Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: 7cMxu9snJTXffJz1TL6nC4DI3ieucxa25+dLE6q3KXU=
Subject key identifier: B2:31:20:10:41:71:1C:94:70:C8:26:5D:06:9B:9A:3E:95:E1:49:6A
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019A0D140B3331264AFBBA222181035B8118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 11E6
Signing time: Wed 22 Oct 2025 18:00:08 +0000
Manifest this update: Wed 22 Oct 2025 18:00:08 +0000
Manifest next update: Thu 23 Oct 2025 18:00:08 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: UzdZEdj4xpnqiIuO4sZN2r/SSQaC4NqesCliPiebUyY=)
2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:14:0b:33:31:26:4a:fb:ba:22:21:81:03:5b:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Oct 22 18:00:08 2025 GMT
Not After : Oct 23 18:00:08 2025 GMT
Subject: CN=b231201041711c9470c8265d069b9a3e95e1496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:93:05:05:f3:ec:c8:31:1d:07:90:95:b0:
0a:f1:03:b2:6e:4d:e3:e7:a0:60:02:aa:43:da:a4:
0a:a2:65:72:7b:22:7a:45:a1:10:f8:7b:b3:73:2a:
b7:be:2b:59:9e:d4:c8:69:2d:79:17:27:87:cc:ce:
f7:15:c0:bf:41:5f:f7:16:2a:45:1c:23:24:b9:b2:
5c:17:40:33:f0:e0:b0:e1:e3:b5:be:32:55:4b:e3:
65:e2:d5:db:fb:89:5d:1d:11:8c:50:44:14:52:d8:
3f:32:e5:c0:62:fe:cc:c3:cb:11:2e:53:68:4d:99:
19:4b:81:28:c5:b3:aa:a2:3b:57:04:57:f8:86:c9:
b8:a1:f7:2d:ec:dc:6c:f5:3a:23:ba:fd:3d:2b:2c:
6f:3b:07:43:4b:7a:59:36:e9:64:37:19:06:25:c5:
89:f8:18:80:0a:a2:b5:d2:9a:74:3f:95:73:67:d5:
97:9c:45:3c:29:e8:2a:d5:fe:8a:13:88:8d:03:83:
f9:48:4c:ba:94:87:2a:5c:fc:72:96:f4:6b:36:77:
4c:79:b9:f5:19:33:10:c1:8e:ba:8a:25:3f:9a:60:
1d:8c:81:cc:bf:2f:2c:97:75:d2:a7:b5:cd:2b:ce:
94:80:71:9a:43:0d:d5:83:b9:cd:fc:eb:97:e8:27:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:20:10:41:71:1C:94:70:C8:26:5D:06:9B:9A:3E:95:E1:49:6A
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:75:95:24:0e:0b:86:b6:4a:e1:08:ed:b5:86:8f:4f:b4:15:
fc:c5:67:be:ad:89:30:b6:90:47:3a:27:16:21:57:5c:23:92:
4a:f9:8c:6e:0d:69:c0:5b:ff:80:36:b5:ba:16:7c:3f:ee:dd:
79:5c:0b:e2:1f:d8:19:9c:ae:7c:9a:ae:2b:6e:84:3c:28:f8:
b5:fb:54:9e:06:0f:45:e1:65:3d:df:a2:c2:2b:d2:53:a1:d8:
c0:33:2d:32:74:c5:16:79:1d:91:8c:ba:15:18:a7:3d:b7:90:
56:ad:80:cd:75:e1:3e:d7:19:17:5b:cd:5e:ce:a6:fe:7b:a8:
8c:1f:33:19:43:bd:4a:89:07:9d:b7:2f:a3:20:fa:09:4b:a0:
f1:0f:34:73:69:db:60:a0:06:1c:9d:af:47:1e:01:b0:34:18:
7e:a5:bf:69:06:c9:bf:3c:8e:ca:a1:9d:46:5b:c2:0f:38:ae:
b3:d5:2f:bd:e0:0c:3c:4c:69:aa:bb:c8:78:db:f9:5c:63:82:
63:9c:dd:50:83:8d:4e:33:71:be:63:d9:54:28:3c:b2:ef:ee:
d0:ed:d4:97:4b:82:e1:cd:34:3b:4c:fe:db:6a:21:a9:43:80:
4a:de:c2:b7:44:ab:e9:6b:50:31:d7:48:d4:06:db:a6:20:cd:
47:63:f8:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNFAszMSZK+7oiIYEDW4EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjUxMDIyMTgwMDA4WhcNMjUxMDIzMTgwMDA4WjAzMTEwLwYDVQQD
EyhiMjMxMjAxMDQxNzExYzk0NzBjODI2NWQwNjliOWEzZTk1ZTE0OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZyTBQXz7MgxHQeQlbAK8QOybk3j
56BgAqpD2qQKomVyeyJ6RaEQ+Huzcyq3vitZntTIaS15FyeHzM73FcC/QV/3FipF
HCMkubJcF0Az8OCw4eO1vjJVS+Nl4tXb+4ldHRGMUEQUUtg/MuXAYv7Mw8sRLlNo
TZkZS4EoxbOqojtXBFf4hsm4ofct7Nxs9Tojuv09KyxvOwdDS3pZNulkNxkGJcWJ
+BiACqK10pp0P5VzZ9WXnEU8Kegq1f6KE4iNA4P5SEy6lIcqXPxylvRrNndMebn1
GTMQwY66iiU/mmAdjIHMvy8sl3XSp7XNK86UgHGaQw3Vg7nN/OuX6CdOQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIxIBBBcRyUcMgmXQabmj6V4UlqMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXWVJA4L
hrZK4QjttYaPT7QV/MVnvq2JMLaQRzonFiFXXCOSSvmMbg1pwFv/gDa1uhZ8P+7d
eVwL4h/YGZyufJquK26EPCj4tftUngYPReFlPd+iwivSU6HYwDMtMnTFFnkdkYy6
FRinPbeQVq2AzXXhPtcZF1vNXs6m/nuojB8zGUO9SokHnbcvoyD6CUug8Q80c2nb
YKAGHJ2vRx4BsDQYfqW/aQbJvzyOyqGdRlvCDzius9UvveAMPExpqrvIeNv5XGOC
Y5zdUIONTjNxvmPZVCg8su/u0O3Ul0uC4c00O0z+22ohqUOASt7Ct0Sr6WtQMddI
1AbbpiDNR2P4cQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 20:45:48 2025 by rpki-client