Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: ktxQek0Lefe3/8uFJ47K8qQecXyVAztj/5WuvliwPHo=
Subject key identifier: 7A:27:8B:7B:9C:CD:E0:BC:CD:63:B0:8D:ED:C4:A8:E4:01:C6:40:94
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019A21ADAE98A1C801EF05021E9B4C1A5438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0A25
Signing time: Sun 26 Oct 2025 18:00:21 +0000
Manifest this update: Sun 26 Oct 2025 18:00:21 +0000
Manifest next update: Mon 27 Oct 2025 18:00:21 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: DJ5W2++zzU3RhFuibchfWxEh9nbFMWUrrE8hwkvnlgg=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ae:98:a1:c8:01:ef:05:02:1e:9b:4c:1a:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Oct 26 18:00:21 2025 GMT
Not After : Oct 27 18:00:21 2025 GMT
Subject: CN=7a278b7b9ccde0bccd63b08dedc4a8e401c64094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:ea:c4:ff:c6:0f:cd:2b:f2:b5:e4:83:16:
66:67:30:39:69:d5:58:d3:89:89:b5:20:d5:92:ba:
82:57:44:ab:45:68:f7:07:27:ad:6f:18:89:cf:c1:
b7:6f:26:ab:a8:03:fe:2b:0a:32:f9:35:54:bd:27:
39:ee:d4:a7:eb:67:11:5a:cf:b6:81:d5:70:e5:79:
d8:12:fa:12:06:05:3c:29:01:5e:f1:ef:64:e6:b3:
e9:57:94:f4:59:5e:a0:84:6f:3e:93:e1:c0:00:8b:
ba:75:70:92:17:4a:83:ff:8a:55:f2:15:82:16:bb:
4d:1c:b7:17:4c:8a:74:1f:dc:c2:f2:ae:e7:18:5c:
34:99:df:42:f8:e4:e3:a4:93:31:66:7a:9f:41:ef:
db:d6:06:ad:35:5e:47:9b:c5:83:96:f8:1f:6b:9b:
37:97:58:55:9d:02:6f:e4:a6:40:f2:2c:c5:24:f4:
2b:73:9b:58:d6:df:00:b5:19:64:64:7a:f5:f3:e4:
d9:de:27:c4:82:34:58:f8:bc:df:0b:ae:7b:49:81:
1d:8f:70:4c:9f:fb:b1:94:bc:c4:4c:a7:81:05:af:
77:f0:64:de:27:37:b5:a8:f1:aa:27:ae:4a:fd:d9:
a9:2b:9c:e1:18:6c:9c:1a:f1:8d:92:0c:d3:06:3c:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:8B:7B:9C:CD:E0:BC:CD:63:B0:8D:ED:C4:A8:E4:01:C6:40:94
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8d:79:69:1e:5a:8d:eb:91:8d:87:1b:4e:d3:10:17:f9:76:
e0:aa:03:83:13:e0:65:d4:19:6b:e7:f3:cd:1e:cf:31:bc:c7:
39:f2:22:57:3b:72:40:f4:84:20:2c:35:a1:1e:c3:ae:22:e1:
67:6f:1c:9d:49:c7:44:bf:08:d9:c6:43:f0:82:d1:c2:5e:aa:
76:78:83:3e:0f:c7:16:fb:25:ff:ee:03:b2:e1:52:e0:8f:c7:
82:36:31:3a:fe:e9:f8:0b:ea:5c:6c:06:54:ed:e4:cc:ee:ce:
85:30:a2:74:68:d5:1a:46:2e:e4:92:e2:37:82:b7:ee:2c:03:
d8:23:0b:a7:e3:20:cf:a0:a7:51:a9:f9:8b:b9:ba:d4:d7:94:
17:3a:08:aa:2d:7d:5b:c9:59:e5:1d:9d:e9:fd:39:90:f2:79:
d7:55:e1:e4:85:18:2d:ef:b5:51:39:48:88:c9:a8:0c:c7:18:
28:af:9f:37:38:c9:6c:70:e3:68:82:b3:a0:26:9a:18:92:3e:
a8:df:f0:3f:92:80:18:47:24:b9:02:a5:30:92:50:88:dc:14:
af:40:3f:9a:71:89:fc:73:0d:37:d7:1f:eb:49:32:63:ff:f1:
31:1b:85:20:9b:33:3b:52:d6:ce:88:11:db:68:ea:25:90:cb:
bd:70:1d:50
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZohra6YocgB7wUCHptMGlQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjUxMDI2MTgwMDIxWhcNMjUxMDI3MTgwMDIxWjAzMTEwLwYDVQQD
Eyg3YTI3OGI3YjljY2RlMGJjY2Q2M2IwOGRlZGM0YThlNDAxYzY0MDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRfqxP/GD80r8rXkgxZmZzA5adVY
04mJtSDVkrqCV0SrRWj3ByetbxiJz8G3byarqAP+Kwoy+TVUvSc57tSn62cRWs+2
gdVw5XnYEvoSBgU8KQFe8e9k5rPpV5T0WV6ghG8+k+HAAIu6dXCSF0qD/4pV8hWC
FrtNHLcXTIp0H9zC8q7nGFw0md9C+OTjpJMxZnqfQe/b1gatNV5Hm8WDlvgfa5s3
l1hVnQJv5KZA8izFJPQrc5tY1t8AtRlkZHr18+TZ3ifEgjRY+LzfC657SYEdj3BM
n/uxlLzETKeBBa938GTeJze1qPGqJ65K/dmpK5zhGGycGvGNkgzTBjzYeQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHoni3uczeC8zWOwje3EqOQBxkCUMB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy415
aR5ajeuRjYcbTtMQF/l24KoDgxPgZdQZa+fzzR7PMbzHOfIiVztyQPSEICw1oR7D
riLhZ28cnUnHRL8I2cZD8ILRwl6qdniDPg/HFvsl/+4DsuFS4I/HgjYxOv7p+Avq
XGwGVO3kzO7OhTCidGjVGkYu5JLiN4K37iwD2CMLp+Mgz6CnUan5i7m61NeUFzoI
qi19W8lZ5R2d6f05kPJ511Xh5IUYLe+1UTlIiMmoDMcYKK+fNzjJbHDjaIKzoCaa
GJI+qN/wP5KAGEckuQKlMJJQiNwUr0A/mnGJ/HMNN9cf60kyY//xMRuFIJszO1LW
zogR22jqJZDLvXAdUA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:31 2025 by rpki-client