Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: 6kEOLOJHrcahdv/a5L3cneh9mIz8VWclXVms4cZAFC0=
Subject key identifier: DB:95:DD:E6:93:2C:7E:9F:30:49:02:16:67:E3:DD:F0:50:0C:C6:4C
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019A4C2A89D61E3B5C7CE3AACB8C053BEE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0943
Signing time: Tue 04 Nov 2025 00:00:47 +0000
Manifest this update: Tue 04 Nov 2025 00:00:47 +0000
Manifest next update: Wed 05 Nov 2025 00:00:47 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: /ZJLq0qwcbuMPG7B1HdeA2NUCeW/JVgaLs/tzyjD1YM=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:89:d6:1e:3b:5c:7c:e3:aa:cb:8c:05:3b:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Nov 4 00:00:47 2025 GMT
Not After : Nov 5 00:00:47 2025 GMT
Subject: CN=db95dde6932c7e9f3049021667e3ddf0500cc64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:33:19:51:06:80:6f:36:ca:91:b7:f0:fd:
d1:f1:9e:24:fd:6f:81:f1:4e:e8:86:a9:1f:3d:5b:
a5:8b:a3:7e:d8:45:67:cf:bd:5f:5b:66:ad:c8:ff:
ca:43:a4:b4:a1:54:0c:ba:18:79:4c:45:41:30:de:
07:7c:cf:a1:95:ed:e1:6b:7f:88:c3:9f:22:96:5e:
69:92:f2:ae:42:de:dd:60:3b:5f:e0:77:d2:6c:a4:
6e:a0:07:f4:d4:c0:7c:1a:6a:b5:dc:85:d7:fe:36:
fb:5c:e8:b7:3e:c0:8b:73:d1:71:cf:ea:ba:a4:12:
ba:30:dc:8e:6b:0a:a6:8b:ff:0c:1e:bf:e6:6e:55:
fd:16:b0:ce:21:8c:e8:b1:ec:08:e5:ab:5e:8c:91:
73:a8:43:d6:d6:6f:15:e4:49:dc:16:f3:c6:67:74:
4d:14:47:a4:d1:dd:66:86:ee:b3:b0:d5:4c:e0:c8:
24:0c:22:7b:7d:40:40:84:2a:3f:2e:31:dd:af:78:
08:65:48:bd:06:70:2a:7e:92:6f:6d:3e:d2:b1:08:
01:0c:1d:39:2c:41:fd:70:45:07:a8:0e:e2:89:fa:
80:1c:ef:7a:38:55:02:fb:16:47:92:b6:d1:71:c0:
06:24:f0:c4:e4:3c:7b:89:dc:32:f0:f5:93:e7:80:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:DD:E6:93:2C:7E:9F:30:49:02:16:67:E3:DD:F0:50:0C:C6:4C
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:1c:e9:f9:f5:63:18:4e:63:20:92:d3:de:c9:0b:5f:f2:
45:2f:e9:dc:72:e3:c8:bb:ff:62:e1:77:f6:31:30:69:06:4e:
9c:bd:35:cf:29:38:bc:6d:24:d1:cd:57:37:c7:dc:c4:d2:4e:
3c:ef:2b:45:d1:81:6e:04:2a:88:db:e4:b0:f6:63:64:4f:16:
16:48:a1:f2:e2:fc:18:f7:6d:69:dd:3e:b5:22:6f:ae:be:8d:
94:f9:28:32:f5:3f:e8:15:45:35:c8:20:e3:4f:a3:9c:a4:d2:
54:42:0d:5b:48:62:62:b1:be:25:87:e0:68:9c:46:33:b8:19:
85:50:c7:48:05:ff:26:93:3c:f3:68:a4:27:d7:a9:70:f6:1c:
eb:41:36:f2:21:f0:51:73:a3:7b:0c:26:51:75:e1:80:8a:73:
90:cd:cc:d7:56:22:a0:79:a8:b9:8e:1b:10:20:59:4f:93:06:
49:2f:07:c8:56:0d:cc:71:12:ac:76:d0:ed:ec:bf:ba:72:9b:
de:1a:db:fa:7f:21:52:bd:af:5a:29:f5:31:b7:32:60:e2:bd:
c1:d3:5c:93:1c:4b:e3:8e:1f:a4:ce:8d:b6:1a:ba:1d:13:6a:
84:e7:3b:c0:09:08:b2:ba:b0:11:7f:90:aa:8f:46:9a:5a:0b:
07:b7:62:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMKonWHjtcfOOqy4wFO+6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjUxMTA0MDAwMDQ3WhcNMjUxMTA1MDAwMDQ3WjAzMTEwLwYDVQQD
EyhkYjk1ZGRlNjkzMmM3ZTlmMzA0OTAyMTY2N2UzZGRmMDUwMGNjNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDAzGVEGgG82ypG38P3R8Z4k/W+B
8U7ohqkfPVuli6N+2EVnz71fW2atyP/KQ6S0oVQMuhh5TEVBMN4HfM+hle3ha3+I
w58ill5pkvKuQt7dYDtf4HfSbKRuoAf01MB8Gmq13IXX/jb7XOi3PsCLc9Fxz+q6
pBK6MNyOawqmi/8MHr/mblX9FrDOIYzosewI5atejJFzqEPW1m8V5EncFvPGZ3RN
FEek0d1mhu6zsNVM4MgkDCJ7fUBAhCo/LjHdr3gIZUi9BnAqfpJvbT7SsQgBDB05
LEH9cEUHqA7iifqAHO96OFUC+xZHkrbRccAGJPDE5Dx7idwy8PWT54DBTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuV3eaTLH6fMEkCFmfj3fBQDMZMMB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPd8c6fn1
YxhOYyCS097JC1/yRS/p3HLjyLv/YuF39jEwaQZOnL01zyk4vG0k0c1XN8fcxNJO
PO8rRdGBbgQqiNvksPZjZE8WFkih8uL8GPdtad0+tSJvrr6NlPkoMvU/6BVFNcgg
40+jnKTSVEINW0hiYrG+JYfgaJxGM7gZhVDHSAX/JpM882ikJ9epcPYc60E28iHw
UXOjewwmUXXhgIpzkM3M11YioHmouY4bECBZT5MGSS8HyFYNzHESrHbQ7ey/unKb
3hrb+n8hUr2vWin1MbcyYOK9wdNckxxL444fpM6Nthq6HRNqhOc7wAkIsrqwEX+Q
qo9GmloLB7diLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:23:36 2025 by rpki-client