Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier: hn5ZPwxYX3gMgTcA4a1vis5Ezj4/zMMZ6vI88x7rB4o=
Subject key identifier: A1:B9:62:12:FD:2B:BE:D9:A0:83:8E:B2:81:4A:72:40:56:EE:CA:5C
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial: 019A70A4E38CDE391AC2576EECA2D2EACD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number: 0509
Signing time: Tue 11 Nov 2025 02:00:45 +0000
Manifest this update: Tue 11 Nov 2025 02:00:45 +0000
Manifest next update: Wed 12 Nov 2025 02:00:45 +0000
Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: nd55J67Fojhuq/k0Z9oRVp1OpBhFkq6R0xwJe6RLGWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e3:8c:de:39:1a:c2:57:6e:ec:a2:d2:ea:cd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Validity
Not Before: Nov 11 02:00:45 2025 GMT
Not After : Nov 12 02:00:45 2025 GMT
Subject: CN=a1b96212fd2bbed9a0838eb2814a724056eeca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:55:2c:65:65:87:ea:8d:f2:35:af:73:6b:
82:bc:36:a6:f0:51:48:95:db:c4:fe:bf:20:79:c7:
5e:59:f7:d6:20:f8:d5:7f:3f:04:6e:75:d1:45:01:
39:4e:d4:a9:09:df:a3:1a:31:57:46:76:0e:03:90:
b5:6f:c9:f1:44:0a:1c:42:02:6d:ce:bf:0d:b5:8a:
66:d0:83:ba:5c:f9:ef:c6:d7:cc:21:db:f6:1d:a5:
2c:af:62:1f:7f:33:d0:1e:4c:73:31:b3:93:65:55:
c8:49:3c:fb:3b:5b:bf:17:11:53:74:a6:3e:b7:07:
dd:40:74:3a:9a:8b:05:11:af:8b:ed:a2:b3:7a:0c:
99:47:f3:1c:d3:b4:f6:a1:73:cc:c6:77:26:a4:7b:
e0:95:d5:3e:77:74:52:cb:a4:91:61:d1:99:fe:78:
0f:d7:8d:8c:32:d1:9f:aa:de:03:c3:32:97:2c:d1:
1d:a7:20:12:9f:6b:74:46:f3:55:81:4e:f6:31:99:
4a:fb:f8:3e:8f:24:1c:82:27:3a:d0:ee:3f:11:c2:
c6:25:1f:1a:c6:56:be:07:7a:3d:89:6d:c0:5a:59:
fd:40:cb:ef:76:e9:f6:57:71:e3:0c:0c:24:08:29:
4a:17:48:7e:d5:fb:8c:e8:58:3b:2a:e9:4f:bc:b1:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:62:12:FD:2B:BE:D9:A0:83:8E:B2:81:4A:72:40:56:EE:CA:5C
X509v3 Authority Key Identifier:
keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:d1:25:c2:6e:81:aa:d8:51:16:8a:c5:4c:9e:77:8b:f2:
fc:73:58:71:f9:65:9e:0a:f6:f3:62:1b:59:7e:3f:40:22:93:
a7:98:fc:f6:8c:32:e9:a7:d0:66:ed:98:37:c3:10:12:8c:5e:
55:35:88:3d:12:d4:c2:e3:50:00:22:5d:76:0b:87:3f:51:4b:
e4:3e:b4:1a:87:4a:c6:70:44:69:c3:0b:e6:5b:a9:41:66:fc:
a0:67:35:ef:24:a9:2d:e0:60:ea:89:6f:45:dc:02:10:67:09:
e1:46:83:4a:65:16:08:f6:6b:05:96:2f:1c:76:24:6f:84:b0:
c5:ca:81:b6:61:61:5b:2c:9f:e7:87:db:5a:dc:30:07:49:8a:
f1:4d:09:d5:cc:99:f9:6b:dd:a7:a7:d3:7d:42:38:83:aa:05:
3f:c4:51:41:9a:3d:ba:70:cd:f1:2b:5d:59:65:22:38:df:31:
23:4d:0a:5d:57:7b:84:bf:38:cf:f0:5e:90:be:60:12:05:86:
59:bd:8d:73:8b:fd:7d:79:62:2f:6c:d3:c7:a0:29:e2:fa:2e:
4c:97:3d:a3:11:a7:a4:ac:4c:c9:b9:46:7e:bc:15:9c:51:9e:
e7:29:96:52:f5:93:4b:89:53:5d:7c:1f:92:86:bf:65:c5:84:
3a:b3:cf:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOOM3jkawldu7KLS6s2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy
YjE0MGQwHhcNMjUxMTExMDIwMDQ1WhcNMjUxMTEyMDIwMDQ1WjAzMTEwLwYDVQQD
EyhhMWI5NjIxMmZkMmJiZWQ5YTA4MzhlYjI4MTRhNzI0MDU2ZWVjYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp9VLGVlh+qN8jWvc2uCvDam8FFI
ldvE/r8gecdeWffWIPjVfz8EbnXRRQE5TtSpCd+jGjFXRnYOA5C1b8nxRAocQgJt
zr8NtYpm0IO6XPnvxtfMIdv2HaUsr2IffzPQHkxzMbOTZVXISTz7O1u/FxFTdKY+
twfdQHQ6mosFEa+L7aKzegyZR/Mc07T2oXPMxncmpHvgldU+d3RSy6SRYdGZ/ngP
142MMtGfqt4DwzKXLNEdpyASn2t0RvNVgU72MZlK+/g+jyQcgic60O4/EcLGJR8a
xla+B3o9iW3AWln9QMvvdun2V3HjDAwkCClKF0h+1fuM6Fg7KulPvLG1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG5YhL9K77ZoIOOsoFKckBW7spcMB8GA1UdIwQY
MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt
NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi
LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAot3RJcJu
garYURaKxUyed4vy/HNYcfllngr282IbWX4/QCKTp5j89owy6afQZu2YN8MQEoxe
VTWIPRLUwuNQACJddguHP1FL5D60GodKxnBEacML5lupQWb8oGc17ySpLeBg6olv
RdwCEGcJ4UaDSmUWCPZrBZYvHHYkb4SwxcqBtmFhWyyf54fbWtwwB0mK8U0J1cyZ
+Wvdp6fTfUI4g6oFP8RRQZo9unDN8StdWWUiON8xI00KXVd7hL84z/BekL5gEgWG
Wb2Nc4v9fXliL2zTx6Ap4vouTJc9oxGnpKxMyblGfrwVnFGe5ymWUvWTS4lTXXwf
koa/ZcWEOrPPBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:59 2025 by rpki-client