Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: bhLGd8qmNtTvhixwkZ1i5PEJ0cA1Zeo5NldGogpzmEE=
Subject key identifier: 81:F3:C4:73:B1:EE:F8:C8:6A:09:AC:D3:C5:CA:39:33:44:8D:8F:E2
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019A51F58B1F77A58DE1419E6FA0F62451D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 0657
Signing time: Wed 05 Nov 2025 03:00:37 +0000
Manifest this update: Wed 05 Nov 2025 03:00:37 +0000
Manifest next update: Thu 06 Nov 2025 03:00:37 +0000
Files and hashes: 1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: 48DMheAEZeuokgftXmJOrGDmxTKNlVoNDWha7uK5LW0=)
2: ul-xO-5mZZApWQIPteBxrXhy3Gg.roa (hash: Xgcb4gBJ+LBlJQi0BqbRaMDSR7lxsJ55H3PWqex5WBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:8b:1f:77:a5:8d:e1:41:9e:6f:a0:f6:24:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Nov 5 03:00:37 2025 GMT
Not After : Nov 6 03:00:37 2025 GMT
Subject: CN=81f3c473b1eef8c86a09acd3c5ca3933448d8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:f8:38:c5:b9:02:36:11:3e:01:37:b0:09:
e3:11:12:65:db:11:e6:4e:94:dd:c2:36:e4:de:27:
3f:cd:31:df:6c:d8:38:d3:46:f8:0a:02:62:a8:2c:
8f:cc:90:52:52:12:95:9c:fe:69:c5:c0:2e:f4:eb:
65:29:8c:20:5a:32:d5:49:bc:0f:f3:8c:32:e2:26:
8b:f7:cc:46:99:1f:77:eb:5a:34:02:cc:22:93:30:
76:2e:3b:20:ba:7e:4b:d2:bc:06:20:a9:c2:2a:52:
28:5f:d2:43:36:74:84:a8:c4:0d:16:ee:75:6e:d8:
c6:bb:a6:88:8d:1e:c8:22:ab:84:da:1a:fe:2f:fa:
c4:fa:bf:ed:d4:17:ab:2d:ef:a4:95:e8:11:07:70:
00:99:53:d5:92:bd:8d:70:19:35:ac:da:46:bb:1c:
fd:1a:81:c3:21:2b:cd:66:3b:19:7a:2d:fa:31:d0:
4a:52:e2:21:72:ec:7f:d7:78:3f:e9:2c:13:3e:ff:
d7:65:7c:46:cb:62:ec:67:47:4f:e1:62:e5:5d:b0:
78:44:08:2e:81:6c:ad:e5:52:3a:06:18:f1:9d:19:
e0:97:e3:5b:fc:aa:32:c3:d0:2d:e4:c7:ec:76:97:
03:6a:f0:1e:ca:14:89:7f:30:b1:aa:bf:5e:8a:17:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:C4:73:B1:EE:F8:C8:6A:09:AC:D3:C5:CA:39:33:44:8D:8F:E2
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9f:c7:20:b1:78:64:f0:1c:b9:21:46:db:fd:fc:02:d8:05:
51:b0:88:25:4e:03:a4:cc:34:f4:5c:a2:39:1e:ab:c5:96:8e:
69:d9:46:c6:43:74:d1:01:3c:47:8b:ec:b0:5c:18:3f:4b:69:
f4:d3:ee:87:41:b1:ea:36:d9:eb:14:b5:65:a4:99:30:3e:7b:
e0:4f:4d:ad:36:61:4a:8a:1d:c0:4d:a6:76:05:a7:20:33:e0:
8d:3f:67:d4:6c:36:c7:21:0e:d1:44:88:83:15:62:69:68:57:
1d:b0:b7:d9:f3:5b:33:16:b0:37:b7:ee:46:73:2d:ae:83:a6:
ea:08:8b:9b:e7:50:76:dc:5a:df:65:89:e2:d0:95:a3:05:ca:
66:69:21:03:99:8c:bc:66:e9:89:fc:90:59:d5:0a:18:89:22:
16:61:aa:5e:74:8d:8e:e5:32:4d:d4:0b:08:73:bf:58:25:3a:
81:b7:a1:fe:62:53:96:55:39:04:e2:f1:70:99:2f:25:c9:a8:
2b:bf:99:0e:47:e8:fb:c0:b3:22:18:f0:f0:7e:fc:15:f2:ae:
fb:93:c0:57:db:d0:91:c8:70:6c:2d:2f:57:62:96:7a:cd:c2:
63:3e:6a:5a:c2:78:4f:f4:86:ca:55:96:c9:d8:a6:04:9f:ff:
63:8f:e5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9Ysfd6WN4UGeb6D2JFHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTI2NTg5YzUxOTRmMWU1ZmJiOWZkYzUxNjY3ZGFmMDU2
MmQ2ZDkwHhcNMjUxMTA1MDMwMDM3WhcNMjUxMTA2MDMwMDM3WjAzMTEwLwYDVQQD
Eyg4MWYzYzQ3M2IxZWVmOGM4NmEwOWFjZDNjNWNhMzkzMzQ0OGQ4ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr34OMW5AjYRPgE3sAnjERJl2xHm
TpTdwjbk3ic/zTHfbNg400b4CgJiqCyPzJBSUhKVnP5pxcAu9OtlKYwgWjLVSbwP
84wy4iaL98xGmR9361o0AswikzB2Ljsgun5L0rwGIKnCKlIoX9JDNnSEqMQNFu51
btjGu6aIjR7IIquE2hr+L/rE+r/t1BerLe+klegRB3AAmVPVkr2NcBk1rNpGuxz9
GoHDISvNZjsZei36MdBKUuIhcux/13g/6SwTPv/XZXxGy2LsZ0dP4WLlXbB4RAgu
gWyt5VI6BhjxnRngl+Nb/Koyw9At5MfsdpcDavAeyhSJfzCxqr9eihfjtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHzxHOx7vjIagms08XKOTNEjY/iMB8GA1UdIwQY
MBaAFAdSZYnFGU8eX7uf3FFmfa8FYtbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2Mt
ZGQxNzBjMWZkMzNjLzEvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2MtZGQxNzBjMWZkMzNj
LzEvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5/HILF4
ZPAcuSFG2/38AtgFUbCIJU4DpMw09FyiOR6rxZaOadlGxkN00QE8R4vssFwYP0tp
9NPuh0Gx6jbZ6xS1ZaSZMD574E9NrTZhSoodwE2mdgWnIDPgjT9n1Gw2xyEO0USI
gxViaWhXHbC32fNbMxawN7fuRnMtroOm6giLm+dQdtxa32WJ4tCVowXKZmkhA5mM
vGbpifyQWdUKGIkiFmGqXnSNjuUyTdQLCHO/WCU6gbeh/mJTllU5BOLxcJkvJcmo
K7+ZDkfo+8CzIhjw8H78FfKu+5PAV9vQkchwbC0vV2KWes3CYz5qWsJ4T/SGylWW
ydimBJ//Y4/l+w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:33 2025 by rpki-client