Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: 7YrYF5p1SWh4tFEs6KDX7jztYF0cO52y9GstpfErUxY=
Subject key identifier: F9:90:73:93:39:0F:6C:76:2D:9D:DE:27:DC:45:03:BA:75:EC:B6:05
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019A4C615AC6C8A61453922BA6AE44EFA176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 1441
Signing time: Tue 04 Nov 2025 01:00:39 +0000
Manifest this update: Tue 04 Nov 2025 01:00:39 +0000
Manifest next update: Wed 05 Nov 2025 01:00:39 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: Kx4CGTAw+zRz378qLTx3uSg4WV+4rGHPEUNH7ql0C1s=)
2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5a:c6:c8:a6:14:53:92:2b:a6:ae:44:ef:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Nov 4 01:00:39 2025 GMT
Not After : Nov 5 01:00:39 2025 GMT
Subject: CN=f9907393390f6c762d9dde27dc4503ba75ecb605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:fa:41:e8:34:e8:77:1d:e3:53:ad:c0:67:
d3:57:4c:ae:07:f9:53:0d:4c:3c:b4:0f:dd:85:12:
b0:f3:fa:29:f1:f1:05:e2:2c:d8:18:84:4b:e5:ab:
fb:b4:9e:b6:9e:4a:7d:a8:88:a1:96:b8:b8:5c:00:
b1:15:0a:2f:6e:b9:2f:5b:d3:5e:33:ca:dd:d8:f6:
fe:ca:0d:dd:5c:7f:35:42:17:3f:24:b3:10:3e:41:
5d:56:5b:9c:46:d4:48:91:33:8c:13:66:88:77:7e:
d7:12:fd:f2:1a:cb:48:ec:2c:84:7a:0f:12:20:85:
89:4d:16:90:34:bc:74:81:67:02:ed:06:65:55:b5:
e5:95:4f:17:aa:d2:5e:ab:6c:84:9c:ed:bf:3b:98:
b0:ad:60:f0:a5:b2:7f:00:42:ae:3a:8c:62:a3:de:
3b:c7:a0:40:d1:99:04:b7:2c:b0:52:3f:93:01:5f:
6f:ee:fd:08:e2:c0:5d:11:20:af:f3:a4:2c:66:2e:
e8:af:ad:93:40:dc:e6:3f:a3:cb:fd:69:52:dc:c4:
75:b5:1b:d2:e7:ef:d2:00:d5:b7:06:6c:38:4f:09:
da:ae:55:50:8b:c0:ff:84:57:78:59:07:ec:79:c7:
2b:46:0a:02:cd:3f:e8:38:68:3a:c0:ad:32:5c:90:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:73:93:39:0F:6C:76:2D:9D:DE:27:DC:45:03:BA:75:EC:B6:05
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:44:68:b9:95:e4:e8:cf:80:f9:57:79:40:b9:1f:63:24:
b3:88:7b:a1:9b:d1:b0:83:07:a3:da:69:ec:73:28:7b:40:1d:
77:2d:3a:74:df:58:40:54:8f:b2:48:27:7c:a5:81:c9:57:b8:
4d:85:a1:22:34:08:01:64:72:cd:63:6e:8e:e5:be:15:30:21:
be:00:a9:a9:15:b9:7a:f1:c9:07:5c:df:da:ca:12:ba:17:69:
41:95:af:43:7d:76:19:ba:08:ee:32:ec:33:f7:92:00:23:38:
62:9a:7f:55:57:f2:c6:b1:ba:8b:41:a4:92:a7:80:b7:72:5a:
11:0c:58:1d:8e:95:80:c4:05:35:53:60:dd:6a:1c:ae:e0:3a:
d4:06:8d:12:5c:14:dc:59:7c:6e:91:15:f7:85:a6:41:52:ad:
d8:ac:10:a5:54:98:00:18:71:4e:ce:fa:dd:de:a8:5a:7f:18:
20:19:be:2d:9e:5e:39:da:56:9a:c1:16:6b:ff:21:60:02:ab:
6a:48:3d:bc:b6:b1:4c:c6:16:00:13:b5:1b:9d:6e:a5:5e:1f:
73:aa:2c:e8:75:3d:6a:37:a0:d3:10:59:ff:29:1c:95:91:24:
0e:f5:a9:e7:e3:9f:95:87:2c:6a:02:1e:b1:63:77:4f:d8:57:
19:84:90:38
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpMYVrGyKYUU5Irpq5E76F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWE3ZTQ3YjkxYTYyOTVjYmY3MThjMWYyZGRiMGEyNWMy
NzZlYjIwHhcNMjUxMTA0MDEwMDM5WhcNMjUxMTA1MDEwMDM5WjAzMTEwLwYDVQQD
EyhmOTkwNzM5MzM5MGY2Yzc2MmQ5ZGRlMjdkYzQ1MDNiYTc1ZWNiNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaH6Qeg06Hcd41OtwGfTV0yuB/lT
DUw8tA/dhRKw8/op8fEF4izYGIRL5av7tJ62nkp9qIihlri4XACxFQovbrkvW9Ne
M8rd2Pb+yg3dXH81Qhc/JLMQPkFdVlucRtRIkTOME2aId37XEv3yGstI7CyEeg8S
IIWJTRaQNLx0gWcC7QZlVbXllU8XqtJeq2yEnO2/O5iwrWDwpbJ/AEKuOoxio947
x6BA0ZkEtyywUj+TAV9v7v0I4sBdESCv86QsZi7or62TQNzmP6PL/WlS3MR1tRvS
5+/SANW3Bmw4TwnarlVQi8D/hFd4WQfseccrRgoCzT/oOGg6wK0yXJCIZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPmQc5M5D2x2LZ3eJ9xFA7p17LYFMB8GA1UdIwQY
MBaAFPiqfke5GmKVy/cYwfLdsKJcJ26yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LcC1SN2thWXBYTDl4akI4dDJ3b2x3bmJySS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRmLTUxMjktNDlmOS05Mjll
LTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpCOHQyd29sd25ickkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2RlNDk0Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZj
YmMvMS8xLUtwLVI3a2FZcFhMOXhqQjh0MndvbHduYnJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUNE
aLmV5OjPgPlXeUC5H2Mks4h7oZvRsIMHo9pp7HMoe0Addy06dN9YQFSPskgnfKWB
yVe4TYWhIjQIAWRyzWNujuW+FTAhvgCpqRW5evHJB1zf2soSuhdpQZWvQ312GboI
7jLsM/eSACM4Ypp/VVfyxrG6i0GkkqeAt3JaEQxYHY6VgMQFNVNg3WocruA61AaN
ElwU3Fl8bpEV94WmQVKt2KwQpVSYABhxTs763d6oWn8YIBm+LZ5eOdpWmsEWa/8h
YAKrakg9vLaxTMYWABO1G51upV4fc6os6HU9ajeg0xBZ/ykclZEkDvWp5+OflYcs
agIesWN3T9hXGYSQOA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:32 2025 by rpki-client