Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: zELFgyx9v/By5wUsIrbi3HySIpBo0HlsM1T+cUD9Twg=
Subject key identifier: 6F:43:7C:C2:9C:D1:A4:94:15:57:44:9A:EA:89:F2:4A:BA:52:CA:0D
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019A71B829AA3AD98228AFB1E2D16062AE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 11A4
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: KeoNfgZlSKz9mjnSD7Ncon/WJU3fu6cYCffXLCKq8GE=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:29:aa:3a:d9:82:28:af:b1:e2:d1:60:62:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=6f437cc29cd1a4941557449aea89f24aba52ca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:9c:46:46:06:b6:0a:7e:58:29:ac:4f:d4:
8e:1b:c0:ad:83:62:7e:e7:3b:77:1a:58:2b:3f:02:
db:73:d4:ec:4f:94:7e:2f:c8:1e:8e:e4:58:89:a8:
91:f9:c2:ec:81:2a:b4:3e:e3:ef:c8:79:79:6e:29:
b6:08:71:97:7e:b2:75:93:71:04:a5:cf:6d:01:c0:
c3:a4:2e:33:11:8e:8e:bf:45:56:cb:93:37:45:12:
2d:79:95:6a:98:53:a0:f3:4b:72:fd:19:7d:c5:5d:
e4:7e:9b:b6:f2:b8:a5:26:11:cf:5e:0b:75:fc:f0:
2e:ca:be:e0:ef:0f:88:e7:f3:af:30:07:26:09:f6:
91:33:77:98:c6:83:24:9b:64:6a:01:39:27:47:ad:
e3:37:4b:ea:0d:5d:6e:d3:54:1b:6a:47:d5:b2:a4:
b9:89:22:33:eb:5a:68:50:58:11:a1:03:36:f1:41:
93:96:32:02:ae:18:f6:b0:04:90:e7:c7:68:e7:64:
86:4a:14:5c:3c:f5:b8:c1:33:d6:2b:08:25:1d:96:
80:46:ee:14:8f:34:2a:b9:2d:b6:48:b8:c0:c8:47:
54:fe:ad:6d:0c:6d:c2:af:62:62:91:f9:45:cc:59:
a1:a9:9f:8f:b6:1a:f4:7c:98:1d:5a:ab:1d:bb:0a:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:7C:C2:9C:D1:A4:94:15:57:44:9A:EA:89:F2:4A:BA:52:CA:0D
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ad:0e:98:89:77:60:38:b0:0f:5f:21:4e:a7:3d:d4:2e:ec:
50:7c:33:cb:c8:b0:38:37:51:e8:83:14:f5:70:88:d0:ff:58:
52:62:e9:b0:3c:35:6f:4e:c3:70:e7:49:d9:ce:e6:d6:4d:4d:
70:14:81:6d:47:d2:ed:36:94:43:2b:f2:9e:07:4e:fb:a2:6a:
ac:71:e4:a6:86:f1:14:45:e7:0f:d6:74:5e:d3:4e:fb:16:53:
30:43:3f:8b:d0:69:c4:f2:44:98:0e:07:7b:13:c2:85:e0:02:
70:1e:a8:00:26:64:d6:0c:42:69:29:66:12:3e:75:8c:79:a9:
db:f8:97:c7:c7:c4:16:42:10:87:31:54:8b:28:e9:ef:63:c7:
6b:81:47:1b:1f:87:d3:f1:7f:4e:34:47:14:18:39:9d:62:3f:
c0:47:41:5e:0f:c5:51:ae:4c:61:e8:82:81:d0:3e:6c:b5:c4:
8e:74:1a:aa:7a:0c:0c:5a:01:1b:35:e6:e9:2d:32:7b:12:d6:
72:6d:f5:be:0f:ae:5c:6a:d4:a8:1b:a2:d6:19:3a:8d:b9:85:
f6:a5:eb:24:75:0e:9e:6f:ee:05:3e:0a:e9:e2:1c:0c:fe:2f:
a6:e8:3a:4f:c5:fb:b7:d3:0e:eb:9e:75:4d:0a:8c:ca:68:6a:
65:fa:7c:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxuCmqOtmCKK+x4tFgYq6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4
ZjJiYmEwHhcNMjUxMTExMDcwMTI1WhcNMjUxMTEyMDcwMTI1WjAzMTEwLwYDVQQD
Eyg2ZjQzN2NjMjljZDFhNDk0MTU1NzQ0OWFlYTg5ZjI0YWJhNTJjYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAOcRkYGtgp+WCmsT9SOG8Ctg2J+
5zt3GlgrPwLbc9TsT5R+L8gejuRYiaiR+cLsgSq0PuPvyHl5bim2CHGXfrJ1k3EE
pc9tAcDDpC4zEY6Ov0VWy5M3RRIteZVqmFOg80ty/Rl9xV3kfpu28rilJhHPXgt1
/PAuyr7g7w+I5/OvMAcmCfaRM3eYxoMkm2RqATknR63jN0vqDV1u01QbakfVsqS5
iSIz61poUFgRoQM28UGTljICrhj2sASQ58do52SGShRcPPW4wTPWKwglHZaARu4U
jzQquS22SLjAyEdU/q1tDG3Cr2JikflFzFmhqZ+Pthr0fJgdWqsduwo/jQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG9DfMKc0aSUFVdEmuqJ8kq6UsoNMB8GA1UdIwQY
MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5
LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NhLzBhNTBkMC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkw
YzAvMS8xLV9LbHBkOU5sYXdCRmNydHJSbExZbWlQSzdvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK0O
mIl3YDiwD18hTqc91C7sUHwzy8iwODdR6IMU9XCI0P9YUmLpsDw1b07DcOdJ2c7m
1k1NcBSBbUfS7TaUQyvyngdO+6JqrHHkpobxFEXnD9Z0XtNO+xZTMEM/i9BpxPJE
mA4HexPCheACcB6oACZk1gxCaSlmEj51jHmp2/iXx8fEFkIQhzFUiyjp72PHa4FH
Gx+H0/F/TjRHFBg5nWI/wEdBXg/FUa5MYeiCgdA+bLXEjnQaqnoMDFoBGzXm6S0y
exLWcm31vg+uXGrUqBui1hk6jbmF9qXrJHUOnm/uBT4K6eIcDP4vpug6T8X7t9MO
6551TQqMymhqZfp8dQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:45 2025 by rpki-client