Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: KFJUi3dnRRZd3iC/MfmTWDqMoFTonXO3KgfZVfChDDo=
Subject key identifier: 59:40:88:53:0F:1E:32:79:74:A1:A6:76:48:95:BC:17:C9:D5:6C:AF
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 0199356E7E8AA08B029C327CC9E4EE7D373A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 110B
Signing time: Wed 10 Sep 2025 21:00:57 +0000
Manifest this update: Wed 10 Sep 2025 21:00:57 +0000
Manifest next update: Thu 11 Sep 2025 21:00:57 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: EDUKRVZILu1KHYXU719jo+Z6klnqMr3RNeA39F11RKA=)
2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:7e:8a:a0:8b:02:9c:32:7c:c9:e4:ee:7d:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Sep 10 21:00:57 2025 GMT
Not After : Sep 11 21:00:57 2025 GMT
Subject: CN=594088530f1e327974a1a6764895bc17c9d56caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:b5:d6:6c:79:4f:a3:33:ca:58:0a:d4:c7:
42:98:9d:b0:3b:e0:37:66:6c:28:77:bc:8b:21:c3:
b2:f2:75:36:ce:09:02:9e:d8:8c:57:23:18:55:e0:
aa:59:20:57:6e:58:17:47:8f:b2:75:22:90:20:e6:
c9:e6:5c:76:74:dd:dc:b8:83:b7:7d:74:cb:12:77:
72:b4:13:45:0e:e3:ef:53:64:43:60:41:7f:57:1d:
81:63:01:6a:12:18:6a:95:48:a9:e9:88:b4:2b:2f:
7f:bc:49:f0:b3:b6:83:65:13:a6:c5:4c:e3:05:75:
2f:46:ed:e2:9e:dd:44:e5:fc:94:07:35:ed:0a:51:
3a:86:45:9e:c9:72:77:e3:91:af:bd:e5:3c:e7:50:
82:8e:69:89:90:19:a3:5f:0d:e5:77:fb:cc:61:b3:
7c:00:14:e6:a7:a0:ca:d9:aa:c4:1c:db:78:69:76:
16:c0:b3:dc:36:ab:25:18:dd:ad:6a:f3:19:4e:1c:
ca:50:4b:43:0b:33:bf:92:1e:d9:43:77:09:fb:84:
e5:d6:43:d8:dc:3e:55:37:51:12:c6:90:9f:ba:66:
cb:dd:1b:83:1f:01:40:74:ea:d2:14:ba:cd:57:bd:
84:84:8f:69:8d:49:1b:88:ee:6b:b1:d2:91:6a:53:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:88:53:0F:1E:32:79:74:A1:A6:76:48:95:BC:17:C9:D5:6C:AF
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:c5:17:27:28:e2:7b:5a:44:87:2c:39:cf:5a:6c:8a:cb:
69:49:15:b7:22:0f:68:48:bc:f6:02:10:21:59:61:62:24:94:
7f:06:9f:58:1a:43:c8:f1:cf:bd:f1:b8:a6:44:bd:e2:8e:98:
9b:49:8e:ff:07:f6:93:e5:9c:84:dc:f0:f8:4d:80:9e:3e:ec:
2d:4c:27:52:da:e2:96:fe:3e:fe:8c:97:8d:b9:a7:4c:96:d9:
de:ca:e9:2c:65:c2:67:73:ef:2f:0f:2c:95:db:78:b2:64:9f:
7b:fe:f4:27:1f:cf:9c:ad:7f:ba:9d:fb:26:81:f7:d4:f7:5b:
c2:d8:71:f3:43:bd:7b:4e:3d:ef:fe:4e:db:ac:49:eb:f4:b4:
84:7c:e1:59:5b:b1:22:81:46:c7:a4:86:69:3e:9c:d0:1d:d0:
06:67:61:58:8b:8a:e3:bb:7e:01:62:57:b8:7f:49:23:ab:07:
31:38:88:44:5a:8c:1f:b1:68:c8:8f:0b:e2:fa:82:58:e0:d6:
2a:77:c1:f8:29:23:da:0b:0a:61:c9:ae:9f:13:14:fa:ec:48:
7d:dd:f5:43:25:cc:f2:4f:11:f4:90:18:71:a2:55:59:48:35:
4f:c0:0e:82:4f:21:01:e9:d6:cf:9c:87:2d:6a:49:8c:af:9e:
c0:40:43:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZk1bn6KoIsCnDJ8yeTufTc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm
OGNkY2UwHhcNMjUwOTEwMjEwMDU3WhcNMjUwOTExMjEwMDU3WjAzMTEwLwYDVQQD
Eyg1OTQwODg1MzBmMWUzMjc5NzRhMWE2NzY0ODk1YmMxN2M5ZDU2Y2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+q11mx5T6MzylgK1MdCmJ2wO+A3
Zmwod7yLIcOy8nU2zgkCntiMVyMYVeCqWSBXblgXR4+ydSKQIObJ5lx2dN3cuIO3
fXTLEndytBNFDuPvU2RDYEF/Vx2BYwFqEhhqlUip6Yi0Ky9/vEnws7aDZROmxUzj
BXUvRu3int1E5fyUBzXtClE6hkWeyXJ345GvveU851CCjmmJkBmjXw3ld/vMYbN8
ABTmp6DK2arEHNt4aXYWwLPcNqslGN2tavMZThzKUEtDCzO/kh7ZQ3cJ+4Tl1kPY
3D5VN1ESxpCfumbL3RuDHwFAdOrSFLrNV72EhI9pjUkbiO5rsdKRalMgkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFlAiFMPHjJ5dKGmdkiVvBfJ1WyvMB8GA1UdIwQY
MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2
LTFjODhlZWJlYjI5My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1LzIwZjRhYy04MGQ5LTQwZTItYTllNi0xYzg4ZWViZWIy
OTMvMS8xLXlOcklUMVdTVDg3QjM1clFmUXVUejM0emM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4vF
Fyco4ntaRIcsOc9abIrLaUkVtyIPaEi89gIQIVlhYiSUfwafWBpDyPHPvfG4pkS9
4o6Ym0mO/wf2k+WchNzw+E2Anj7sLUwnUtrilv4+/oyXjbmnTJbZ3srpLGXCZ3Pv
Lw8sldt4smSfe/70Jx/PnK1/up37JoH31Pdbwthx80O9e0497/5O26xJ6/S0hHzh
WVuxIoFGx6SGaT6c0B3QBmdhWIuK47t+AWJXuH9JI6sHMTiIRFqMH7FoyI8L4vqC
WODWKnfB+Ckj2gsKYcmunxMU+uxIfd31QyXM8k8R9JAYcaJVWUg1T8AOgk8hAenW
z5yHLWpJjK+ewEBD9A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:59:26 2025 by rpki-client