Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: Aqr/bUlHqa+MVX96JvYGbRP9xW3tCC5crHx1HBZEUxE=
Subject key identifier: D2:44:BE:E8:20:53:89:6D:19:90:1F:E1:57:24:4A:56:78:5B:B6:FB
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019A4F997F6E7BAE8DA0267CE86EC81BB2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 14AF
Signing time: Tue 04 Nov 2025 16:00:50 +0000
Manifest this update: Tue 04 Nov 2025 16:00:50 +0000
Manifest next update: Wed 05 Nov 2025 16:00:50 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: BBTKRfpMxiFyz94exmn9LeQPWVtKWk1F/CkdsGpa9f4=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7f:6e:7b:ae:8d:a0:26:7c:e8:6e:c8:1b:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Nov 4 16:00:50 2025 GMT
Not After : Nov 5 16:00:50 2025 GMT
Subject: CN=d244bee82053896d19901fe157244a56785bb6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:f1:ed:79:44:a8:6d:8b:1f:83:f4:19:73:
e9:3b:86:46:cc:33:a8:0f:51:8e:de:07:f9:cb:c6:
50:84:78:dd:15:ab:98:5d:df:91:00:00:81:84:45:
ad:f0:d0:55:66:95:2f:85:49:20:cc:32:30:09:db:
fb:26:5d:18:c9:70:2b:5a:fd:b3:74:7a:71:37:01:
68:d5:6f:b0:3f:4d:24:fa:34:fe:d6:7c:39:21:5a:
94:bf:fa:84:66:8d:56:d4:be:44:a4:f6:fe:5b:39:
1a:73:23:2a:9c:9d:ea:35:8e:a1:f3:32:a2:69:05:
04:a2:5d:ef:7d:e9:e3:83:db:f6:62:1e:32:f3:e6:
8c:aa:af:77:ce:10:e1:3d:c6:2e:c2:e2:81:35:be:
57:bd:2b:74:e0:60:68:22:73:18:28:ae:2a:f8:28:
0e:aa:a7:fc:00:9c:75:03:4d:29:4a:ab:88:92:22:
18:cf:f0:79:60:e0:cc:db:d2:0c:0f:71:a3:b2:59:
33:7e:5c:7b:be:be:7f:6f:52:ec:c6:c5:19:f1:18:
2e:18:43:8d:7b:15:f4:15:af:7e:3a:69:e7:e9:5d:
04:d6:f5:7c:86:ee:96:f2:2f:88:da:d8:a6:03:d0:
8d:32:94:4e:91:29:6b:52:7a:c4:ff:c5:aa:67:4d:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:BE:E8:20:53:89:6D:19:90:1F:E1:57:24:4A:56:78:5B:B6:FB
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:76:ec:be:a7:d2:33:5c:3a:bd:c6:83:bf:db:73:fb:78:
25:7e:72:dc:fe:61:ac:05:6c:f8:50:c3:d7:6c:e5:9c:28:df:
05:e4:d1:66:1d:91:95:a4:fb:19:99:45:04:4c:c7:27:b4:a4:
ac:83:da:ba:6a:b3:b3:e8:3e:fc:4f:ec:41:a7:e3:37:46:bb:
81:d9:5d:e4:08:0d:c0:a0:47:9f:1c:25:47:10:ce:2f:d9:ec:
ce:e1:d4:97:fb:b8:c8:cb:ea:e7:9e:cb:57:35:b0:56:20:3f:
0c:53:d4:02:9c:46:17:80:16:e0:40:82:6b:e9:81:de:eb:ca:
8b:ea:c6:b9:59:76:bc:08:98:4d:75:64:59:46:88:e8:39:a2:
bd:d4:e3:20:2e:7a:25:25:f9:4c:40:2e:02:7e:ca:f1:9d:f7:
28:a8:e0:1d:77:bf:22:9a:ed:df:c2:09:16:bf:7b:22:1f:de:
03:59:b4:3a:66:28:b8:25:84:57:5a:99:64:aa:58:45:a5:0a:
fc:09:32:43:ac:fd:05:a4:03:5e:f5:0b:8e:25:5e:b3:ab:b8:
7e:c9:8e:9a:84:78:bf:00:25:46:ed:fc:48:d4:72:31:eb:a5:
24:d5:a1:c6:98:e3:47:f2:0f:bf:61:0e:cb:53:4c:71:72:a1:
b7:9d:92:56
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpPmX9ue66NoCZ86G7IG7K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0
ZmM5OGUwHhcNMjUxMTA0MTYwMDUwWhcNMjUxMTA1MTYwMDUwWjAzMTEwLwYDVQQD
EyhkMjQ0YmVlODIwNTM4OTZkMTk5MDFmZTE1NzI0NGE1Njc4NWJiNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjrx7XlEqG2LH4P0GXPpO4ZGzDOo
D1GO3gf5y8ZQhHjdFauYXd+RAACBhEWt8NBVZpUvhUkgzDIwCdv7Jl0YyXArWv2z
dHpxNwFo1W+wP00k+jT+1nw5IVqUv/qEZo1W1L5EpPb+WzkacyMqnJ3qNY6h8zKi
aQUEol3vfenjg9v2Yh4y8+aMqq93zhDhPcYuwuKBNb5XvSt04GBoInMYKK4q+CgO
qqf8AJx1A00pSquIkiIYz/B5YODM29IMD3Gjslkzflx7vr5/b1LsxsUZ8RguGEON
exX0Fa9+Omnn6V0E1vV8hu6W8i+I2timA9CNMpROkSlrUnrE/8WqZ02XyQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNJEvuggU4ltGZAf4VckSlZ4W7b7MB8GA1UdIwQY
MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj
LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5
MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTl2
7L6n0jNcOr3Gg7/bc/t4JX5y3P5hrAVs+FDD12zlnCjfBeTRZh2RlaT7GZlFBEzH
J7SkrIPaumqzs+g+/E/sQafjN0a7gdld5AgNwKBHnxwlRxDOL9nszuHUl/u4yMvq
557LVzWwViA/DFPUApxGF4AW4ECCa+mB3uvKi+rGuVl2vAiYTXVkWUaI6DmivdTj
IC56JSX5TEAuAn7K8Z33KKjgHXe/Iprt38IJFr97Ih/eA1m0OmYouCWEV1qZZKpY
RaUK/AkyQ6z9BaQDXvULjiVes6u4fsmOmoR4vwAlRu38SNRyMeulJNWhxpjjR/IP
v2EOy1NMcXKht52SVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:09:59 2025 by rpki-client