Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: Gdux6UByPC4w3HbW4bHFvnN5qxyp84s8jCiwhqSYjns=
Subject key identifier: 20:EF:34:C7:4F:2D:2D:EF:EF:9E:92:9E:48:B4:00:2B:3E:E1:56:A8
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019A13BB891B4DD27C23814E2D854CF52483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 13B0
Signing time: Fri 24 Oct 2025 01:00:48 +0000
Manifest this update: Fri 24 Oct 2025 01:00:48 +0000
Manifest next update: Sat 25 Oct 2025 01:00:48 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: OxWY+4dMfWWB20q/d51kTtHeKCdIS7QnyTnudRXWWLU=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:89:1b:4d:d2:7c:23:81:4e:2d:85:4c:f5:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Oct 24 01:00:48 2025 GMT
Not After : Oct 25 01:00:48 2025 GMT
Subject: CN=20ef34c74f2d2defef9e929e48b4002b3ee156a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:05:c8:ce:c8:4f:80:aa:ad:22:37:ef:c2:
f7:26:29:a4:ab:c8:c8:72:d9:b8:e9:e6:63:65:f8:
64:17:81:f6:c3:eb:11:64:4b:a9:2d:fc:b3:f9:eb:
8f:81:c4:95:74:3c:a3:dd:69:1a:d5:49:6c:51:da:
74:64:55:64:a9:b7:07:39:03:80:aa:46:51:50:9c:
18:27:ae:52:48:41:a2:fd:7a:cb:f2:ed:5b:2b:2f:
4b:f7:05:a9:95:92:db:eb:cb:8f:53:69:4e:88:6a:
26:e2:51:b2:dc:f7:65:80:42:27:53:8a:75:38:fb:
ee:2c:ab:42:73:a3:f3:e1:ff:70:85:d9:eb:ae:a7:
c6:38:a1:f7:aa:6b:43:da:77:f4:fe:af:25:da:62:
79:07:ef:d0:8f:c3:cc:50:7a:1a:5b:cb:92:1e:12:
95:11:ee:5c:8c:25:b8:28:9d:9a:29:d8:8b:31:51:
02:ac:dd:c4:7a:59:f1:5e:7e:ce:4c:12:8f:be:d4:
75:72:b5:a4:52:c3:28:17:11:79:e5:d7:13:ad:a5:
3a:ba:0b:d3:59:e2:91:54:18:67:dd:51:71:f0:bc:
0a:de:e4:42:c2:77:ff:7a:17:5c:6a:79:6b:51:41:
1b:ba:e6:d3:76:61:5f:c9:91:dd:ea:34:53:92:1b:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:34:C7:4F:2D:2D:EF:EF:9E:92:9E:48:B4:00:2B:3E:E1:56:A8
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:04:a4:b7:b1:c2:8f:c0:8a:66:47:6c:db:be:d1:b0:34:
e8:f6:0a:40:2e:58:45:f7:98:37:74:6e:f8:f1:9a:13:cd:7c:
90:36:09:71:0e:02:ab:06:f4:98:3a:8d:bd:f9:9a:fd:df:f5:
3e:0b:a1:7a:36:68:0f:7e:6b:7b:42:23:e8:72:32:31:7c:d9:
14:a6:8c:48:1a:09:c9:3a:97:6a:77:f5:8e:51:69:ea:2e:fb:
93:c3:8a:c1:f7:59:5f:0a:cd:6c:97:09:eb:9d:ac:ee:90:d0:
4c:92:74:91:fa:87:ca:f5:c0:98:db:53:8c:27:85:44:30:0b:
80:b2:0d:a8:48:41:9a:3d:a0:ab:ca:a3:ac:c0:ff:ed:df:e7:
e4:3c:c4:a7:11:4b:64:7c:59:6f:04:72:ed:b7:c6:cf:51:07:
19:f3:26:a5:a7:eb:2a:95:79:7b:c1:61:f0:55:50:f4:11:71:
9e:fd:b3:ee:7d:4d:17:fa:77:68:78:b2:6d:d7:d1:19:44:fb:
68:26:ff:78:42:71:94:ea:01:03:28:ad:51:fd:e4:9d:ca:7a:
ca:7f:8b:aa:15:94:1e:22:11:c0:68:c1:7b:9e:87:4c:0c:97:
c3:ec:a7:5a:92:aa:8b:4e:ab:f8:6f:66:58:12:72:4b:de:fe:
37:92:4a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoTu4kbTdJ8I4FOLYVM9SSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDg2ZGRkOTdiYTM4MTM4OTM1N2UwZTU2Y2ExMWU1Y2Zl
OGY0NTMwHhcNMjUxMDI0MDEwMDQ4WhcNMjUxMDI1MDEwMDQ4WjAzMTEwLwYDVQQD
EygyMGVmMzRjNzRmMmQyZGVmZWY5ZTkyOWU0OGI0MDAyYjNlZTE1NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/MFyM7IT4CqrSI378L3Jimkq8jI
ctm46eZjZfhkF4H2w+sRZEupLfyz+euPgcSVdDyj3Wka1UlsUdp0ZFVkqbcHOQOA
qkZRUJwYJ65SSEGi/XrL8u1bKy9L9wWplZLb68uPU2lOiGom4lGy3PdlgEInU4p1
OPvuLKtCc6Pz4f9whdnrrqfGOKH3qmtD2nf0/q8l2mJ5B+/Qj8PMUHoaW8uSHhKV
Ee5cjCW4KJ2aKdiLMVECrN3EelnxXn7OTBKPvtR1crWkUsMoFxF55dcTraU6ugvT
WeKRVBhn3VFx8LwK3uRCwnf/ehdcanlrUUEbuubTdmFfyZHd6jRTkhsBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDvNMdPLS3v756Snki0ACs+4VaoMB8GA1UdIwQY
MBaAFNYIbd2XujgTiTV+DlbKEeXP6PRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAt
ODE1Zjk5MGJkNDMxLzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAtODE1Zjk5MGJkNDMx
LzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOQEpLex
wo/AimZHbNu+0bA06PYKQC5YRfeYN3Ru+PGaE818kDYJcQ4Cqwb0mDqNvfma/d/1
PguhejZoD35re0Ij6HIyMXzZFKaMSBoJyTqXanf1jlFp6i77k8OKwfdZXwrNbJcJ
652s7pDQTJJ0kfqHyvXAmNtTjCeFRDALgLINqEhBmj2gq8qjrMD/7d/n5DzEpxFL
ZHxZbwRy7bfGz1EHGfMmpafrKpV5e8Fh8FVQ9BFxnv2z7n1NF/p3aHiybdfRGUT7
aCb/eEJxlOoBAyitUf3kncp6yn+LqhWUHiIRwGjBe56HTAyXw+ynWpKqi06r+G9m
WBJyS97+N5JK9w==
-----END CERTIFICATE-----
Generated at Fri Oct 24 03:14:46 2025 by rpki-client