Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: dWXeV3Pnl5XDeuEOYPrFWin7/o5z2KIwZjHlPqABIZ8=
Subject key identifier: D0:93:7B:E6:82:04:0F:90:4E:41:7D:8D:B3:42:7F:47:5D:86:82:92
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019A50077CEB47EE3B9C94E31453CC17538D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 13A0
Signing time: Tue 04 Nov 2025 18:00:59 +0000
Manifest this update: Tue 04 Nov 2025 18:00:59 +0000
Manifest next update: Wed 05 Nov 2025 18:00:59 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: pin2wTjfyZxLZw4IIKbWdN0W29PynRwYyCKVFy8/Fos=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7c:eb:47:ee:3b:9c:94:e3:14:53:cc:17:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Nov 4 18:00:59 2025 GMT
Not After : Nov 5 18:00:59 2025 GMT
Subject: CN=d0937be682040f904e417d8db3427f475d868292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:be:92:44:2e:40:b3:b3:f7:98:e3:8e:69:
b2:06:81:0e:3c:4f:cf:32:0b:d9:21:ca:60:c8:8f:
cc:bb:0c:eb:58:fb:92:06:a4:9a:6e:b7:ee:fa:cc:
c6:ff:e7:80:2b:74:b8:d4:5f:1a:fc:c8:da:34:41:
ac:68:11:bc:90:63:a3:62:19:bf:3b:b1:d0:e1:b7:
38:eb:9e:9f:ad:e0:da:c1:fa:06:02:fe:49:f8:13:
1e:96:2d:ac:23:9e:c0:02:f0:6d:b9:c8:d8:bf:b1:
c5:ac:3f:23:c3:be:c6:56:27:4e:d8:a3:08:f0:78:
ef:40:41:69:d8:6b:c4:ef:51:c1:b3:a2:84:9e:ca:
28:6c:f3:30:07:a1:56:03:ad:3b:0a:28:ae:34:7d:
fa:1e:56:a6:e4:c7:d0:9c:5d:da:40:a4:c4:61:76:
f0:3c:13:a0:8e:b4:a7:c0:95:37:46:c2:fb:a8:8b:
ce:cb:23:00:39:10:60:9a:a6:16:2b:de:35:00:e9:
aa:4a:13:08:7c:cb:2a:fd:69:57:93:0e:99:1f:49:
72:79:98:9f:f8:6f:6d:b6:7f:45:25:6c:fe:13:c2:
d5:5e:4c:57:61:57:ce:09:e8:c8:ff:bf:0c:24:3d:
45:4e:5f:31:41:4b:58:1f:8e:69:7e:06:76:b6:88:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:7B:E6:82:04:0F:90:4E:41:7D:8D:B3:42:7F:47:5D:86:82:92
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:17:db:98:8b:7e:3c:1d:66:1f:d1:ba:4f:84:02:37:30:
5e:83:0e:a1:09:e9:9f:fb:7a:00:41:f5:14:26:09:36:b4:9d:
ec:06:e3:b8:18:bb:83:83:ee:0c:35:ca:a8:4e:a4:65:dd:93:
2f:ff:3a:4f:95:09:21:ce:7f:29:7e:dc:f5:ee:5e:43:2c:af:
6f:a9:cb:22:80:2d:e3:70:85:42:ba:ee:be:54:9e:a9:ae:f5:
de:05:7c:8e:e8:77:1d:3e:31:bc:28:cf:59:c6:6e:26:10:18:
de:b9:a2:07:18:eb:71:de:a2:d0:2a:4a:8f:f1:1b:45:33:7f:
2c:02:21:3b:b2:2d:30:ec:d1:32:a5:17:7c:f9:42:45:29:c3:
54:8a:c0:b7:f5:b2:27:71:90:83:c6:42:b4:85:d7:8e:2c:b4:
9f:93:41:a7:e6:a3:27:0a:e1:5e:33:5b:79:b3:5b:0a:d6:f6:
9c:40:44:6d:f6:aa:8f:2c:34:80:8d:47:55:73:77:9f:87:83:
43:92:2c:af:9d:ae:05:19:06:9b:4f:a9:35:d2:ff:69:9b:78:
c0:22:44:3d:26:bc:e6:18:16:fa:48:50:b4:df:b4:78:a1:a0:
66:ef:d5:09:b9:18:bf:4a:bd:b0:e8:78:95:1d:e9:82:34:08:
12:5e:2a:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB3zrR+47nJTjFFPMF1ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3
ZmFlOTIwHhcNMjUxMTA0MTgwMDU5WhcNMjUxMTA1MTgwMDU5WjAzMTEwLwYDVQQD
EyhkMDkzN2JlNjgyMDQwZjkwNGU0MTdkOGRiMzQyN2Y0NzVkODY4MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY2+kkQuQLOz95jjjmmyBoEOPE/P
MgvZIcpgyI/MuwzrWPuSBqSabrfu+szG/+eAK3S41F8a/MjaNEGsaBG8kGOjYhm/
O7HQ4bc4656freDawfoGAv5J+BMeli2sI57AAvBtucjYv7HFrD8jw77GVidO2KMI
8HjvQEFp2GvE71HBs6KEnsoobPMwB6FWA607CiiuNH36Hlam5MfQnF3aQKTEYXbw
PBOgjrSnwJU3RsL7qIvOyyMAORBgmqYWK941AOmqShMIfMsq/WlXkw6ZH0lyeZif
+G9ttn9FJWz+E8LVXkxXYVfOCejI/78MJD1FTl8xQUtYH45pfgZ2togabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCTe+aCBA+QTkF9jbNCf0ddhoKSMB8GA1UdIwQY
MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt
YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1
LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6wX25iL
fjwdZh/Ruk+EAjcwXoMOoQnpn/t6AEH1FCYJNrSd7AbjuBi7g4PuDDXKqE6kZd2T
L/86T5UJIc5/KX7c9e5eQyyvb6nLIoAt43CFQrruvlSeqa713gV8juh3HT4xvCjP
WcZuJhAY3rmiBxjrcd6i0CpKj/EbRTN/LAIhO7ItMOzRMqUXfPlCRSnDVIrAt/Wy
J3GQg8ZCtIXXjiy0n5NBp+ajJwrhXjNbebNbCtb2nEBEbfaqjyw0gI1HVXN3n4eD
Q5Isr52uBRkGm0+pNdL/aZt4wCJEPSa85hgW+khQtN+0eKGgZu/VCbkYv0q9sOh4
lR3pgjQIEl4qkg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:31 2025 by rpki-client