Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: zfGeOFojHD3AP+UsK8YTVkbczigIfShCDRikQ0bqHVk=
Subject key identifier: 33:63:77:C4:7E:11:63:93:F1:8F:E5:64:95:42:72:49:07:25:A2:2E
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 019A7149E7ACFC0576704CBD6A7D65D3D3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0F23
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: itx+pOhMs1bNfVV7529mLNAKBGAf3lDJrLiEwg7607k=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e7:ac:fc:05:76:70:4c:bd:6a:7d:65:d3:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=336377c47e116393f18fe564954272490725a22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4e:fe:21:5a:41:c8:5d:75:0d:8e:56:6c:ec:
bf:07:09:97:b1:0c:6c:f8:1d:8c:7c:ec:ee:5d:c6:
e1:4f:b5:13:97:ab:71:06:62:ed:3a:51:be:5e:41:
1d:78:12:c9:83:da:f2:7f:30:33:8a:6b:49:f7:bc:
a1:7e:e1:41:b2:5e:6d:3c:6a:f9:f7:b4:55:6b:c9:
5c:62:0d:04:1c:1b:da:3a:9a:ef:f3:7c:9a:c5:88:
e2:c8:ea:26:6b:56:77:1e:e1:7c:fb:3e:59:da:aa:
af:6f:e4:a1:5d:15:02:67:36:ed:37:64:05:70:cb:
a3:ae:83:4c:78:f6:e8:91:06:e1:83:ec:09:b2:04:
e6:14:e7:b4:99:e3:5a:6d:f5:00:c5:45:81:63:5e:
44:a9:0f:ae:ce:b6:fa:8b:7a:28:63:27:93:5f:55:
0c:bc:00:95:2e:58:fd:18:2e:cf:26:c2:33:b0:f9:
42:b5:22:35:df:fe:6a:23:0e:81:8a:c5:3e:4c:cf:
fa:38:da:32:d9:2c:90:e3:1f:fc:1e:77:9e:f7:1f:
2c:35:e4:87:fe:83:5d:43:be:3a:b6:4a:94:8f:16:
8f:0f:4e:00:ee:cf:f8:8f:0f:72:3f:ec:66:c8:91:
28:1d:fa:99:1d:bc:bc:66:53:e9:71:36:08:21:4f:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:77:C4:7E:11:63:93:F1:8F:E5:64:95:42:72:49:07:25:A2:2E
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:c9:16:ea:99:df:b5:c8:01:af:70:8d:54:1f:e0:0a:81:
51:6b:5b:67:4c:02:a1:c3:6e:3e:85:21:29:03:da:91:e1:d6:
45:7e:86:5d:65:e5:14:1f:f4:33:8e:8a:3b:d7:4c:53:ce:dd:
36:97:f4:fc:d9:2c:c8:47:fa:da:a2:14:36:d1:38:c0:39:51:
c1:c9:62:a1:41:34:97:3d:b3:56:bf:bd:7f:18:1f:19:36:30:
5b:e1:3d:bc:42:7e:e5:f4:19:7e:08:9e:93:c2:63:31:a0:c6:
1d:bd:f7:24:d8:1e:f8:82:a9:90:b5:17:ea:21:5a:3b:22:e4:
e4:6a:8a:34:88:b7:ea:f5:c9:73:61:0b:ad:2c:75:a7:61:10:
06:e4:0e:d3:da:5b:37:91:01:12:01:3f:b6:48:d3:c3:9a:2c:
26:bb:78:70:df:7c:66:91:2e:b1:d4:06:43:be:fc:cd:2b:2b:
25:59:fa:f9:44:94:c7:77:07:39:0f:49:64:f0:12:0a:4c:7a:
9f:52:28:ae:65:b2:fd:7d:98:3f:c0:51:7c:15:2e:5e:ce:4d:
fd:07:f6:c0:cb:6e:c3:2e:e8:9a:73:98:b0:77:3a:c2:75:b2:
4a:94:a2:69:86:1a:ef:ae:42:41:50:63:76:03:16:52:3d:8b:
d4:f4:76:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSees/AV2cEy9an1l09P6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh
NWFhYTMwHhcNMjUxMTExMDUwMTAwWhcNMjUxMTEyMDUwMTAwWjAzMTEwLwYDVQQD
EygzMzYzNzdjNDdlMTE2MzkzZjE4ZmU1NjQ5NTQyNzI0OTA3MjVhMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k7+IVpByF11DY5WbOy/BwmXsQxs
+B2MfOzuXcbhT7UTl6txBmLtOlG+XkEdeBLJg9ryfzAzimtJ97yhfuFBsl5tPGr5
97RVa8lcYg0EHBvaOprv83yaxYjiyOoma1Z3HuF8+z5Z2qqvb+ShXRUCZzbtN2QF
cMujroNMePbokQbhg+wJsgTmFOe0meNabfUAxUWBY15EqQ+uzrb6i3ooYyeTX1UM
vACVLlj9GC7PJsIzsPlCtSI13/5qIw6BisU+TM/6ONoy2SyQ4x/8Hnee9x8sNeSH
/oNdQ746tkqUjxaPD04A7s/4jw9yP+xmyJEoHfqZHby8ZlPpcTYIIU8/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNjd8R+EWOT8Y/lZJVCckkHJaIuMB8GA1UdIwQY
MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt
OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw
LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKzJFuqZ
37XIAa9wjVQf4AqBUWtbZ0wCocNuPoUhKQPakeHWRX6GXWXlFB/0M46KO9dMU87d
Npf0/NksyEf62qIUNtE4wDlRwclioUE0lz2zVr+9fxgfGTYwW+E9vEJ+5fQZfgie
k8JjMaDGHb33JNge+IKpkLUX6iFaOyLk5GqKNIi36vXJc2ELrSx1p2EQBuQO09pb
N5EBEgE/tkjTw5osJrt4cN98ZpEusdQGQ778zSsrJVn6+USUx3cHOQ9JZPASCkx6
n1IormWy/X2YP8BRfBUuXs5N/Qf2wMtuwy7omnOYsHc6wnWySpSiaYYa765CQVBj
dgMWUj2L1PR2Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client