Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
File: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json)
Hash identifier: CtwMQJh2s0NOYd7ctl4070O4FbHf2v6I54sFp1gPgj4=
Subject key identifier: E9:49:13:F0:1A:EE:82:08:02:75:4C:2B:07:83:6E:6A:10:08:BF:EA
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 019A7225E6B71CD3A29C2E762EDC7D90CE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: kN6WHv5mwiNqcaAff7gYrhxonLMnw6eVYkKFQZ1ahW8=)
2: OialHmpN2PfgJDs6a7B2v4zJHRs.roa (hash: Xr6Ys8oUxUhvsBwxBXXCldMQezaqpARcpSeHUjpkSck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e6:b7:1c:d3:a2:9c:2e:76:2e:dc:7d:90:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=e94913f01aee820802754c2b07836e6a1008bfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:62:8c:4b:08:3e:15:5f:9e:27:66:5a:68:
46:99:ce:31:be:03:19:c3:1a:3b:4e:ef:d1:de:a5:
97:c8:28:f5:90:e0:07:e7:e2:ad:9b:c2:8f:5c:9f:
42:ea:ec:ff:27:fe:07:18:3f:b5:30:98:06:3b:8a:
fe:6c:7d:f3:1f:e7:90:fa:4e:be:68:09:52:08:32:
a6:a5:4d:1e:25:15:39:ab:f9:9c:df:a3:09:17:f9:
73:d5:67:ab:80:4d:de:38:e4:7a:a8:4e:91:0e:2a:
9d:ec:06:38:5a:c2:97:5b:22:cc:51:7f:bd:1b:c1:
0a:89:4b:54:a8:66:4e:6e:0b:1a:01:a8:78:81:ca:
5e:cf:1e:00:8c:ba:b2:4c:56:f5:46:84:c1:f9:87:
90:c2:0a:83:05:f0:27:f8:b2:7b:f8:b6:28:7d:f5:
c6:20:a7:ff:c5:b5:8d:92:e7:37:c2:0f:cc:ae:f5:
1f:50:83:23:a9:23:4c:04:5d:2c:3c:14:71:35:63:
70:a3:69:a0:3b:2e:57:10:19:87:d4:4f:74:15:4d:
a8:4f:72:d4:63:4c:d4:2e:dc:5b:78:09:64:e2:0d:
b7:97:e4:43:54:75:07:a1:84:6e:eb:12:29:b8:52:
60:01:a1:71:fe:05:ef:93:51:6b:bc:e6:68:26:1d:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:13:F0:1A:EE:82:08:02:75:4C:2B:07:83:6E:6A:10:08:BF:EA
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:09:61:d8:1c:56:93:d4:f7:4e:fe:f5:d6:84:f0:fd:9a:6d:
57:78:28:d2:c4:3b:d1:4e:1b:9c:61:11:58:fe:93:80:c4:d8:
1a:a8:9d:d3:47:64:6e:63:c4:ac:ab:09:ba:54:6e:16:e9:10:
1c:d1:9e:99:ae:35:a7:96:24:52:fb:2a:89:b9:8a:68:ae:0f:
a7:d3:eb:87:29:99:70:eb:df:b8:e2:f7:b6:08:ee:6e:1c:eb:
27:42:43:9b:db:5f:49:1f:16:f8:ef:fe:de:6c:19:4b:fd:4b:
43:97:da:c1:9c:fb:90:2e:0d:3d:26:fd:48:84:38:7a:8e:b2:
34:bf:fa:11:fc:7c:31:5e:35:3a:17:8f:76:d7:64:93:54:26:
9b:6f:83:48:ed:19:fc:2d:a7:36:33:34:4e:79:0a:4b:30:8b:
7a:44:92:20:cb:78:97:36:29:38:9a:b3:22:a2:5a:3b:af:86:
f4:45:ad:c6:8b:f5:51:c3:0e:a7:b3:1e:ba:80:72:14:c4:90:
3f:00:28:21:f2:7c:60:ef:52:36:03:61:db:1e:4a:20:ec:18:
4a:a1:68:fb:21:00:22:1c:2f:7c:9f:41:34:24:ff:f3:b8:8d:
94:f3:86:90:cb:6e:03:33:d5:19:b2:8b:2f:58:90:c3:07:4b:
15:39:3f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJea3HNOinC52Ltx9kM4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Q1NTI5YmRhMTc3MTNlYmU2YjRjMjJmN2ZjZTRjYjhm
MWU4YjMwHhcNMjUxMTExMDkwMTE3WhcNMjUxMTEyMDkwMTE3WjAzMTEwLwYDVQQD
EyhlOTQ5MTNmMDFhZWU4MjA4MDI3NTRjMmIwNzgzNmU2YTEwMDhiZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFijEsIPhVfnidmWmhGmc4xvgMZ
wxo7Tu/R3qWXyCj1kOAH5+Ktm8KPXJ9C6uz/J/4HGD+1MJgGO4r+bH3zH+eQ+k6+
aAlSCDKmpU0eJRU5q/mc36MJF/lz1WergE3eOOR6qE6RDiqd7AY4WsKXWyLMUX+9
G8EKiUtUqGZObgsaAah4gcpezx4AjLqyTFb1RoTB+YeQwgqDBfAn+LJ7+LYoffXG
IKf/xbWNkuc3wg/MrvUfUIMjqSNMBF0sPBRxNWNwo2mgOy5XEBmH1E90FU2oT3LU
Y0zULtxbeAlk4g23l+RDVHUHoYRu6xIpuFJgAaFx/gXvk1FrvOZoJh13yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlJE/Aa7oIIAnVMKweDbmoQCL/qMB8GA1UdIwQY
MBaAFNY9VSm9oXcT6+a0wi9/zky48eizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWIt
Y2RjZjVmNmE0YzI3LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWItY2RjZjVmNmE0YzI3
LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Qlh2BxW
k9T3Tv711oTw/ZptV3go0sQ70U4bnGERWP6TgMTYGqid00dkbmPErKsJulRuFukQ
HNGema41p5YkUvsqibmKaK4Pp9PrhymZcOvfuOL3tgjubhzrJ0JDm9tfSR8W+O/+
3mwZS/1LQ5fawZz7kC4NPSb9SIQ4eo6yNL/6Efx8MV41OhePdtdkk1Qmm2+DSO0Z
/C2nNjM0TnkKSzCLekSSIMt4lzYpOJqzIqJaO6+G9EWtxov1UcMOp7MeuoByFMSQ
PwAoIfJ8YO9SNgNh2x5KIOwYSqFo+yEAIhwvfJ9BNCT/87iNlPOGkMtuAzPVGbKL
L1iQwwdLFTk/+A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:22 2025 by rpki-client