Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: rdhd3y4IeTWHy56XkM5KZbFK3e4Lhe8U/rc+nNMRk7s=
Subject key identifier: E0:86:57:9C:70:7F:0B:B5:34:93:5B:10:13:0D:0D:FF:53:7A:16:7F
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 019A714A07125777978054441B02BB511045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 0EB9
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: 1/7ZkRjMOLmvkwc8Voel3jotlTgQIFh9qSZS4ew4SSw=)
2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:07:12:57:77:97:80:54:44:1b:02:bb:51:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=e086579c707f0bb534935b10130d0dff537a167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:cc:63:9d:e0:52:1f:c2:3b:88:2b:60:da:
7a:66:13:76:a9:d3:35:cc:4c:d9:89:bf:75:8b:c9:
4b:20:82:61:59:3d:01:7b:97:4a:3f:de:76:14:b8:
bf:ac:42:0c:0e:5d:31:9a:29:c7:cd:42:31:9d:da:
4e:59:78:22:d2:55:16:59:4a:6f:59:4c:9d:a4:3b:
80:c6:56:5b:b0:ba:2f:39:94:73:46:3a:31:1a:3f:
14:6f:4d:fd:d4:86:74:f0:aa:f0:57:a9:3c:bc:e0:
a9:c4:82:85:e9:5b:42:6a:74:b8:21:55:fc:78:cf:
fe:86:8e:05:30:b8:bb:0d:4c:3d:44:ab:71:df:25:
39:de:94:63:c1:f4:37:fa:77:8e:d2:1a:ba:12:d8:
5b:67:68:ee:69:6a:62:77:5a:bc:f1:ef:0f:e3:f7:
1d:e3:7c:fa:ed:6a:d8:9a:42:55:a3:f8:31:46:16:
63:69:72:b9:ee:8d:21:57:24:57:ba:cf:52:d9:6d:
25:df:0d:e8:d8:a2:ad:1f:9e:2f:86:40:24:6b:1b:
92:00:29:73:42:23:d0:bc:56:d2:57:89:2c:43:80:
a5:a4:50:28:ef:48:28:00:b5:4f:76:1c:ae:58:c7:
08:e6:5b:f1:61:ee:c9:07:48:9f:76:48:3a:d9:89:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:57:9C:70:7F:0B:B5:34:93:5B:10:13:0D:0D:FF:53:7A:16:7F
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:aa:19:cf:59:bd:b8:c5:7d:dc:45:b5:f3:15:a2:18:e1:
bf:ee:80:da:56:08:ac:85:9b:7a:94:24:c0:67:81:62:1e:e8:
c7:4a:0f:bf:b0:00:da:f0:65:08:3f:39:f3:ae:68:92:7e:17:
8f:b9:32:af:e3:9d:15:6b:ae:00:6c:4b:43:ab:77:00:b9:36:
04:cd:be:f5:8e:55:79:ab:ee:d5:35:7a:ed:bf:50:b5:87:21:
84:4a:0d:1b:98:91:17:15:1d:02:32:81:6f:9f:b4:b9:e1:2c:
3e:1a:7c:47:ed:96:f7:fa:bb:47:79:1b:ee:ec:fd:73:42:4e:
46:d7:d5:35:7e:ce:30:d4:60:11:79:a9:22:73:24:e0:a3:17:
89:65:b6:cf:c0:df:ca:ba:86:5b:f2:d4:40:f0:20:ba:08:bb:
9a:57:13:bb:34:d9:96:6b:3e:b1:63:e3:10:9a:c4:ed:51:be:
56:35:73:63:93:69:86:d2:53:55:ec:37:e6:86:29:64:ff:bf:
b3:bb:e2:72:8f:8e:90:23:f4:d7:e8:e6:e2:a5:93:af:75:ed:
e2:84:14:70:ba:1d:fc:7d:e8:36:86:99:a8:1c:d4:85:1b:57:
4f:39:40:53:8e:9e:45:2e:95:8f:82:8e:23:ec:4d:60:32:d1:
cd:66:b3:19
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxSgcSV3eXgFREGwK7URBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0
YjZlMTMwHhcNMjUxMTExMDUwMTA4WhcNMjUxMTEyMDUwMTA4WjAzMTEwLwYDVQQD
EyhlMDg2NTc5YzcwN2YwYmI1MzQ5MzViMTAxMzBkMGRmZjUzN2ExNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DHMY53gUh/CO4grYNp6ZhN2qdM1
zEzZib91i8lLIIJhWT0Be5dKP952FLi/rEIMDl0xminHzUIxndpOWXgi0lUWWUpv
WUydpDuAxlZbsLovOZRzRjoxGj8Ub0391IZ08KrwV6k8vOCpxIKF6VtCanS4IVX8
eM/+ho4FMLi7DUw9RKtx3yU53pRjwfQ3+neO0hq6EthbZ2juaWpid1q88e8P4/cd
43z67WrYmkJVo/gxRhZjaXK57o0hVyRXus9S2W0l3w3o2KKtH54vhkAkaxuSAClz
QiPQvFbSV4ksQ4ClpFAo70goALVPdhyuWMcI5lvxYe7JB0ifdkg62Ykw3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOCGV5xwfwu1NJNbEBMNDf9TehZ/MB8GA1UdIwQY
MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh
LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl
Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcCq
Gc9ZvbjFfdxFtfMVohjhv+6A2lYIrIWbepQkwGeBYh7ox0oPv7AA2vBlCD85865o
kn4Xj7kyr+OdFWuuAGxLQ6t3ALk2BM2+9Y5Veavu1TV67b9QtYchhEoNG5iRFxUd
AjKBb5+0ueEsPhp8R+2W9/q7R3kb7uz9c0JORtfVNX7OMNRgEXmpInMk4KMXiWW2
z8DfyrqGW/LUQPAgugi7mlcTuzTZlms+sWPjEJrE7VG+VjVzY5NphtJTVew35oYp
ZP+/s7vico+OkCP01+jm4qWTr3Xt4oQUcLod/H3oNoaZqBzUhRtXTzlAU46eRS6V
j4KOI+xNYDLRzWazGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:54 2025 by rpki-client