Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier: W7blO2U5HJehMAXOpyUYBf8pWw73CobeDch8ByxC3SE=
Subject key identifier: DA:5C:4D:08:71:B4:12:3C:AF:09:C8:93:91:D6:08:53:CF:6E:B7:72
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial: 019A7293F349E4F52E004E00379B5CC0B66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number: 1445
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: mnnVCNe04pcpnEU3QypT/PS98myW4lIYrccUxYaoX/k=)
2: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (hash: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f3:49:e4:f5:2e:00:4e:00:37:9b:5c:c0:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=da5c4d0871b4123caf09c89391d60853cf6eb772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:5d:c0:52:8a:40:ad:6d:cc:af:be:02:7f:
9a:72:e8:f7:93:74:c4:91:a5:0f:99:a2:ca:a9:f1:
ae:df:33:a0:2d:59:79:9e:38:04:20:9c:66:8b:9b:
87:52:d7:46:ea:0a:bf:ea:b9:1d:c7:aa:9a:6f:12:
c2:a2:ba:ca:82:5f:ea:f4:71:82:51:17:8b:c2:f8:
48:b9:7f:fd:5c:3c:ad:79:cc:b9:9c:85:57:61:b4:
1b:96:47:1e:59:b2:3f:2f:e8:89:72:63:72:7c:a0:
1a:32:3c:d5:b6:5a:af:96:58:ce:e3:98:69:02:b2:
e8:f6:10:8e:98:56:07:8c:33:80:ba:42:91:ea:71:
6d:e7:9c:22:e6:67:20:be:82:d8:fd:6e:81:24:02:
00:43:a5:62:68:4f:1c:9f:d8:2c:53:de:f0:2d:ba:
ee:c8:8c:65:29:63:4b:a9:32:cb:be:0f:d8:a9:84:
a9:4e:ac:7b:eb:bb:0e:b6:46:8c:7b:0e:08:74:ad:
7f:3a:5f:b3:f3:38:be:f5:07:70:8e:b8:08:10:03:
74:f5:dd:c9:f0:ff:13:2c:4b:15:a3:56:af:c6:1c:
1e:3f:bd:13:6a:9c:df:25:b3:7d:76:99:0e:0b:e1:
8b:f3:6e:50:12:57:9d:3f:42:46:65:96:27:ab:2d:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:4D:08:71:B4:12:3C:AF:09:C8:93:91:D6:08:53:CF:6E:B7:72
X509v3 Authority Key Identifier:
keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:5a:03:b8:6f:09:da:fc:e2:8d:12:c5:8a:94:e4:cb:a5:
c7:68:e4:21:0e:37:c7:a8:ef:ac:18:b6:60:a3:94:d4:a8:e7:
f0:74:05:6e:44:9f:29:6d:47:6e:8d:de:10:39:f0:a3:e2:1e:
f8:b0:b6:f7:ad:ce:a2:db:8b:95:04:65:6b:a9:c3:34:e0:6a:
62:0c:33:f3:87:ef:6f:ce:64:97:9f:37:74:c9:0a:1c:3c:a9:
ab:61:7d:13:a9:5d:6c:6d:a8:aa:3c:c8:8b:c0:ce:c9:4d:64:
4a:2a:03:43:d4:8a:06:af:a2:d3:e4:6d:02:24:16:62:b6:38:
dd:5a:f6:14:9b:11:bd:5b:6a:d7:73:cc:38:9e:ef:ae:d0:84:
8d:68:35:24:e2:4a:99:02:46:ed:13:22:18:d1:87:14:fd:ba:
63:67:9c:06:ec:2f:14:b4:ce:49:43:b0:b1:e4:5b:03:2c:ff:
b1:a4:47:e0:14:bf:b8:cf:96:c1:bd:a3:a4:c4:95:00:83:97:
56:76:a0:fd:05:6f:b9:75:d6:2b:11:e7:a4:7c:bd:13:66:e0:
03:62:05:06:3b:e5:7b:bd:d2:f3:fa:6c:91:7a:27:19:c9:f4:
05:c1:bc:6e:6e:98:3a:89:1e:47:40:d1:35:1a:46:f8:f3:8c:
ae:fc:14:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/NJ5PUuAE4AN5tcwLZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh
NTI3ZDEwHhcNMjUxMTExMTEwMTI5WhcNMjUxMTEyMTEwMTI5WjAzMTEwLwYDVQQD
EyhkYTVjNGQwODcxYjQxMjNjYWYwOWM4OTM5MWQ2MDg1M2NmNmViNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIxdwFKKQK1tzK++An+acuj3k3TE
kaUPmaLKqfGu3zOgLVl5njgEIJxmi5uHUtdG6gq/6rkdx6qabxLCorrKgl/q9HGC
UReLwvhIuX/9XDytecy5nIVXYbQblkceWbI/L+iJcmNyfKAaMjzVtlqvlljO45hp
ArLo9hCOmFYHjDOAukKR6nFt55wi5mcgvoLY/W6BJAIAQ6ViaE8cn9gsU97wLbru
yIxlKWNLqTLLvg/YqYSpTqx767sOtkaMew4IdK1/Ol+z8zi+9QdwjrgIEAN09d3J
8P8TLEsVo1avxhweP70TapzfJbN9dpkOC+GL825QEledP0JGZZYnqy0lpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpcTQhxtBI8rwnIk5HWCFPPbrdyMB8GA1UdIwQY
MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct
MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm
LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREFaA7hv
Cdr84o0SxYqU5Mulx2jkIQ43x6jvrBi2YKOU1Kjn8HQFbkSfKW1Hbo3eEDnwo+Ie
+LC2963OotuLlQRla6nDNOBqYgwz84fvb85kl583dMkKHDypq2F9E6ldbG2oqjzI
i8DOyU1kSioDQ9SKBq+i0+RtAiQWYrY43Vr2FJsRvVtq13PMOJ7vrtCEjWg1JOJK
mQJG7RMiGNGHFP26Y2ecBuwvFLTOSUOwseRbAyz/saRH4BS/uM+Wwb2jpMSVAIOX
Vnag/QVvuXXWKxHnpHy9E2bgA2IFBjvle73S8/pskXonGcn0BcG8bm6YOokeR0DR
NRpG+POMrvwUiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:37 2025 by rpki-client