Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File: 1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier: OnwmSe1exEnZ9HrItW2SqOizeMeOilWNikyLuKllfQg=
Subject key identifier: B5:10:7A:F4:34:FB:A8:C7:01:56:E8:04:1B:C9:8F:7D:8D:30:08:63
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer: /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial: 019A72CA6FAEC71D888B5E15078C5101C3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: BR00DAcaCxTTklwkem3cR6i85uv/cftbNhEQbYhcJIU=)
2: k2mbzTYpqu-vVJrS8eVrfjvKL6U.roa (hash: q1LZnQ/M/m1mtPJpKlXgR+S06Cq8uIHatKNRuGYjFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6f:ae:c7:1d:88:8b:5e:15:07:8c:51:01:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=b5107af434fba8c70156e8041bc98f7d8d300863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:02:14:46:cd:71:ee:a8:ee:50:47:6b:a1:
fd:59:20:16:fd:6b:7e:0f:ba:33:bb:78:19:30:74:
9e:84:91:01:e4:73:c5:c1:ce:bf:df:59:0f:8b:ab:
6a:06:1d:3c:f4:f1:45:31:4a:41:7f:3d:6c:53:25:
aa:0d:8d:e8:8f:d5:25:04:a6:d4:cd:0b:a1:1b:db:
59:d7:da:3a:c1:6a:2c:66:fa:04:3b:d6:85:83:9b:
f5:c5:dd:2b:25:5e:24:1b:6b:22:fb:12:4e:2e:0d:
8f:aa:d4:07:07:0c:32:69:6e:49:f3:de:e7:ca:e1:
4f:7b:81:fd:ad:90:c0:d8:54:be:16:96:d7:98:97:
20:34:ce:28:c3:92:67:a7:0a:24:94:d8:6a:cc:4d:
4e:b3:53:c9:24:35:95:1c:fd:ac:5c:8b:2d:fd:df:
43:9b:e2:23:3b:83:a8:ab:34:a3:a7:fc:62:19:d9:
84:e3:e8:81:78:9d:fa:0b:9b:bc:8e:37:f7:5d:0d:
3d:f6:5c:a1:e9:79:0c:13:8d:46:a3:d5:8d:56:a8:
e4:fe:fe:98:5b:f8:71:14:9a:d7:9f:c4:f0:f4:af:
42:15:d8:bf:78:0f:db:fd:bf:fd:26:bc:e1:78:7f:
1e:ef:51:e9:cd:3b:0f:75:85:92:84:3c:4b:c2:e2:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:7A:F4:34:FB:A8:C7:01:56:E8:04:1B:C9:8F:7D:8D:30:08:63
X509v3 Authority Key Identifier:
keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:c0:48:03:cf:e8:29:57:e2:87:45:f7:ea:ca:5b:8a:3f:
f5:30:7c:1d:af:8a:13:05:ad:64:1d:40:15:26:42:0e:2b:bb:
ea:9d:bd:37:7b:8b:f7:15:8d:99:ff:3a:4c:9a:05:13:03:b6:
4c:40:3e:1b:8f:cd:80:d9:dd:f0:b9:64:07:74:c3:50:2b:66:
73:7d:51:c1:e8:9d:26:0d:4f:63:e4:47:29:d4:27:fd:6f:87:
bb:49:21:6f:d5:9e:8a:c5:09:e1:9a:2a:6b:3f:bd:34:fe:9c:
d2:46:28:68:28:d5:8e:2b:fd:95:90:11:cb:da:9c:fc:73:6c:
96:a5:4a:53:7c:9d:9d:a2:54:6a:f3:5b:0b:4d:8b:b5:aa:ab:
ad:d4:7e:68:86:b1:37:72:0a:ec:ef:76:5a:a7:eb:f0:1a:c2:
46:ba:73:3b:51:5a:77:f0:7f:11:21:19:d7:10:c4:d8:fc:27:
a6:d1:40:d2:9d:44:e3:59:ca:3d:ef:18:f8:d9:6e:6d:65:2b:
bc:85:31:66:24:5a:0c:db:88:79:c6:40:e0:f5:2b:cc:e7:2f:
de:0c:96:85:0b:fc:0b:94:47:85:38:05:ad:d4:63:fd:66:a8:
1c:34:18:9e:d0:e5:c9:84:1c:b3:9f:51:87:b7:90:0d:85:51:
6b:79:ac:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyym+uxx2Ii14VB4xRAcO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NWQzOTIxODUwYTVmZmYwN2VjYTI2MGEzNmVmOTIxMDFm
MmQ4NWMwHhcNMjUxMTExMTIwMTAwWhcNMjUxMTEyMTIwMTAwWjAzMTEwLwYDVQQD
EyhiNTEwN2FmNDM0ZmJhOGM3MDE1NmU4MDQxYmM5OGY3ZDhkMzAwODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufsCFEbNce6o7lBHa6H9WSAW/Wt+
D7ozu3gZMHSehJEB5HPFwc6/31kPi6tqBh089PFFMUpBfz1sUyWqDY3oj9UlBKbU
zQuhG9tZ19o6wWosZvoEO9aFg5v1xd0rJV4kG2si+xJOLg2PqtQHBwwyaW5J897n
yuFPe4H9rZDA2FS+FpbXmJcgNM4ow5JnpwoklNhqzE1Os1PJJDWVHP2sXIst/d9D
m+IjO4OoqzSjp/xiGdmE4+iBeJ36C5u8jjf3XQ099lyh6XkME41Go9WNVqjk/v6Y
W/hxFJrXn8Tw9K9CFdi/eA/b/b/9JrzheH8e71HpzTsPdYWShDxLwuJmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUQevQ0+6jHAVboBBvJj32NMAhjMB8GA1UdIwQY
MBaAFNVdOSGFCl//B+yiYKNu+SEB8thcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVYwNUlZVUtYXzhIN0tKZ28yNzVJUUh5MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZDEzMzEtNjIyYS00ODQ4LWIzNDAt
ZDMxNjNlOWIwMTM2LzEvMVYwNUlZVUtYXzhIN0tKZ28yNzVJUUh5MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kZDEzMzEtNjIyYS00ODQ4LWIzNDAtZDMxNjNlOWIwMTM2
LzEvMVYwNUlZVUtYXzhIN0tKZ28yNzVJUUh5MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjXASAPP
6ClX4odF9+rKW4o/9TB8Ha+KEwWtZB1AFSZCDiu76p29N3uL9xWNmf86TJoFEwO2
TEA+G4/NgNnd8LlkB3TDUCtmc31RweidJg1PY+RHKdQn/W+Hu0khb9WeisUJ4Zoq
az+9NP6c0kYoaCjVjiv9lZARy9qc/HNslqVKU3ydnaJUavNbC02LtaqrrdR+aIax
N3IK7O92Wqfr8BrCRrpzO1Fad/B/ESEZ1xDE2PwnptFA0p1E41nKPe8Y+NlubWUr
vIUxZiRaDNuIecZA4PUrzOcv3gyWhQv8C5RHhTgFrdRj/WaoHDQYntDlyYQcs59R
h7eQDYVRa3msHA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:55 2025 by rpki-client