Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: Mc5qMc9/z1khgyNpLvRblLwYujLJFR4fE6CaoKK8Tmc=
Subject key identifier: 0F:A0:72:F8:F5:E9:C1:7A:11:8C:12:1A:C5:78:12:03:BE:A7:BE:0A
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 019A71B7C2835111C904112E40C7D200DD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 108B
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: Cwa4NGCs6UBJe4kY4EhGqMQLYRgqeMwAzaqBzzHHdVA=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c2:83:51:11:c9:04:11:2e:40:c7:d2:00:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=0fa072f8f5e9c17a118c121ac5781203bea7be0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:95:dc:58:48:6e:47:4a:24:ee:ac:7a:7b:
46:06:65:be:48:77:26:bc:0a:d5:d4:7d:e4:bd:c5:
3c:cb:5f:c1:13:7f:0b:7f:8e:83:fc:98:65:61:86:
2f:9b:3f:1d:73:d7:30:14:be:98:11:8c:88:a5:f8:
a6:0b:e7:45:77:77:b6:8f:69:93:9d:9c:a3:19:87:
04:76:6e:2b:14:bd:25:93:20:a8:c2:d4:8c:3a:63:
90:ce:8e:c9:55:27:8c:e7:92:53:bb:89:36:ec:a3:
30:86:e8:51:a0:33:be:8b:c2:93:d4:eb:39:51:89:
04:d2:32:ad:cf:7f:b5:9d:f5:68:42:64:6e:a7:6e:
12:88:38:a7:1f:48:6a:4a:ce:fd:5b:7b:2e:79:2b:
ea:c9:2a:b3:42:5e:8a:7b:d7:a4:dc:3c:6c:71:d5:
3c:06:cf:ae:ae:9c:5a:0f:f0:b0:c0:9c:cb:50:6e:
15:7f:2a:2d:77:a2:61:af:17:1b:37:70:14:33:6e:
fe:48:d9:54:fa:09:7a:3e:68:96:da:15:01:51:16:
3c:ae:fb:3b:a8:ac:23:4b:86:ae:57:a3:ab:ae:19:
b5:26:e2:f1:7f:76:d2:44:a4:56:b8:de:7f:ac:35:
80:a1:a7:38:6f:c0:f5:77:21:53:8a:2a:d8:d1:78:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:72:F8:F5:E9:C1:7A:11:8C:12:1A:C5:78:12:03:BE:A7:BE:0A
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:a1:1c:4a:b9:1b:b7:14:6c:e2:11:5c:b8:84:0e:96:65:
92:e7:79:02:38:8c:89:05:69:94:b6:1b:0e:88:91:94:01:7e:
19:88:54:f5:a9:a9:35:26:ce:d2:75:9d:db:f3:6a:d5:26:3e:
0b:96:cb:a7:52:67:92:25:f8:51:27:dd:ed:9c:1e:df:db:0c:
ef:cf:47:e5:6b:9e:cc:3d:6a:12:de:78:a2:4b:b0:d2:73:48:
67:82:d8:61:22:0d:48:1e:2c:ba:0e:df:a8:74:5c:6d:e3:26:
24:d6:1a:d0:8b:db:78:3d:85:0f:b4:ca:20:97:7a:70:c6:39:
38:06:21:1d:3c:62:b3:85:fc:aa:ec:21:98:41:2f:6e:d6:5a:
5b:e4:e6:0b:0d:0e:c6:24:d1:76:1b:65:79:c7:2d:cf:42:d3:
e1:9c:6e:8c:73:a7:57:4a:d2:e4:bc:a8:d2:8d:71:44:41:a3:
07:c9:4f:09:2b:6c:2a:b0:f4:ee:43:d1:4d:64:45:36:86:c2:
b0:d8:86:e5:dd:f6:50:fe:2a:46:77:c9:25:24:f4:f4:4e:31:
c1:02:28:de:28:65:0e:53:38:d9:8e:a3:e5:c8:43:54:d8:93:
27:a3:39:3a:2b:a2:05:c9:99:21:20:9c:b1:55:08:29:3a:a0:
14:34:a0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8KDURHJBBEuQMfSAN0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
EygwZmEwNzJmOGY1ZTljMTdhMTE4YzEyMWFjNTc4MTIwM2JlYTdiZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4uV3FhIbkdKJO6sentGBmW+SHcm
vArV1H3kvcU8y1/BE38Lf46D/JhlYYYvmz8dc9cwFL6YEYyIpfimC+dFd3e2j2mT
nZyjGYcEdm4rFL0lkyCowtSMOmOQzo7JVSeM55JTu4k27KMwhuhRoDO+i8KT1Os5
UYkE0jKtz3+1nfVoQmRup24SiDinH0hqSs79W3sueSvqySqzQl6Ke9ek3DxscdU8
Bs+urpxaD/CwwJzLUG4Vfyotd6JhrxcbN3AUM27+SNlU+gl6PmiW2hUBURY8rvs7
qKwjS4auV6Orrhm1JuLxf3bSRKRWuN5/rDWAoac4b8D1dyFTiirY0XjX/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+gcvj16cF6EYwSGsV4EgO+p74KMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoShHEq5
G7cUbOIRXLiEDpZlkud5AjiMiQVplLYbDoiRlAF+GYhU9ampNSbO0nWd2/Nq1SY+
C5bLp1JnkiX4USfd7Zwe39sM789H5WuezD1qEt54okuw0nNIZ4LYYSINSB4sug7f
qHRcbeMmJNYa0IvbeD2FD7TKIJd6cMY5OAYhHTxis4X8quwhmEEvbtZaW+TmCw0O
xiTRdhtlecctz0LT4ZxujHOnV0rS5Lyo0o1xREGjB8lPCStsKrD07kPRTWRFNobC
sNiG5d32UP4qRnfJJST09E4xwQIo3ihlDlM42Y6j5chDVNiTJ6M5OiuiBcmZISCc
sVUIKTqgFDSgIw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:49 2025 by rpki-client