Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: rwWJLY5dcs7r8AwT8fhr2Fi57242lz6QfK01ZWu2rkI=
Subject key identifier: BC:A5:FF:98:48:9E:0D:D9:CD:CD:B9:63:0E:E2:B7:E1:72:09:20:35
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019A70DC00F80B2C3E5C9178FDE2F4554C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 06D4
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: lAFTuRqmockS6LWfnMxvLK59khZQJaFvbOqvMkTBj7c=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:00:f8:0b:2c:3e:5c:91:78:fd:e2:f4:55:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=bca5ff98489e0dd9cdcdb9630ee2b7e172092035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:c4:74:16:9d:ca:67:1b:29:53:ca:1c:f7:
bd:49:ba:7e:c5:39:ea:5c:64:35:fb:5e:1b:9e:7b:
f5:07:eb:63:f1:5b:49:73:54:85:d0:11:a9:02:48:
39:d4:57:6f:68:dd:f9:96:a8:41:99:b3:df:d9:dd:
80:4d:d6:94:58:b9:47:7d:b1:b6:7f:95:48:58:1b:
b1:b7:75:8a:4d:90:50:66:2b:52:f2:09:fb:39:23:
2a:57:b7:c8:99:f8:13:d9:a0:11:b3:43:56:f3:bb:
b1:1d:41:ad:b8:92:05:67:53:1a:b0:3b:a2:d8:32:
70:22:c4:2f:ad:82:80:50:7c:66:d3:68:ef:62:bf:
bb:a0:88:54:bb:5b:98:f1:7a:a6:1b:98:9f:41:1c:
fc:d7:67:75:17:7a:43:73:c6:e4:de:2c:f8:13:7e:
3c:c0:30:e7:cb:0f:7e:73:ff:8b:6d:93:2c:11:cd:
ee:71:91:c6:7f:66:f3:ff:7b:e6:55:c1:74:98:39:
41:8c:0a:36:ea:15:4d:c4:dd:7e:f1:c5:34:65:b3:
1f:d0:5c:6c:b8:cb:82:9e:52:17:09:41:f1:25:87:
23:ee:2b:da:09:18:36:24:71:2e:16:11:ea:bd:cf:
78:b4:4d:68:ec:ac:36:35:7e:28:ed:28:75:f4:16:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:FF:98:48:9E:0D:D9:CD:CD:B9:63:0E:E2:B7:E1:72:09:20:35
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:79:1d:a6:dc:25:c7:3e:b2:d7:2d:d9:dd:c2:ac:08:d1:
20:0a:2c:6c:7b:b6:2b:b0:cf:be:38:da:44:57:3a:0d:4e:03:
09:56:43:88:73:b4:88:9f:23:3d:47:5d:af:98:eb:2f:f0:29:
a9:04:fd:4b:ee:79:64:3d:cf:0c:81:4f:50:ae:a9:6b:3a:a5:
de:42:22:ea:5b:83:5f:6c:ba:a3:39:07:fd:af:31:08:37:d3:
a1:2c:cc:8d:4d:49:c4:a0:39:06:46:3c:18:4d:83:1e:a9:88:
96:ab:90:78:e4:94:6e:b8:ff:c2:47:e1:db:dd:d6:18:ae:a8:
a6:b7:29:48:83:c4:73:d8:9d:45:a2:9f:23:b0:89:57:e1:5f:
48:8c:f4:62:bb:0b:ab:a0:e5:76:f5:c0:07:b1:5e:e7:d7:f7:
8f:73:b8:66:24:60:de:4a:18:1c:83:33:e1:79:9e:fa:27:8d:
2b:54:25:71:eb:53:b5:a7:64:5c:1f:88:ee:99:a5:88:7a:ff:
42:e1:bf:79:f9:07:ae:68:b4:9d:d4:73:77:46:fd:6a:69:6b:
19:a2:f7:7f:2e:df:ca:9b:c3:9d:50:88:bf:01:25:5d:9f:1e:
1f:f2:08:db:4c:89:7f:93:27:61:78:9e:cd:10:3b:d8:c0:5a:
f5:95:fe:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3AD4Cyw+XJF4/eL0VUwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz
YTk0YzEwHhcNMjUxMTExMDMwMDU3WhcNMjUxMTEyMDMwMDU3WjAzMTEwLwYDVQQD
EyhiY2E1ZmY5ODQ4OWUwZGQ5Y2RjZGI5NjMwZWUyYjdlMTcyMDkyMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+XEdBadymcbKVPKHPe9Sbp+xTnq
XGQ1+14bnnv1B+tj8VtJc1SF0BGpAkg51FdvaN35lqhBmbPf2d2ATdaUWLlHfbG2
f5VIWBuxt3WKTZBQZitS8gn7OSMqV7fImfgT2aARs0NW87uxHUGtuJIFZ1MasDui
2DJwIsQvrYKAUHxm02jvYr+7oIhUu1uY8XqmG5ifQRz812d1F3pDc8bk3iz4E348
wDDnyw9+c/+LbZMsEc3ucZHGf2bz/3vmVcF0mDlBjAo26hVNxN1+8cU0ZbMf0Fxs
uMuCnlIXCUHxJYcj7ivaCRg2JHEuFhHqvc94tE1o7Kw2NX4o7Sh19BYsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyl/5hIng3Zzc25Yw7it+FyCSA1MB8GA1UdIwQY
MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt
NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2
LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVF5Habc
Jcc+stct2d3CrAjRIAosbHu2K7DPvjjaRFc6DU4DCVZDiHO0iJ8jPUddr5jrL/Ap
qQT9S+55ZD3PDIFPUK6pazql3kIi6luDX2y6ozkH/a8xCDfToSzMjU1JxKA5BkY8
GE2DHqmIlquQeOSUbrj/wkfh293WGK6oprcpSIPEc9idRaKfI7CJV+FfSIz0YrsL
q6DldvXAB7Fe59f3j3O4ZiRg3koYHIMz4Xme+ieNK1QlcetTtadkXB+I7pmliHr/
QuG/efkHrmi0ndRzd0b9amlrGaL3fy7fypvDnVCIvwElXZ8eH/II20yJf5MnYXie
zRA72MBa9ZX+9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client