Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: PlmfwLfojJmwqiqKRhd+iR34qNpByvR24lF/2eV9fRQ=
Subject key identifier: 71:49:2A:4E:9F:2E:85:21:C0:EA:25:66:2D:E7:5B:48:E8:D6:E8:6F
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019A24E6236F2E0A672B5B8F7720F871117E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 09:00:53 +0000
Manifest this update: Mon 27 Oct 2025 09:00:53 +0000
Manifest next update: Tue 28 Oct 2025 09:00:53 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: oHrfXhLRx5PzzeGUkmGSaw0wQx3U9SnwQRMoSrh0hNg=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:23:6f:2e:0a:67:2b:5b:8f:77:20:f8:71:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Oct 27 09:00:53 2025 GMT
Not After : Oct 28 09:00:53 2025 GMT
Subject: CN=71492a4e9f2e8521c0ea25662de75b48e8d6e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:8d:e3:e2:9e:92:91:29:0d:44:85:a4:e4:
2f:fc:46:22:f9:e0:ee:d4:20:fa:31:87:3e:8a:29:
f8:6c:ff:11:db:e3:17:8a:5b:08:f7:78:57:ef:63:
9e:92:d9:96:ff:ec:2e:25:f3:a3:a4:57:58:1e:12:
0b:b1:04:e8:78:5d:f6:26:44:62:4f:e4:8e:0e:ce:
86:17:c6:c1:a2:43:a7:f1:e2:b6:1a:4b:59:93:61:
13:78:c7:30:cd:72:0c:bd:94:83:f0:52:9d:af:e6:
cf:42:95:60:ad:28:1a:76:27:31:02:42:1a:6b:21:
d5:77:39:e3:d9:da:1b:26:d7:63:78:24:50:08:51:
2c:cf:b1:2e:75:2a:b9:d4:98:c4:a3:5c:9a:5e:c3:
25:b9:38:eb:e8:29:3f:b5:de:62:3b:a7:9f:e4:50:
2b:26:72:bc:21:91:d2:a6:1b:6b:08:00:7d:d1:fc:
f8:fc:3c:7b:89:19:ae:1b:49:89:66:77:b2:18:24:
b8:1b:07:6d:e3:f1:3b:0c:44:d3:b8:8e:58:0a:7c:
6a:92:85:07:b8:67:71:4a:d3:40:0d:ee:96:99:97:
2b:23:3d:25:9a:95:f6:e4:2f:c0:cf:85:02:ff:e2:
a0:4e:4c:02:dd:b7:5c:d3:e7:f2:c6:d4:08:2b:e3:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:2A:4E:9F:2E:85:21:C0:EA:25:66:2D:E7:5B:48:E8:D6:E8:6F
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2e:15:34:22:e1:4e:0b:6a:97:d5:58:5b:31:55:0c:f4:6a:
c4:c9:5f:8f:8b:bb:28:a2:c5:a3:d3:58:13:84:6f:7f:f3:b3:
38:41:9d:22:c7:a4:e4:87:9f:e0:6a:27:a3:52:f8:76:8e:b1:
f7:c2:2d:f1:2a:9f:52:62:80:07:8a:64:db:a0:83:0e:a6:76:
f6:16:01:a5:77:38:21:b9:9c:1d:35:b1:7d:64:c0:1e:77:c9:
2b:7a:18:ba:a3:62:57:fc:9b:66:92:b6:c1:2f:d9:ed:5d:c6:
26:0a:a9:39:c6:5a:a8:7d:f6:cc:69:b2:b8:f9:6c:a3:d6:95:
b8:29:91:09:29:c8:83:48:43:c9:a7:f4:01:4f:bc:33:88:c3:
60:77:88:17:a0:30:3d:7d:e0:39:9b:39:08:87:ad:fb:06:08:
2c:0c:ac:61:7a:d0:de:13:a2:a5:5b:22:3e:68:dd:49:95:1b:
23:3d:16:86:d8:68:bd:30:f3:7e:0f:3a:52:85:ed:d5:cb:92:
5c:63:3e:ba:9f:f6:ae:f4:76:63:01:14:f3:e7:8b:4e:04:f6:
41:d0:64:20:ba:bf:19:08:dd:af:73:0f:b3:e4:fc:0e:a2:b4:
9a:3e:a9:38:94:07:73:e1:b9:0a:06:04:4d:19:4b:f3:91:45:
9d:f0:41:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5iNvLgpnK1uPdyD4cRF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy
OTkwOTQwHhcNMjUxMDI3MDkwMDUzWhcNMjUxMDI4MDkwMDUzWjAzMTEwLwYDVQQD
Eyg3MTQ5MmE0ZTlmMmU4NTIxYzBlYTI1NjYyZGU3NWI0OGU4ZDZlODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVqN4+KekpEpDUSFpOQv/EYi+eDu
1CD6MYc+iin4bP8R2+MXilsI93hX72OektmW/+wuJfOjpFdYHhILsQToeF32JkRi
T+SODs6GF8bBokOn8eK2GktZk2ETeMcwzXIMvZSD8FKdr+bPQpVgrSgadicxAkIa
ayHVdznj2dobJtdjeCRQCFEsz7EudSq51JjEo1yaXsMluTjr6Ck/td5iO6ef5FAr
JnK8IZHSphtrCAB90fz4/Dx7iRmuG0mJZneyGCS4Gwdt4/E7DETTuI5YCnxqkoUH
uGdxStNADe6WmZcrIz0lmpX25C/Az4UC/+KgTkwC3bdc0+fyxtQIK+NooQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFJKk6fLoUhwOolZi3nW0jo1uhvMB8GA1UdIwQY
MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt
MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm
LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy4VNCLh
Tgtql9VYWzFVDPRqxMlfj4u7KKLFo9NYE4Rvf/OzOEGdIsek5Ief4Gono1L4do6x
98It8SqfUmKAB4pk26CDDqZ29hYBpXc4IbmcHTWxfWTAHnfJK3oYuqNiV/ybZpK2
wS/Z7V3GJgqpOcZaqH32zGmyuPlso9aVuCmRCSnIg0hDyaf0AU+8M4jDYHeIF6Aw
PX3gOZs5CIet+wYILAysYXrQ3hOipVsiPmjdSZUbIz0WhthovTDzfg86UoXt1cuS
XGM+up/2rvR2YwEU8+eLTgT2QdBkILq/GQjdr3MPs+T8DqK0mj6pOJQHc+G5CgYE
TRlL85FFnfBBqw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:50 2025 by rpki-client