGZXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPbf+Ttxntqbp8aTs7Fhf1zYZWZMB8GA1UdIwQY
MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt
YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1
LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA56PvKkMV
N8lSyhDozNk6gkLm9yUeBaGwm6eJbMBGkrPa+hr3TxqQejMFhEpgMsQ/+6MM57sx
8b/1ggxkE5gakIdN05pKyx5+N8i9mTajvKHhyWixvDT6/N7nMZ6928cjJ3B041Ku
AXUHSJ1JIzs07ujDR5ERFYSn6rKVuNU1flMBwYEgQThXiTNFONB8hl5ZXTbyQCKo
NSHP+mLNLo3m3E+GFHEAzKqGqOfjQMIad7k8WYygbYJqUxH3BVPw/ICj0E28AtJW
gNq786SX4XNri6a7pO4paCXF5zntMG3IUzPv9ROFYBpyD64A8L2ubJJoCR+DyRWO
SC9Q1Jr2ZnlmFw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 15:23:58 2025 by rpki-client