Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: SBOaB/bQeG7yLPo5bgS8SgCuj+ZDVtnta8Sz8iptyl0=
Subject key identifier: 12:60:05:C4:03:8F:41:DE:01:F5:69:91:25:8A:99:31:39:E0:43:5E
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 019A725C831E2448C887E59A42B646A8D714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 110A
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: 1ZL72L7R+dtOr4xM4vXqGbhlcH58eURUlg6RGA7U7w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:83:1e:24:48:c8:87:e5:9a:42:b6:46:a8:d7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=126005c4038f41de01f56991258a993139e0435e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:12:46:47:b4:50:ec:64:d7:34:2a:10:c5:
ab:b1:7d:02:be:c9:14:9a:cf:e8:31:cd:5a:d5:64:
b0:39:0f:0d:d5:41:4e:d2:4f:84:f6:63:0c:22:9a:
76:d4:08:d0:e3:2e:0c:cf:af:2c:86:ff:42:fb:69:
65:ef:f8:4f:07:e5:2f:e0:b8:67:b4:e2:0a:58:2a:
e3:db:83:16:96:20:be:48:16:4d:fd:e5:c5:b2:c1:
f7:8b:35:d7:4e:2a:5c:be:2a:44:a0:e5:c0:d7:74:
20:18:04:2e:7c:49:f3:ec:53:98:fe:92:b1:0f:1b:
25:3b:7f:3f:6a:4a:a1:a4:87:33:72:5f:6e:70:be:
64:c8:c8:00:38:d5:af:81:56:89:5d:06:1a:e3:26:
28:1e:b9:e1:7c:73:e4:ab:e9:7e:12:55:36:3f:74:
21:82:c6:18:a0:bf:bc:f4:90:05:e3:32:c5:1c:01:
53:85:0c:a0:d6:33:7a:f1:a8:2b:8c:66:dc:1a:bd:
44:bf:63:1c:ae:04:b6:d2:f8:39:d9:4d:bb:41:eb:
ec:7f:e5:3f:0a:65:07:bf:bd:f2:74:74:57:6e:a8:
8a:6c:77:87:a9:0d:ad:59:ac:e5:00:f6:8e:24:5d:
51:84:60:0a:2b:3a:83:74:32:af:24:a1:88:11:cf:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:05:C4:03:8F:41:DE:01:F5:69:91:25:8A:99:31:39:E0:43:5E
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:60:64:a6:7b:45:ca:2b:fb:fc:2c:50:75:2a:f9:06:f3:b6:
ef:08:bf:84:95:22:60:50:fa:92:7f:98:e2:bd:13:ce:fc:85:
a2:02:0e:6b:70:85:b0:62:5a:1b:94:da:cc:0d:03:41:b2:c5:
90:06:03:cb:cc:51:8a:ef:0d:35:e9:a1:91:6f:04:48:26:1c:
a4:77:48:52:20:8a:cb:d3:34:e9:8b:0d:69:8c:13:cb:4a:8f:
d7:87:ac:c3:e8:a2:a9:f9:bd:d3:89:01:9b:0b:54:be:fc:62:
4d:75:dc:34:69:bb:cc:19:e2:78:bb:e5:cd:ab:f5:a9:3c:40:
9b:21:cf:a6:79:3c:90:b5:49:d9:c1:7f:9d:2b:75:6e:d2:d7:
45:5d:42:13:33:0e:eb:1c:90:c8:b8:18:1b:f7:31:03:ad:f7:
9d:c1:d8:8f:a7:ff:83:40:0f:ce:e0:9f:85:96:10:c2:c4:3a:
0b:db:51:b0:20:cb:8f:aa:c8:ff:ee:8f:3a:ba:2c:93:50:55:
bd:f3:99:a5:7a:31:85:c4:6e:99:a0:ba:55:62:d8:f9:91:17:
57:87:c2:1b:92:c9:e8:a3:0e:a2:0a:2c:2f:88:09:7e:8c:14:
cc:a7:01:11:42:73:7a:ef:d7:81:6a:22:8f:f7:6e:32:11:e7:
ae:8d:d9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXIMeJEjIh+WaQrZGqNcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0
MGY1ZDAwHhcNMjUxMTExMTAwMDU2WhcNMjUxMTEyMTAwMDU2WjAzMTEwLwYDVQQD
EygxMjYwMDVjNDAzOGY0MWRlMDFmNTY5OTEyNThhOTkzMTM5ZTA0MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c8SRke0UOxk1zQqEMWrsX0CvskU
ms/oMc1a1WSwOQ8N1UFO0k+E9mMMIpp21AjQ4y4Mz68shv9C+2ll7/hPB+Uv4Lhn
tOIKWCrj24MWliC+SBZN/eXFssH3izXXTipcvipEoOXA13QgGAQufEnz7FOY/pKx
DxslO38/akqhpIczcl9ucL5kyMgAONWvgVaJXQYa4yYoHrnhfHPkq+l+ElU2P3Qh
gsYYoL+89JAF4zLFHAFThQyg1jN68agrjGbcGr1Ev2McrgS20vg52U27Qevsf+U/
CmUHv73ydHRXbqiKbHeHqQ2tWazlAPaOJF1RhGAKKzqDdDKvJKGIEc8DiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJgBcQDj0HeAfVpkSWKmTE54ENeMB8GA1UdIwQY
MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt
YTcyYzQwNGYyNmZkLzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk
LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2BkpntF
yiv7/CxQdSr5BvO27wi/hJUiYFD6kn+Y4r0TzvyFogIOa3CFsGJaG5TazA0DQbLF
kAYDy8xRiu8NNemhkW8ESCYcpHdIUiCKy9M06YsNaYwTy0qP14esw+iiqfm904kB
mwtUvvxiTXXcNGm7zBnieLvlzav1qTxAmyHPpnk8kLVJ2cF/nSt1btLXRV1CEzMO
6xyQyLgYG/cxA633ncHYj6f/g0APzuCfhZYQwsQ6C9tRsCDLj6rI/+6POrosk1BV
vfOZpXoxhcRumaC6VWLY+ZEXV4fCG5LJ6KMOogosL4gJfowUzKcBEUJzeu/XgWoi
j/duMhHnro3ZpA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client