
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: vZ3N5M+X5NrLyVeBjtkhoHoacCUNVfzrGIkGoAjHxz8=
Subject key identifier: 1C:F1:5E:59:D3:CF:05:09:1D:09:13:8C:AA:3F:FA:C0:B3:88:90:24
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019A19BD7703963F0B353CC185299E5621DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 0FB2
Signing time: Sat 25 Oct 2025 05:00:38 +0000
Manifest this update: Sat 25 Oct 2025 05:00:38 +0000
Manifest next update: Sun 26 Oct 2025 05:00:38 +0000
Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: mWiuL7nvEjwHBOd5LVD1zbXH97856pIsAeUP7jC9LzI=)
2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:77:03:96:3f:0b:35:3c:c1:85:29:9e:56:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Oct 25 05:00:38 2025 GMT
Not After : Oct 26 05:00:38 2025 GMT
Subject: CN=1cf15e59d3cf05091d09138caa3ffac0b3889024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:8e:25:32:0f:a8:b1:bf:dc:3e:be:84:f3:
6b:af:9d:0c:9a:61:af:55:97:fe:39:82:74:47:48:
3e:03:80:91:45:a5:ae:cb:94:c5:21:13:19:25:77:
26:97:03:a4:6c:a9:30:6f:ae:51:e1:c0:ed:55:7e:
64:20:eb:98:9d:92:e0:77:30:21:53:c4:07:15:8e:
94:ca:0d:f1:65:d6:ee:c9:ce:7b:81:2d:76:a0:a7:
68:8d:3d:9b:ea:56:96:e2:ae:bf:bc:e6:9b:9c:11:
c0:f7:f9:70:64:18:ff:0a:cd:6f:96:6a:0f:ff:d9:
2f:f1:a9:6a:a0:7c:7e:c9:69:ea:a2:07:2e:89:19:
e7:85:07:0e:1b:20:90:59:e3:c2:51:b7:16:61:d1:
aa:03:43:59:5b:0b:90:30:c7:f8:0f:cf:78:aa:6a:
20:5b:07:2b:31:c5:54:b7:19:4f:1f:65:eb:e2:b2:
b2:23:36:46:a7:77:a7:f7:a9:e7:ef:63:3f:b8:15:
f6:11:5b:0d:d2:45:b6:f0:39:a5:1f:b6:5d:c8:85:
e8:d0:37:3b:b4:a7:7a:9b:a6:ff:5f:c8:01:a2:f0:
1a:a2:2e:dd:b7:59:fb:f1:a3:1a:60:55:8a:8d:84:
12:7e:8e:e8:c1:5e:df:30:50:6c:30:8a:4f:6a:c5:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:5E:59:D3:CF:05:09:1D:09:13:8C:AA:3F:FA:C0:B3:88:90:24
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:59:f1:3f:b7:9e:44:55:62:57:b1:51:82:8b:a2:9b:67:f2:
fb:56:c8:98:ca:40:cd:19:4b:33:a3:45:f6:9a:8f:a5:5b:67:
09:68:82:d4:7e:53:dd:12:90:39:4f:18:a1:66:e5:9f:b7:00:
29:09:5a:55:c8:89:7d:25:df:73:67:ab:e8:2e:b5:a8:bb:2f:
fa:86:69:53:f7:b9:2f:19:bc:4c:96:62:6f:71:52:48:6f:9c:
6e:62:7c:6a:76:ee:d5:c7:97:98:f9:16:5b:8f:e8:81:61:e4:
91:90:de:68:cd:84:1b:7d:3e:16:23:7a:e1:38:fc:de:97:50:
f2:aa:c2:b3:f1:e2:00:e7:4b:8d:61:a9:e8:3e:9c:e8:34:94:
0c:71:d8:74:ee:97:ce:8a:5b:93:85:60:1b:44:07:de:99:8f:
0f:7e:7f:1c:b3:90:cb:f4:dd:1c:6f:ef:77:79:ed:b9:27:28:
d8:e8:76:8c:87:15:e5:65:40:c6:74:80:ce:4c:14:90:1a:5d:
1a:df:98:12:86:75:66:0f:f9:8e:c9:1c:7a:87:16:2a:28:88:
6c:c0:b4:d7:df:50:59:ba:9b:f5:30:59:33:55:73:22:4f:d2:
3b:8b:30:da:56:0a:8d:93:da:f1:96:3a:31:20:df:07:36:83:
60:5e:8c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZvXcDlj8LNTzBhSmeViHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjUxMDI1MDUwMDM4WhcNMjUxMDI2MDUwMDM4WjAzMTEwLwYDVQQD
EygxY2YxNWU1OWQzY2YwNTA5MWQwOTEzOGNhYTNmZmFjMGIzODg5MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxqOJTIPqLG/3D6+hPNrr50MmmGv
VZf+OYJ0R0g+A4CRRaWuy5TFIRMZJXcmlwOkbKkwb65R4cDtVX5kIOuYnZLgdzAh
U8QHFY6Uyg3xZdbuyc57gS12oKdojT2b6laW4q6/vOabnBHA9/lwZBj/Cs1vlmoP
/9kv8alqoHx+yWnqogcuiRnnhQcOGyCQWePCUbcWYdGqA0NZWwuQMMf4D894qmog
WwcrMcVUtxlPH2Xr4rKyIzZGp3en96nn72M/uBX2EVsN0kW28DmlH7ZdyIXo0Dc7
tKd6m6b/X8gBovAaoi7dt1n78aMaYFWKjYQSfo7owV7fMFBsMIpPasX4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzxXlnTzwUJHQkTjKo/+sCziJAkMB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVnxP7ee
RFViV7FRgouim2fy+1bImMpAzRlLM6NF9pqPpVtnCWiC1H5T3RKQOU8YoWbln7cA
KQlaVciJfSXfc2er6C61qLsv+oZpU/e5Lxm8TJZib3FSSG+cbmJ8anbu1ceXmPkW
W4/ogWHkkZDeaM2EG30+FiN64Tj83pdQ8qrCs/HiAOdLjWGp6D6c6DSUDHHYdO6X
zopbk4VgG0QH3pmPD35/HLOQy/TdHG/vd3ntuSco2Oh2jIcV5WVAxnSAzkwUkBpd
Gt+YEoZ1Zg/5jskceocWKiiIbMC0199QWbqb9TBZM1VzIk/SO4sw2lYKjZPa8ZY6
MSDfBzaDYF6MTA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:32 2025 by rpki-client