Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: S2SItisNgFep895BMj/y9sI8oKhgl7orDHakfEL0glk=
Subject key identifier: A3:1A:61:63:6F:24:82:EE:6F:A3:9B:68:59:43:BB:27:8D:07:49:8A
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019A2DB1F63FB50861C2AA24D4F8D986ED6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 10A7
Signing time: Wed 29 Oct 2025 02:00:28 +0000
Manifest this update: Wed 29 Oct 2025 02:00:28 +0000
Manifest next update: Thu 30 Oct 2025 02:00:28 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: 1OKlCtlLFxo2P2ObdDm4pyWGfyMysybB0wrvXOtrtkA=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:f6:3f:b5:08:61:c2:aa:24:d4:f8:d9:86:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Oct 29 02:00:28 2025 GMT
Not After : Oct 30 02:00:28 2025 GMT
Subject: CN=a31a61636f2482ee6fa39b685943bb278d07498a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:4e:3c:b8:5d:96:1b:cd:cb:92:ff:5f:04:
1a:0c:81:cb:7a:b6:26:86:69:b8:af:e0:ce:85:8f:
8a:60:96:5d:2e:90:8d:11:6a:48:a8:b9:59:87:f5:
ba:1d:fd:a3:bb:d3:b6:40:32:bb:48:80:9c:e4:51:
65:f3:c4:82:29:f2:12:72:ca:35:51:49:16:f7:bf:
de:e6:38:52:23:bc:c6:ab:18:3f:66:2e:dd:c5:7a:
e6:6f:88:c4:39:19:1f:28:8e:d9:09:b6:d9:51:20:
4f:de:ea:a6:81:53:db:91:fd:ee:61:70:10:7b:2c:
e8:80:8a:48:0a:66:00:c5:52:2a:58:02:ff:16:36:
a6:77:b3:cb:fe:3a:49:6c:90:7c:f0:20:72:45:cb:
9f:84:36:8a:9e:59:ec:33:c1:e2:83:e2:f9:84:b2:
3c:0d:7c:c0:67:0b:ff:a6:38:a9:a0:6f:e9:b3:6a:
b5:7f:3d:ac:35:c1:a3:3a:e2:6e:1d:c3:b1:e2:6b:
80:d0:d5:b3:20:c2:f9:ab:5a:cb:d9:00:e3:13:d2:
fa:b2:df:be:c9:5a:bc:d9:8d:24:0d:00:5b:61:9d:
6a:d4:2c:0e:b5:b8:39:36:cf:69:87:48:91:46:27:
58:db:a5:f8:0a:0f:e1:e2:8f:99:2f:e2:96:71:2a:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:61:63:6F:24:82:EE:6F:A3:9B:68:59:43:BB:27:8D:07:49:8A
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:62:e0:8b:dd:83:24:4b:ba:5b:43:d4:7f:8c:35:36:3a:
02:ce:84:05:c3:5e:5e:c2:87:93:2a:2b:96:68:3d:73:08:12:
72:65:c8:dd:d1:1f:76:a6:60:07:9f:7e:e8:85:e4:c7:f8:fe:
cf:33:a3:88:5d:f0:ef:e4:9d:85:58:25:c9:ff:b6:f3:82:26:
f5:fc:83:27:d1:fd:87:6a:0e:55:02:5d:d4:b9:db:3a:14:08:
f2:67:0d:52:84:62:4d:8a:69:c4:06:00:dc:0a:c2:37:c5:e5:
fe:a1:df:d1:85:c6:bd:28:35:24:7a:fd:2c:6a:fe:1c:d9:5f:
78:5e:7e:5f:ff:4b:0f:1c:e5:a0:57:92:5a:5f:69:3e:7f:74:
7f:37:85:cd:3b:86:a2:16:1a:7f:ee:09:1c:3d:c7:d9:c4:c6:
bf:e0:f8:ee:52:a4:a0:bc:4a:41:c2:a4:6d:91:7e:8e:57:20:
af:00:61:f0:23:03:ee:25:4f:fa:fa:d1:e3:55:e3:5a:c1:c8:
b5:68:a2:32:04:a5:c3:47:4e:1d:18:b0:d2:b1:76:3a:39:ab:
cc:51:e5:bd:1e:65:01:2a:fb:b6:28:e3:f8:1e:17:2b:7d:4a:
97:60:96:97:df:fe:f5:02:54:8c:0c:0d:cb:81:78:24:77:1e:
b1:99:35:4a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZotsfY/tQhhwqok1PjZhu1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1
ZTJkODAwHhcNMjUxMDI5MDIwMDI4WhcNMjUxMDMwMDIwMDI4WjAzMTEwLwYDVQQD
EyhhMzFhNjE2MzZmMjQ4MmVlNmZhMzliNjg1OTQzYmIyNzhkMDc0OThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KpOPLhdlhvNy5L/XwQaDIHLerYm
hmm4r+DOhY+KYJZdLpCNEWpIqLlZh/W6Hf2ju9O2QDK7SICc5FFl88SCKfIScso1
UUkW97/e5jhSI7zGqxg/Zi7dxXrmb4jEORkfKI7ZCbbZUSBP3uqmgVPbkf3uYXAQ
eyzogIpICmYAxVIqWAL/Fjamd7PL/jpJbJB88CByRcufhDaKnlnsM8Hig+L5hLI8
DXzAZwv/pjipoG/ps2q1fz2sNcGjOuJuHcOx4muA0NWzIML5q1rL2QDjE9L6st++
yVq82Y0kDQBbYZ1q1CwOtbg5Ns9ph0iRRidY26X4Cg/h4o+ZL+KWcSoFFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKMaYWNvJILub6ObaFlDuyeNB0mKMB8GA1UdIwQY
MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk
LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2
MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHahi
4IvdgyRLultD1H+MNTY6As6EBcNeXsKHkyorlmg9cwgScmXI3dEfdqZgB59+6IXk
x/j+zzOjiF3w7+SdhVglyf+284Im9fyDJ9H9h2oOVQJd1LnbOhQI8mcNUoRiTYpp
xAYA3ArCN8Xl/qHf0YXGvSg1JHr9LGr+HNlfeF5+X/9LDxzloFeSWl9pPn90fzeF
zTuGohYaf+4JHD3H2cTGv+D47lKkoLxKQcKkbZF+jlcgrwBh8CMD7iVP+vrR41Xj
WsHItWiiMgSlw0dOHRiw0rF2OjmrzFHlvR5lASr7tijj+B4XK31Kl2CWl9/+9QJU
jAwNy4F4JHcesZk1Sg==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:49:01 2025 by rpki-client