Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: m8XL1oBIooWpDBhMGF03Q+SrLZa7r91KcLLEHuullOY=
Subject key identifier: F5:2B:B7:0B:F8:4F:6D:6F:38:0E:3A:42:B1:49:CB:E4:79:4B:9B:AF
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019A71B888867693F9A5F0E6EF344FC0F58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: +TjrDFr8EcftwIELYm6ZidPF28lzlNDuNBdPyORPnR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:86:76:93:f9:a5:f0:e6:ef:34:4f:c0:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=f52bb70bf84f6d6f380e3a42b149cbe4794b9baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:ef:c8:5b:bb:65:cd:08:0d:ef:7d:71:de:
a7:14:47:4c:85:fa:71:ad:92:62:f4:a2:36:43:18:
4d:83:c6:ff:ca:26:a1:01:53:12:e6:f6:b8:a5:2b:
5e:b4:0f:2b:1e:34:91:c4:38:cd:77:85:72:84:a6:
a2:59:ec:b5:b2:88:09:5d:0b:80:07:6d:d6:89:79:
42:01:fe:45:47:53:7e:ff:80:a7:3c:90:0d:d8:3a:
29:9c:ed:0a:52:2e:2e:a9:02:31:c3:d7:00:bf:88:
9c:de:90:33:98:ca:65:47:76:18:b5:3e:c9:9d:42:
4d:57:b3:cf:6a:bf:b8:75:d4:e2:83:0b:56:46:79:
24:f8:de:ee:c4:4b:ed:35:8b:31:f8:53:5c:cf:2e:
b6:90:f4:86:c6:10:e2:66:a3:7f:dd:72:0f:6a:d0:
26:59:c5:ea:ac:cc:0a:96:e4:b1:b8:34:b5:a3:5f:
90:cf:49:b5:49:e1:17:37:94:71:a1:ff:33:8c:92:
9f:25:c3:e4:33:84:16:a3:0c:d2:0d:49:96:29:2c:
5a:6a:a1:be:9c:fd:0e:33:9b:6e:f0:5d:28:d1:c7:
dd:fc:91:fe:3d:74:a8:e3:99:04:36:f9:36:44:62:
fe:15:22:00:3c:5b:a1:69:73:67:f9:4b:6c:1d:a4:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:B7:0B:F8:4F:6D:6F:38:0E:3A:42:B1:49:CB:E4:79:4B:9B:AF
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:a7:fe:d1:f5:a3:38:af:4f:65:77:a0:a0:ef:33:db:ec:
53:36:40:8f:43:56:4a:29:c7:cb:1c:a0:b3:87:b8:43:37:0c:
15:44:94:17:09:5c:08:93:84:51:38:63:a7:f0:69:e5:ab:11:
41:b4:cf:2c:5d:b5:99:f8:3a:8b:4c:28:19:20:79:78:7f:32:
da:99:7c:6f:50:a5:08:1a:a3:c3:a8:76:db:a5:ba:f3:9c:2f:
4a:e8:ba:28:87:8e:33:19:41:57:34:d0:51:cf:1a:e8:72:55:
3e:0b:a5:b9:46:1b:87:83:71:68:46:7b:d9:19:96:1e:d8:5b:
50:67:e0:b3:c2:41:60:8d:c6:41:8b:6b:16:cf:2c:99:26:0c:
7c:6e:4a:82:cf:f2:94:c2:37:52:d3:eb:30:a3:17:16:92:e9:
cc:62:c1:d8:0b:47:a3:c5:9c:f4:45:f8:7b:a9:25:88:94:46:
00:1e:ab:bb:62:4b:b5:6b:8e:e0:0a:54:da:10:54:70:72:e1:
40:a1:91:25:87:05:7f:9a:7e:2d:4f:ff:41:2b:56:03:3c:60:
ea:0b:26:9e:bd:6b:19:67:ef:ec:1c:d2:d3:40:86:c6:04:fd:
c8:90:cc:db:f0:3e:c8:19:ff:8d:87:4b:a1:f4:5e:be:52:a0:
e8:17:72:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxuIiGdpP5pfDm7zRPwPWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDBlY2Y2MzVkZDNlOWQxNmIzNjFmOGUzZTBmNTA1MzFi
MWZiNGUwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhmNTJiYjcwYmY4NGY2ZDZmMzgwZTNhNDJiMTQ5Y2JlNDc5NGI5YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLvyFu7Zc0IDe99cd6nFEdMhfpx
rZJi9KI2QxhNg8b/yiahAVMS5va4pStetA8rHjSRxDjNd4VyhKaiWey1sogJXQuA
B23WiXlCAf5FR1N+/4CnPJAN2DopnO0KUi4uqQIxw9cAv4ic3pAzmMplR3YYtT7J
nUJNV7PPar+4ddTigwtWRnkk+N7uxEvtNYsx+FNczy62kPSGxhDiZqN/3XIPatAm
WcXqrMwKluSxuDS1o1+Qz0m1SeEXN5Rxof8zjJKfJcPkM4QWowzSDUmWKSxaaqG+
nP0OM5tu8F0o0cfd/JH+PXSo45kENvk2RGL+FSIAPFuhaXNn+UtsHaRRMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPUrtwv4T21vOA46QrFJy+R5S5uvMB8GA1UdIwQY
MBaAFPvQ7PY13T6dFrNh+OPg9QUxsftOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RHM5alhkUHAwV3MySDQ0LUQxQlRHeC0wNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWJjZjcyLWYzMGEtNGViMi1hYzMy
LTQxNDNhODg4NGEyZS8xLzEtOURzOWpYZFBwMFdzMkg0NC1EMUJUR3gtMDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2FiY2Y3Mi1mMzBhLTRlYjItYWMzMi00MTQzYTg4ODRh
MmUvMS8xLTlEczlqWGRQcDBXczJINDQtRDFCVEd4LTA0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+2n
/tH1ozivT2V3oKDvM9vsUzZAj0NWSinHyxygs4e4QzcMFUSUFwlcCJOEUThjp/Bp
5asRQbTPLF21mfg6i0woGSB5eH8y2pl8b1ClCBqjw6h226W685wvSui6KIeOMxlB
VzTQUc8a6HJVPguluUYbh4NxaEZ72RmWHthbUGfgs8JBYI3GQYtrFs8smSYMfG5K
gs/ylMI3UtPrMKMXFpLpzGLB2AtHo8Wc9EX4e6kliJRGAB6ru2JLtWuO4ApU2hBU
cHLhQKGRJYcFf5p+LU//QStWAzxg6gsmnr1rGWfv7BzS00CGxgT9yJDM2/A+yBn/
jYdLofRevlKg6BdyeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:53 2025 by rpki-client