Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: rkwyRUyhU84PDLp0XKtbPFBmdgFELCE67E4P7J0uzp0=
Subject key identifier: 75:01:B8:EC:B0:0D:52:F4:08:EC:C9:CD:53:B5:79:39:31:86:5E:A9
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019A7112B31E1D023232E478B697BA0F9383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0E90
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: PWtG2LpVt5obc2LA0G43QMesVQnKwiS0ro261Ln5uVM=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b3:1e:1d:02:32:32:e4:78:b6:97:ba:0f:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=7501b8ecb00d52f408ecc9cd53b5793931865ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:ac:47:61:96:65:36:2c:3e:29:5c:af:7f:
dc:c7:79:22:38:4b:e1:d6:f5:10:52:ab:0b:ec:39:
65:1b:64:bf:be:35:d2:e9:a9:ce:dd:d3:18:16:1b:
0a:95:b3:04:a3:5c:4a:91:be:b0:77:b6:90:82:8e:
59:38:93:ae:ac:8d:4c:35:df:7d:38:c7:2b:2f:14:
16:aa:6c:01:41:0f:a1:6b:2c:e3:3c:5b:e8:f5:5a:
2c:ac:bb:02:76:d0:f1:95:18:b4:e4:02:18:b5:95:
ce:97:10:df:f1:58:af:40:96:14:f7:4f:2a:22:10:
d6:cb:8b:e3:c8:09:20:a8:7c:7b:86:0b:2f:19:bf:
d1:3f:4a:0b:4a:19:1c:be:d8:19:98:b8:c8:c1:5f:
e1:31:95:17:59:c7:cf:a0:78:34:aa:e5:94:b1:12:
4b:12:fb:07:0b:7d:21:65:7d:ba:e4:f4:33:f9:df:
66:08:2f:08:79:4c:3d:e3:41:34:e0:dc:43:d2:41:
04:f2:86:cb:5f:4a:e3:6a:5f:e1:8e:62:da:89:10:
21:68:74:36:4a:6e:32:c7:12:f9:ec:04:63:da:d6:
03:0e:62:79:a0:ad:c6:a2:03:6d:5e:23:09:bb:0d:
aa:19:1a:70:ef:7c:33:c9:9c:7f:bd:39:29:aa:c3:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:B8:EC:B0:0D:52:F4:08:EC:C9:CD:53:B5:79:39:31:86:5E:A9
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:3e:95:55:04:d9:01:01:a7:bf:a8:f9:75:45:c1:70:38:
ee:cc:f5:84:b8:3b:37:c8:5f:67:ca:e6:14:f3:2c:c3:d5:3b:
2d:b6:c0:e8:7c:f2:47:93:1b:01:8d:8d:ee:b6:ce:17:72:26:
38:3b:f5:25:70:86:32:85:23:32:f3:23:b3:7c:7d:e6:20:20:
e8:dd:06:53:0e:ef:5d:68:b4:fa:36:a9:0e:6b:23:bc:63:12:
68:36:17:c2:37:4b:9d:78:48:cd:47:e4:74:1b:81:8f:3c:ee:
67:1b:be:36:0d:95:48:5e:a8:f4:d2:1b:0f:03:f9:2d:08:f7:
32:ab:91:6d:3e:4e:d6:0c:23:d5:83:57:f5:2b:d7:50:e4:f1:
7c:f1:00:2c:1e:a0:9c:57:95:38:33:d1:29:a8:60:f1:f4:a4:
3a:c8:fc:0f:48:28:a5:e9:3b:e1:21:88:f7:84:0c:1b:3b:71:
5d:8a:98:4c:09:07:2b:b0:96:0d:09:f3:c7:6d:ce:f3:90:15:
9a:8a:40:a7:c9:5d:7d:33:02:24:d6:a0:51:2a:b4:b4:b7:ad:
2a:bf:61:5b:16:66:63:08:63:e8:2e:84:5d:72:26:f2:4b:c9:
1a:86:1c:29:d7:34:91:cf:d3:60:e1:f0:51:32:0f:5b:7c:96:
2e:b9:d7:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxErMeHQIyMuR4tpe6D5ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWRlMzdiYmM2YzA2NDIwZGE2MjZjMGJiNGQ3MjMyMzFl
OTNlODQwHhcNMjUxMTExMDQwMDQyWhcNMjUxMTEyMDQwMDQyWjAzMTEwLwYDVQQD
Eyg3NTAxYjhlY2IwMGQ1MmY0MDhlY2M5Y2Q1M2I1NzkzOTMxODY1ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dGsR2GWZTYsPilcr3/cx3kiOEvh
1vUQUqsL7DllG2S/vjXS6anO3dMYFhsKlbMEo1xKkb6wd7aQgo5ZOJOurI1MNd99
OMcrLxQWqmwBQQ+hayzjPFvo9VosrLsCdtDxlRi05AIYtZXOlxDf8VivQJYU908q
IhDWy4vjyAkgqHx7hgsvGb/RP0oLShkcvtgZmLjIwV/hMZUXWcfPoHg0quWUsRJL
EvsHC30hZX265PQz+d9mCC8IeUw940E04NxD0kEE8obLX0rjal/hjmLaiRAhaHQ2
Sm4yxxL57ARj2tYDDmJ5oK3GogNtXiMJuw2qGRpw73wzyZx/vTkpqsOK6wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHUBuOywDVL0COzJzVO1eTkxhl6pMB8GA1UdIwQY
MBaAFPod43u8bAZCDaYmwLtNcjIx6T6EMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oM2plN3hzQmtJTnBpYkF1MDF5TWpIcFBvUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZkLThjZDEtNDk5ZS1hNTE4
LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJBdTAxeU1qSHBQb1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzYwOGY2ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2
ODAvMS8xLWgzamU3eHNCa0lOcGliQXUwMXlNakhwUG9RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3M+
lVUE2QEBp7+o+XVFwXA47sz1hLg7N8hfZ8rmFPMsw9U7LbbA6HzyR5MbAY2N7rbO
F3ImODv1JXCGMoUjMvMjs3x95iAg6N0GUw7vXWi0+japDmsjvGMSaDYXwjdLnXhI
zUfkdBuBjzzuZxu+Ng2VSF6o9NIbDwP5LQj3MquRbT5O1gwj1YNX9SvXUOTxfPEA
LB6gnFeVODPRKahg8fSkOsj8D0gopek74SGI94QMGztxXYqYTAkHK7CWDQnzx23O
85AVmopAp8ldfTMCJNagUSq0tLetKr9hWxZmYwhj6C6EXXIm8kvJGoYcKdc0kc/T
YOHwUTIPW3yWLrnXGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:13 2025 by rpki-client