Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
File: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft (raw, json)
Hash identifier: OboELmJCiRsD3luAoFNW7ir9LdtrlG3HHrT0IR/Lf5g=
Subject key identifier: 19:13:DB:EE:E9:47:FB:B0:D4:94:11:78:7A:5A:C1:80:62:E9:64:A7
Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Certificate serial: 019A7225B0AD8EC788C5C9DB410DCBB81605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
Manifest number: 01A9
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl (hash: eN6X+xtm7UiZ98oG64wVIiN7nRRF43QrqHN811+6HAs=)
2: B0-8lZYraEx150X3g22rWD-3L8I.roa (hash: 6NnoqG71xZV/7Tl4SVNDBKlXoHQBrNWRbnGwKyVzpAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b0:ad:8e:c7:88:c5:c9:db:41:0d:cb:b8:16:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=1913dbeee947fbb0d49411787a5ac18062e964a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:2b:ee:ce:95:06:63:0e:1c:45:cb:e4:58:
19:dc:43:7b:c2:b7:86:39:8e:d7:87:ed:79:36:16:
0f:17:27:7c:bb:fd:a6:72:61:1d:24:83:57:d1:cc:
d3:ff:d7:08:bd:01:e5:cd:8e:da:0e:6d:e4:73:1c:
00:04:f0:22:27:fc:ce:56:89:06:52:78:75:0e:19:
5c:be:ca:c2:96:44:fe:f7:3d:47:5a:3a:d0:78:b4:
ba:48:dd:e0:18:59:d9:73:95:06:0f:01:53:52:aa:
ec:d5:a8:6c:df:93:c4:98:38:b3:1c:24:03:bf:82:
4c:7a:69:9d:28:69:07:b2:4d:4e:95:cc:bb:99:01:
86:bd:8c:c2:71:c4:e8:61:0f:1c:20:4a:6b:14:28:
40:b2:ea:3c:26:fb:92:cd:cd:fb:2b:33:6e:bf:f5:
e1:b3:41:56:0c:9e:dd:1f:60:6d:0a:c8:2e:83:73:
46:dd:4b:06:9e:c0:22:3e:68:e3:42:55:b8:12:5b:
9b:f5:75:1f:c1:cd:d9:fd:ac:20:e2:b7:48:10:4c:
c2:9b:0b:9f:92:09:df:68:a8:42:0f:cf:68:e2:c2:
72:05:b0:57:d5:1b:c1:0f:7a:4d:80:b8:66:2a:c5:
dc:d1:e1:6b:a1:ab:35:2e:00:54:ba:bd:ea:b6:b9:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:DB:EE:E9:47:FB:B0:D4:94:11:78:7A:5A:C1:80:62:E9:64:A7
X509v3 Authority Key Identifier:
keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:9a:7c:5e:99:af:f9:22:a5:69:3e:83:e4:e6:71:1a:21:
54:f6:44:d7:cc:5b:f0:a5:01:12:3b:44:78:6e:43:ad:9a:4f:
61:c2:72:15:ea:df:f3:d3:74:61:90:73:87:10:2e:1f:79:58:
69:3d:13:86:2b:e4:c6:55:c5:71:e7:10:e9:79:f5:bf:60:4f:
28:9e:f3:27:86:5f:f3:50:3c:7d:b0:8b:a1:c1:46:0f:05:17:
ff:1a:b2:02:fa:cb:bd:40:5a:59:d2:a6:48:d7:98:71:1d:ae:
e2:79:e9:aa:36:2e:a2:68:44:e5:84:dd:f7:23:2d:59:15:fe:
97:5c:25:cd:8b:0e:1c:b8:36:88:30:c2:56:d6:7b:96:7b:09:
cc:1f:09:4f:eb:e5:8e:9f:6e:a9:97:6a:37:18:4d:6f:6f:e1:
86:58:43:26:b6:80:cb:a1:8d:dd:89:1f:85:21:74:27:5e:22:
2c:d5:d4:67:04:c0:71:9d:e9:a8:91:5d:26:53:ce:66:25:71:
23:e4:e6:96:92:15:b5:86:e5:69:28:8c:a7:9a:1a:74:3e:30:
d8:ed:60:c4:9f:b5:09:d4:ba:e6:a6:a6:fd:ac:9f:5f:a0:c0:
97:08:f9:7b:92:7f:33:bf:11:3d:dc:75:ea:e7:7b:27:7f:c4:
d2:fc:e9:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbCtjseIxcnbQQ3LuBYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmJmNTAwNDg0MGMzM2I2YjFmMjEwOWRjMjQ5YmY1YjM5
MGYzMTkwHhcNMjUxMTExMDkwMTAzWhcNMjUxMTEyMDkwMTAzWjAzMTEwLwYDVQQD
EygxOTEzZGJlZWU5NDdmYmIwZDQ5NDExNzg3YTVhYzE4MDYyZTk2NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyIr7s6VBmMOHEXL5FgZ3EN7wreG
OY7Xh+15NhYPFyd8u/2mcmEdJINX0czT/9cIvQHlzY7aDm3kcxwABPAiJ/zOVokG
Unh1DhlcvsrClkT+9z1HWjrQeLS6SN3gGFnZc5UGDwFTUqrs1ahs35PEmDizHCQD
v4JMemmdKGkHsk1Olcy7mQGGvYzCccToYQ8cIEprFChAsuo8JvuSzc37KzNuv/Xh
s0FWDJ7dH2BtCsgug3NG3UsGnsAiPmjjQlW4Elub9XUfwc3Z/awg4rdIEEzCmwuf
kgnfaKhCD89o4sJyBbBX1RvBD3pNgLhmKsXc0eFroas1LgBUur3qtrnfJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkT2+7pR/uw1JQReHpawYBi6WSnMB8GA1UdIwQY
MBaAFNZr9QBIQMM7ax8hCdwkm/WzkPMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjct
ZjViOTkyNGQ2Y2YxLzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjctZjViOTkyNGQ2Y2Yx
LzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0OafF6Z
r/kipWk+g+TmcRohVPZE18xb8KUBEjtEeG5DrZpPYcJyFerf89N0YZBzhxAuH3lY
aT0ThivkxlXFcecQ6Xn1v2BPKJ7zJ4Zf81A8fbCLocFGDwUX/xqyAvrLvUBaWdKm
SNeYcR2u4nnpqjYuomhE5YTd9yMtWRX+l1wlzYsOHLg2iDDCVtZ7lnsJzB8JT+vl
jp9uqZdqNxhNb2/hhlhDJraAy6GN3YkfhSF0J14iLNXUZwTAcZ3pqJFdJlPOZiVx
I+TmlpIVtYblaSiMp5oadD4w2O1gxJ+1CdS65qam/ayfX6DAlwj5e5J/M78RPdx1
6ud7J3/E0vzpzw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:12 2025 by rpki-client