Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: YKgYuyn59FrmiSIVOmTi2aA4DvV7Zm6tGVXtwzO9+Io=
Subject key identifier: 43:E2:6E:A6:32:97:6E:80:C8:2E:73:50:E5:FE:C6:DD:49:A7:81:2A
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 019A1C19A9B296C3AB27525D4A37DE529E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 1017
Signing time: Sat 25 Oct 2025 16:00:35 +0000
Manifest this update: Sat 25 Oct 2025 16:00:35 +0000
Manifest next update: Sun 26 Oct 2025 16:00:35 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: XIOzPd1lUaFZofINK8ztaKdIhYAtP+u2pAe2FEAAogQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:a9:b2:96:c3:ab:27:52:5d:4a:37:de:52:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Oct 25 16:00:35 2025 GMT
Not After : Oct 26 16:00:35 2025 GMT
Subject: CN=43e26ea632976e80c82e7350e5fec6dd49a7812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:07:e6:20:93:55:4c:42:d2:15:62:65:9c:
ad:44:b6:50:79:7b:df:1c:12:c0:de:2c:dc:7b:05:
56:d8:21:e3:d5:4d:6f:dd:96:21:49:8e:fc:a8:46:
e2:81:0f:ac:48:da:6b:c0:c6:ce:0e:b1:ab:11:50:
1d:60:92:0b:26:1a:42:d9:45:02:a0:d2:eb:fe:08:
db:c7:e8:69:33:6b:c2:ee:d3:64:e9:b7:72:97:2f:
92:f4:13:4c:d0:84:34:18:ee:41:fc:54:db:eb:3a:
ff:f3:45:73:1c:3b:c7:b2:bb:17:fd:3d:b5:99:e0:
1e:84:36:eb:c9:31:ef:b5:32:ac:e3:83:93:18:e4:
71:8e:26:93:fd:71:c1:28:62:e7:ab:aa:52:2a:77:
3b:49:3b:c1:a9:dc:ba:d6:76:0c:7b:d3:81:fd:86:
2f:66:71:fa:dc:6d:5e:9e:5f:4c:fa:ac:45:d7:21:
97:7d:fb:18:c0:c6:30:98:e8:8b:a1:3a:a4:29:49:
3a:e3:b4:a1:ec:32:39:05:55:ba:1d:0a:a1:c6:05:
37:bd:39:18:28:14:ed:e5:11:9a:d0:97:7d:48:1d:
3a:e1:dc:a5:f6:78:c8:66:3f:32:2d:03:b1:92:d3:
bb:bd:d4:65:68:e2:47:c8:a5:e9:97:fb:2c:3c:c5:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:6E:A6:32:97:6E:80:C8:2E:73:50:E5:FE:C6:DD:49:A7:81:2A
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:ba:01:b7:97:14:04:c2:f0:44:15:9d:00:0f:fb:00:76:
8d:90:20:fc:7a:eb:6d:cb:49:8e:e7:4f:4f:67:86:e1:8b:b9:
26:38:00:dd:78:2f:9e:7b:44:f9:1a:df:f9:04:03:38:32:9f:
91:de:d4:40:2b:26:c8:55:a8:20:08:10:fd:6f:63:a2:4b:e2:
97:a0:59:79:65:0f:0d:b5:94:71:53:54:3e:9c:d4:81:0f:ed:
b6:6b:37:6c:84:4a:65:2e:01:b9:bb:f6:22:66:a0:26:c0:91:
23:70:b2:43:3b:18:bb:6a:eb:b5:18:c9:bf:aa:a9:f7:de:ca:
1c:4f:c3:16:b4:e1:46:c1:b0:f2:f7:2c:50:2a:fe:32:f4:a3:
f5:fd:15:32:56:7b:63:d2:d0:8d:92:4e:4d:7f:f1:10:04:6c:
aa:ba:4f:7f:fa:78:c0:f8:57:27:54:18:84:de:5d:50:0c:88:
f0:4a:de:c0:75:31:27:13:91:2a:48:3c:f0:6a:7b:bd:ff:a5:
80:9b:e2:a9:64:ad:07:62:d0:33:de:78:64:eb:3b:c6:8d:8c:
5f:21:9c:26:a1:3e:9d:d1:5d:42:bf:38:cd:6f:44:8c:8f:04:
4b:83:9d:f8:a2:41:09:5b:cc:c5:b8:f6:7a:af:50:4c:05:18:
48:2c:e0:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocGamylsOrJ1JdSjfeUp4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz
NWI3ZTkwHhcNMjUxMDI1MTYwMDM1WhcNMjUxMDI2MTYwMDM1WjAzMTEwLwYDVQQD
Eyg0M2UyNmVhNjMyOTc2ZTgwYzgyZTczNTBlNWZlYzZkZDQ5YTc4MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttIH5iCTVUxC0hViZZytRLZQeXvf
HBLA3izcewVW2CHj1U1v3ZYhSY78qEbigQ+sSNprwMbODrGrEVAdYJILJhpC2UUC
oNLr/gjbx+hpM2vC7tNk6bdyly+S9BNM0IQ0GO5B/FTb6zr/80VzHDvHsrsX/T21
meAehDbryTHvtTKs44OTGORxjiaT/XHBKGLnq6pSKnc7STvBqdy61nYMe9OB/YYv
ZnH63G1enl9M+qxF1yGXffsYwMYwmOiLoTqkKUk647Sh7DI5BVW6HQqhxgU3vTkY
KBTt5RGa0Jd9SB064dyl9njIZj8yLQOxktO7vdRlaOJHyKXpl/ssPMUFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPibqYyl26AyC5zUOX+xt1Jp4EqMB8GA1UdIwQY
MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt
Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw
LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoS6AbeX
FATC8EQVnQAP+wB2jZAg/HrrbctJjudPT2eG4Yu5JjgA3XgvnntE+Rrf+QQDODKf
kd7UQCsmyFWoIAgQ/W9jokvil6BZeWUPDbWUcVNUPpzUgQ/ttms3bIRKZS4Bubv2
ImagJsCRI3CyQzsYu2rrtRjJv6qp997KHE/DFrThRsGw8vcsUCr+MvSj9f0VMlZ7
Y9LQjZJOTX/xEARsqrpPf/p4wPhXJ1QYhN5dUAyI8ErewHUxJxORKkg88Gp7vf+l
gJviqWStB2LQM954ZOs7xo2MXyGcJqE+ndFdQr84zW9EjI8ES4Od+KJBCVvMxbj2
eq9QTAUYSCzgwg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:14:19 2025 by rpki-client