Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: 3l/AmRFL3oiMmMSTGaQXr6x59shk1id1ZmewyiuGKuw=
Subject key identifier: CB:03:97:D5:62:B9:B7:6F:BA:09:EA:7E:1C:D3:AA:ED:D6:54:81:EC
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019A4EF4340C2DA11E18D32D66235851BE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 03CD
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: g8/8FksxOury9+0/pqsoKDDHs0oYrfu6ZQpSvhsV7Ko=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:34:0c:2d:a1:1e:18:d3:2d:66:23:58:51:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=cb0397d562b9b76fba09ea7e1cd3aaedd65481ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:ea:6f:70:5c:96:de:3b:e9:73:86:89:72:
5e:1b:8a:58:ba:af:1e:3f:74:96:92:06:f0:db:68:
70:a8:70:8c:3d:32:96:27:61:22:fc:af:fb:8f:59:
df:2d:1c:e3:8d:5e:7c:6c:d0:d8:8c:34:e5:68:a6:
0d:a5:42:60:ef:3e:52:3d:75:38:89:dd:1f:11:bc:
4a:a2:4f:12:fc:ba:38:67:d0:6d:41:bc:a5:c4:ff:
23:06:93:1b:84:7e:a3:5c:f1:eb:48:0f:20:14:4b:
60:d3:85:fa:4b:74:a7:25:7f:7e:1b:d9:43:25:e5:
4d:09:a8:88:6b:6f:68:e9:56:8d:f3:c6:03:68:07:
3b:6b:1b:b5:97:fb:47:dd:7b:04:59:80:15:7b:e2:
9d:2a:3f:09:b2:e2:27:9f:7a:f4:e5:5e:1d:67:f5:
6d:b5:3b:3c:26:c0:c9:f5:4b:26:88:50:f0:1c:a9:
e1:9d:a2:dd:3f:80:c9:2f:50:8b:b9:6e:c8:b2:c1:
7b:c1:26:0d:37:6c:bf:73:6f:ea:d5:86:e5:f0:e7:
1c:a5:48:67:c9:08:df:62:60:2e:99:fc:22:37:05:
87:46:bf:ea:6d:60:75:80:60:d3:3d:10:b4:42:c7:
c2:e1:d6:4f:1b:a9:ec:b5:bc:31:cd:22:28:b6:9a:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:97:D5:62:B9:B7:6F:BA:09:EA:7E:1C:D3:AA:ED:D6:54:81:EC
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:4a:9d:ad:05:9b:60:38:8c:b9:01:02:52:0c:38:6f:3d:
b5:1c:09:28:14:f2:c9:7a:b2:9d:4e:87:b4:1d:78:9d:39:c3:
81:de:e0:d0:3b:be:1a:3c:ac:9c:73:00:53:42:fc:19:4c:89:
8d:fe:81:67:1c:17:08:49:cf:88:19:a8:4a:08:59:9b:2e:56:
b4:d3:bd:e4:aa:c7:e5:b6:c4:b3:e4:1f:d8:02:ab:85:5a:2b:
9e:4c:01:22:b9:93:9e:e4:72:02:29:ce:e5:1a:f5:e2:25:94:
55:29:76:56:63:3b:b7:f7:71:5b:90:84:80:39:bd:ff:35:18:
34:77:09:c9:28:ff:0f:0f:e6:c5:64:09:88:a5:3a:ee:09:35:
d3:5f:c2:4b:43:61:c2:02:fd:6d:c7:e4:48:28:06:d7:08:ef:
70:93:c5:19:52:c8:da:6a:a0:86:f7:e3:82:d3:b2:78:b0:2f:
78:ba:5f:35:c8:8b:04:24:cc:9b:00:4a:86:b7:5a:c6:30:2a:
f4:2a:ef:96:7b:2e:4a:9f:1f:9d:63:f7:2b:87:cf:6d:41:5a:
cc:e9:ed:b3:22:52:9f:bb:37:be:85:71:d3:64:b4:46:08:31:
42:65:38:23:fb:16:3c:d7:36:6a:82:bb:da:7b:2f:f8:36:bc:
d6:35:d2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DQMLaEeGNMtZiNYUb4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjUxMTA0MTMwMDE4WhcNMjUxMTA1MTMwMDE4WjAzMTEwLwYDVQQD
EyhjYjAzOTdkNTYyYjliNzZmYmEwOWVhN2UxY2QzYWFlZGQ2NTQ4MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmHqb3Bclt476XOGiXJeG4pYuq8e
P3SWkgbw22hwqHCMPTKWJ2Ei/K/7j1nfLRzjjV58bNDYjDTlaKYNpUJg7z5SPXU4
id0fEbxKok8S/Lo4Z9BtQbylxP8jBpMbhH6jXPHrSA8gFEtg04X6S3SnJX9+G9lD
JeVNCaiIa29o6VaN88YDaAc7axu1l/tH3XsEWYAVe+KdKj8JsuInn3r05V4dZ/Vt
tTs8JsDJ9UsmiFDwHKnhnaLdP4DJL1CLuW7IssF7wSYNN2y/c2/q1Ybl8OccpUhn
yQjfYmAumfwiNwWHRr/qbWB1gGDTPRC0QsfC4dZPG6nstbwxzSIotprgGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsDl9ViubdvugnqfhzTqu3WVIHsMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa1Kna0F
m2A4jLkBAlIMOG89tRwJKBTyyXqynU6HtB14nTnDgd7g0Du+GjysnHMAU0L8GUyJ
jf6BZxwXCEnPiBmoSghZmy5WtNO95KrH5bbEs+Qf2AKrhVornkwBIrmTnuRyAinO
5Rr14iWUVSl2VmM7t/dxW5CEgDm9/zUYNHcJySj/Dw/mxWQJiKU67gk101/CS0Nh
wgL9bcfkSCgG1wjvcJPFGVLI2mqghvfjgtOyeLAveLpfNciLBCTMmwBKhrdaxjAq
9CrvlnsuSp8fnWP3K4fPbUFazOntsyJSn7s3voVx02S0RggxQmU4I/sWPNc2aoK7
2nsv+Da81jXStA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:03 2025 by rpki-client