Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: K5PLyxQlQ5l3snXTlMhv9z79/jW0uckcOQYP60zdb9s=
Subject key identifier: 13:2E:35:47:CC:CD:1D:BC:44:10:87:E0:B1:FF:31:E8:80:79:CA:73
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 019A7149A8E8E89955777FAADAA8C08115AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: 017C
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: g6PVh3qPOviIOXvVOYxyJ84G1uAawXRoD+9xaepufzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a8:e8:e8:99:55:77:7f:aa:da:a8:c0:81:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=132e3547cccd1dbc441087e0b1ff31e88079ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:c1:a4:d2:69:fc:5c:71:16:fe:d5:65:f7:
93:98:af:c1:43:0d:9a:0e:7c:10:91:ec:5b:db:5c:
c7:17:c9:1c:a3:81:e8:64:ae:76:43:0b:db:2d:a4:
24:e3:76:c4:72:21:ed:ef:93:a0:a1:9f:57:e5:c3:
15:65:35:29:e7:ee:7a:87:15:07:93:17:70:ce:0d:
86:19:c3:75:56:9f:6d:eb:68:d4:1b:f6:38:34:d9:
93:4d:3b:ae:2c:3a:9e:7a:42:82:3b:6d:2d:42:c7:
17:64:6d:87:93:41:03:e3:91:3f:35:c1:ec:90:f0:
e8:58:dc:56:2c:c8:9e:4e:86:1d:c2:3d:86:9c:e2:
46:26:73:94:bf:54:8d:ff:3b:91:35:22:6b:d9:96:
c9:b8:45:6c:6a:a7:58:87:9a:b3:26:f8:b7:f6:b9:
da:75:e0:b3:0c:6b:05:a5:49:c1:5a:76:47:79:d8:
2e:b0:b7:5e:80:49:95:92:2c:64:0f:b1:06:a3:e9:
f9:f6:03:e0:0a:21:fc:96:86:75:7b:58:0d:94:80:
c8:e2:8a:f8:7f:e5:4f:82:90:ae:72:9b:92:2d:cd:
03:a9:4a:a5:57:eb:6b:81:5d:9d:72:39:f2:9b:ab:
ee:8d:97:53:e5:3c:ea:b2:62:48:e3:34:4f:a5:0e:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:35:47:CC:CD:1D:BC:44:10:87:E0:B1:FF:31:E8:80:79:CA:73
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:29:b8:dd:ea:02:c3:1d:a2:19:f5:61:75:a6:d1:4e:89:
1d:b1:4c:16:c9:84:7c:64:03:3f:97:08:38:1e:02:e5:e3:f0:
79:93:d2:8c:e1:25:5d:66:96:57:97:48:65:4e:b1:8f:a4:03:
cb:ad:aa:1a:84:29:f1:c2:e4:fe:5a:28:fa:90:b4:06:33:ca:
74:f5:6f:99:db:6b:ad:d2:76:02:93:72:bb:bb:20:03:01:a5:
de:64:e0:1d:29:87:1c:0e:dc:70:8d:ae:4d:d7:0d:cb:97:95:
72:8b:f4:11:46:66:be:15:8a:00:cb:fd:08:08:97:14:72:06:
e3:10:e1:41:05:dc:71:25:fb:05:90:b7:0e:7a:d4:7f:6d:b2:
53:fb:2b:d8:01:49:a5:01:4b:22:51:fb:87:73:30:ab:56:2d:
ca:79:22:c3:85:ae:a3:b6:f1:0a:1f:e8:1d:99:b7:d9:86:f9:
6d:f4:67:94:b6:3c:90:95:c8:da:af:10:4a:fb:b6:7b:1c:d5:
ae:4d:aa:47:7c:a6:0c:8e:fc:86:c1:02:78:82:b3:d8:33:90:
f1:95:61:27:99:85:43:2c:b7:f5:07:e5:9f:6b:59:6a:8a:15:
0f:65:de:f3:5b:8b:38:34:ae:ea:61:63:4b:9c:44:5c:0c:76:
54:16:9e:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxSajo6JlVd3+q2qjAgRWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTRiZTAxNGJmODM5NGU0Y2Q3Y2U2Yzg0YTRmYTg0ZjJl
NTlmNWYwHhcNMjUxMTExMDUwMDQzWhcNMjUxMTEyMDUwMDQzWjAzMTEwLwYDVQQD
EygxMzJlMzU0N2NjY2QxZGJjNDQxMDg3ZTBiMWZmMzFlODgwNzljYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAnBpNJp/FxxFv7VZfeTmK/BQw2a
DnwQkexb21zHF8kco4HoZK52QwvbLaQk43bEciHt75OgoZ9X5cMVZTUp5+56hxUH
kxdwzg2GGcN1Vp9t62jUG/Y4NNmTTTuuLDqeekKCO20tQscXZG2Hk0ED45E/NcHs
kPDoWNxWLMieToYdwj2GnOJGJnOUv1SN/zuRNSJr2ZbJuEVsaqdYh5qzJvi39rna
deCzDGsFpUnBWnZHedgusLdegEmVkixkD7EGo+n59gPgCiH8loZ1e1gNlIDI4or4
f+VPgpCucpuSLc0DqUqlV+trgV2dcjnym6vujZdT5TzqsmJI4zRPpQ7EPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBMuNUfMzR28RBCH4LH/MeiAecpzMB8GA1UdIwQY
MBaAFPnkvgFL+DlOTNfObISk+oTy5Z9fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lUy1BVXY0T1U1TTE4NXNoS1Q2aFBMbG4xOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlmLTJkNTAtNDI0Yy05YjQ5
LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVzaEtUNmhQTGxuMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg2LzRkNTg5Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0
MzYvMS8xLWVTLUFVdjRPVTVNMTg1c2hLVDZoUExsbjE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmQp
uN3qAsMdohn1YXWm0U6JHbFMFsmEfGQDP5cIOB4C5ePweZPSjOElXWaWV5dIZU6x
j6QDy62qGoQp8cLk/loo+pC0BjPKdPVvmdtrrdJ2ApNyu7sgAwGl3mTgHSmHHA7c
cI2uTdcNy5eVcov0EUZmvhWKAMv9CAiXFHIG4xDhQQXccSX7BZC3DnrUf22yU/sr
2AFJpQFLIlH7h3Mwq1Ytynkiw4Wuo7bxCh/oHZm32Yb5bfRnlLY8kJXI2q8QSvu2
exzVrk2qR3ymDI78hsECeIKz2DOQ8ZVhJ5mFQyy39Qfln2tZaooVD2Xe81uLODSu
6mFjS5xEXAx2VBaeKg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client