Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: EDDAlGVWv9TX7TBDq/5GD98wr/gpXY7oolbcAjKC9co=
Subject key identifier: F4:CD:70:C9:41:98:0A:A3:FA:65:BA:12:FC:25:AA:FF:7D:C5:D3:AC
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019A70DC0D9CA663ED6DB1CBF24BA51C065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 0101
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: 4Xzk6R6+jhJHuM6Bs7wByL7gJuNdGeWLR8Fm+c9d3hQ=)
2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0d:9c:a6:63:ed:6d:b1:cb:f2:4b:a5:1c:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=f4cd70c941980aa3fa65ba12fc25aaff7dc5d3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:37:16:c0:15:ab:11:0a:a4:30:b8:0a:a5:
ef:9f:9b:1b:ae:b4:5f:4c:73:f0:95:d1:c4:73:e8:
e3:c1:42:fc:09:1a:e5:b4:0e:ef:45:b8:91:0a:8c:
40:78:67:1b:da:c3:9d:20:b5:0b:08:27:23:44:42:
5a:d9:24:30:b6:37:c4:2a:9c:02:ca:40:05:35:7e:
14:39:90:16:3c:99:9b:4a:a4:4b:23:60:08:a2:b5:
bb:e4:a2:23:f9:bb:24:c4:13:24:e4:5c:23:98:64:
34:ef:2b:41:70:04:a5:db:07:8c:f2:92:a0:2a:54:
66:5f:69:29:52:f0:7d:8f:94:e7:6f:4f:9f:22:ef:
61:e7:a4:fb:5d:52:fa:a5:2e:a8:aa:ff:89:cc:e4:
e7:bc:02:33:0c:5d:76:2c:2b:64:95:1a:53:24:28:
14:a1:e2:ed:a1:4a:ee:b5:fd:f6:01:c7:a6:61:34:
0b:4f:92:cf:ae:ca:a2:5e:42:a9:00:d8:14:4f:57:
4f:a8:f0:db:d0:e3:14:e5:37:c1:ee:a9:21:8a:fb:
14:bd:cd:fc:84:ae:f7:7f:d3:81:f9:a4:0d:b3:33:
e5:12:d8:4b:10:5f:0f:9c:44:1c:b9:b9:99:cf:12:
9d:4a:ac:53:63:09:db:8b:09:51:26:3c:f0:b2:07:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:70:C9:41:98:0A:A3:FA:65:BA:12:FC:25:AA:FF:7D:C5:D3:AC
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7d:94:67:ae:10:09:93:b8:03:0a:85:35:3e:5c:c5:b4:aa:
3d:e3:ed:64:bf:fd:07:13:bb:cc:10:8e:ff:b1:0f:fa:cc:7c:
5a:63:05:ea:60:50:df:dc:83:e0:19:8c:e3:c0:c5:b1:14:0e:
1a:7b:00:d7:2f:62:8f:5c:45:19:4d:25:b4:9b:56:74:06:4c:
4b:c8:53:4f:f6:47:d3:26:07:a3:17:35:b5:c2:39:b8:bb:d3:
98:2e:6b:76:79:9e:7a:5d:98:43:1a:cf:8f:2d:28:57:39:54:
74:fc:d3:a7:64:90:29:ac:e0:99:b4:00:6c:ed:32:ad:e4:a4:
3a:be:d4:e1:5a:fa:3a:05:7a:5e:a7:0f:42:3d:ce:09:e6:6d:
58:18:17:5f:8e:2c:8b:45:65:6f:6b:e2:db:96:02:cc:b6:11:
7a:19:34:ab:67:5c:73:3f:a7:d5:3b:4f:bd:5f:f5:f8:89:29:
38:2c:0b:5b:5f:5a:51:55:cd:fb:e2:21:14:2a:02:dc:48:50:
3f:cc:d9:7f:8c:83:a4:d1:b9:2d:29:44:96:b4:9a:c0:db:22:
df:83:5f:b4:a5:19:c7:03:16:25:f9:a5:58:91:55:e0:d4:dd:
49:aa:1d:70:a7:9a:a2:32:0a:b5:55:d1:d2:f0:8d:44:90:ac:
12:31:b9:91
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpw3A2cpmPtbbHL8kulHAZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTc5MThiYmY1YWE4MGYxNDQ5MzdhZDE5NjVlYTAzZjAy
NWMyMmUwHhcNMjUxMTExMDMwMTAwWhcNMjUxMTEyMDMwMTAwWjAzMTEwLwYDVQQD
EyhmNGNkNzBjOTQxOTgwYWEzZmE2NWJhMTJmYzI1YWFmZjdkYzVkM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuU3FsAVqxEKpDC4CqXvn5sbrrRf
THPwldHEc+jjwUL8CRrltA7vRbiRCoxAeGcb2sOdILULCCcjREJa2SQwtjfEKpwC
ykAFNX4UOZAWPJmbSqRLI2AIorW75KIj+bskxBMk5FwjmGQ07ytBcASl2weM8pKg
KlRmX2kpUvB9j5Tnb0+fIu9h56T7XVL6pS6oqv+JzOTnvAIzDF12LCtklRpTJCgU
oeLtoUrutf32AcemYTQLT5LPrsqiXkKpANgUT1dPqPDb0OMU5TfB7qkhivsUvc38
hK73f9OB+aQNszPlEthLEF8PnEQcubmZzxKdSqxTYwnbiwlRJjzwsgfZJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPTNcMlBmAqj+mW6Evwlqv99xdOsMB8GA1UdIwQY
MBaAFPunkYu/WqgPFEk3rRll6gPwJcIuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02ZVJpNzlhcUE4VVNUZXRHV1hxQV9BbHdpNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUy
LWE0MzFkN2FkNjhkZC8xLzEtNmVSaTc5YXFBOFVTVGV0R1dYcUFfQWx3aTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg4LzgyMjIyMS03N2ZmLTQyZjQtYjA1Mi1hNDMxZDdhZDY4
ZGQvMS8xLTZlUmk3OWFxQThVU1RldEdXWHFBX0Fsd2k0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq32U
Z64QCZO4AwqFNT5cxbSqPePtZL/9BxO7zBCO/7EP+sx8WmMF6mBQ39yD4BmM48DF
sRQOGnsA1y9ij1xFGU0ltJtWdAZMS8hTT/ZH0yYHoxc1tcI5uLvTmC5rdnmeel2Y
QxrPjy0oVzlUdPzTp2SQKazgmbQAbO0yreSkOr7U4Vr6OgV6XqcPQj3OCeZtWBgX
X44si0Vlb2vi25YCzLYRehk0q2dccz+n1TtPvV/1+IkpOCwLW19aUVXN++IhFCoC
3EhQP8zZf4yDpNG5LSlElrSawNsi34NftKUZxwMWJfmlWJFV4NTdSaodcKeaojIK
tVXR0vCNRJCsEjG5kQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client