Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: N6wJhTUfh8FC7nM9TsQWN3D+/JwAQ17cXRwI2jUpmcw=
Subject key identifier: E2:BB:1C:F6:5A:90:0E:00:2F:C0:5E:A5:5A:0B:01:3A:F1:48:D3:58
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019A52D2610156DDF9F912AD2404BD510550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 07:01:50 +0000
Manifest this update: Wed 05 Nov 2025 07:01:50 +0000
Manifest next update: Thu 06 Nov 2025 07:01:50 +0000
Files and hashes: 1: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (hash: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=)
2: DyQE1mAMz0-Y555bTSVvXkqEC1U.roa (hash: hwRt5mho9M1lkKLFQYJUnV8/sYmEs4QQ4EstdFb/mZk=)
3: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: fYkxyMeQ7yGCsTMGESz+aQmke3yLMCus9ewsbgPRrE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:61:01:56:dd:f9:f9:12:ad:24:04:bd:51:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Nov 5 07:01:50 2025 GMT
Not After : Nov 6 07:01:50 2025 GMT
Subject: CN=e2bb1cf65a900e002fc05ea55a0b013af148d358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:3d:ed:2a:55:1a:4b:1c:b4:43:ad:e1:2b:
37:5f:fb:01:65:13:26:5a:f2:32:e7:5a:14:ed:8b:
5f:f6:dd:e0:a1:5a:e7:b3:27:0c:46:89:47:24:17:
a3:05:b0:72:a3:46:9b:74:97:e9:ed:5a:72:d7:71:
b2:ca:86:ab:7c:24:ea:53:c6:d0:47:02:f2:a5:56:
24:41:f4:05:06:0d:56:12:5f:1b:a4:c4:94:46:c2:
8a:87:af:43:86:4a:1e:59:96:de:aa:da:5a:aa:2c:
e5:b8:8e:39:c2:a7:e0:59:6c:5d:9f:2e:6f:72:a5:
b6:b6:ef:df:b7:d9:ea:6a:de:dc:8a:9f:7c:db:67:
e0:37:e7:5e:1b:80:2b:60:e0:9b:e5:fb:81:6d:76:
08:d2:e4:1a:20:5f:ef:3c:48:c5:92:92:55:23:a3:
bf:38:97:47:19:b7:59:64:65:bb:6d:8e:90:55:82:
49:d0:69:a0:1b:5f:c5:5d:ed:dd:3b:89:cc:75:af:
04:56:c8:52:b7:f2:70:1d:a2:36:dd:04:57:75:b0:
53:32:c1:f1:5a:76:a2:a7:9d:da:95:30:bb:fb:e9:
c8:96:42:28:76:76:a3:43:9a:fe:f6:0c:50:76:1a:
f8:85:df:b5:39:31:03:5c:d0:fe:97:2d:ae:85:f1:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:1C:F6:5A:90:0E:00:2F:C0:5E:A5:5A:0B:01:3A:F1:48:D3:58
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:a2:fa:8b:51:ac:46:80:c9:08:c5:dd:04:dc:ba:7f:dc:
7c:2b:5b:f5:20:84:b3:9c:20:d4:20:c9:61:cf:5e:80:51:7f:
a2:71:05:fb:4f:c8:98:b8:48:08:b2:e3:d6:4f:cc:89:17:d8:
87:82:a7:67:40:d4:af:09:be:d7:ce:6a:c1:78:43:25:9d:30:
99:fc:23:be:27:d4:bc:71:b2:b5:c8:08:c2:15:d9:b4:2a:56:
96:14:c0:2a:36:26:4c:46:8b:ef:e7:ed:31:d2:52:a7:c8:64:
47:a3:f3:a5:ae:e8:a2:eb:e7:32:2c:53:7e:e5:1a:b7:07:96:
db:7f:2f:4d:d4:c4:73:8d:75:a5:14:b6:48:52:7d:68:34:11:
5a:43:76:a8:25:4e:7c:55:1c:25:41:35:05:7f:4f:a0:1b:a9:
37:69:6b:e1:6c:eb:88:fa:cc:fc:0a:f9:56:33:29:61:7d:30:
0a:c5:6b:43:44:20:9a:f9:78:b4:30:2f:9f:ad:62:07:b0:c8:
11:32:57:af:89:8d:ba:21:ce:44:f1:13:11:de:6d:0a:c3:04:
de:b5:02:8c:73:7e:61:c6:85:93:d8:d5:95:bb:8c:73:49:cc:
1f:0c:7d:96:6c:6d:c6:a9:76:57:84:7b:c9:7e:2c:13:8d:1b:
d4:90:50:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0mEBVt35+RKtJAS9UQVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjUxMTA1MDcwMTUwWhcNMjUxMTA2MDcwMTUwWjAzMTEwLwYDVQQD
EyhlMmJiMWNmNjVhOTAwZTAwMmZjMDVlYTU1YTBiMDEzYWYxNDhkMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/g97SpVGksctEOt4Ss3X/sBZRMm
WvIy51oU7Ytf9t3goVrnsycMRolHJBejBbByo0abdJfp7Vpy13GyyoarfCTqU8bQ
RwLypVYkQfQFBg1WEl8bpMSURsKKh69DhkoeWZbeqtpaqizluI45wqfgWWxdny5v
cqW2tu/ft9nqat7cip9822fgN+deG4ArYOCb5fuBbXYI0uQaIF/vPEjFkpJVI6O/
OJdHGbdZZGW7bY6QVYJJ0GmgG1/FXe3dO4nMda8EVshSt/JwHaI23QRXdbBTMsHx
Wnaip53alTC7++nIlkIodnajQ5r+9gxQdhr4hd+1OTEDXND+ly2uhfHv1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK7HPZakA4AL8BepVoLATrxSNNYMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSKi+otR
rEaAyQjF3QTcun/cfCtb9SCEs5wg1CDJYc9egFF/onEF+0/ImLhICLLj1k/MiRfY
h4KnZ0DUrwm+185qwXhDJZ0wmfwjvifUvHGytcgIwhXZtCpWlhTAKjYmTEaL7+ft
MdJSp8hkR6Pzpa7oouvnMixTfuUatweW238vTdTEc411pRS2SFJ9aDQRWkN2qCVO
fFUcJUE1BX9PoBupN2lr4WzriPrM/Ar5VjMpYX0wCsVrQ0Qgmvl4tDAvn61iB7DI
ETJXr4mNuiHORPETEd5tCsME3rUCjHN+YcaFk9jVlbuMc0nMHwx9lmxtxql2V4R7
yX4sE40b1JBQOA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:35 2025 by rpki-client