Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: Zi/0eiUeaOBketXSrHOafeLfrQ3u9q2DjOnCS43WDAc=
Subject key identifier: 20:8F:B1:D2:16:6A:2B:6B:77:ED:8B:E9:32:D8:2A:0C:80:A2:DF:FE
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019A5119B35DFAD53EDC7F2C0D070B058A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0119
Signing time: Tue 04 Nov 2025 23:00:29 +0000
Manifest this update: Tue 04 Nov 2025 23:00:29 +0000
Manifest next update: Wed 05 Nov 2025 23:00:29 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: 2WhsxRb82j8hFOC1Q7TJ7ynj/xRComTkBA9gQT/9izg=)
2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=)
3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b3:5d:fa:d5:3e:dc:7f:2c:0d:07:0b:05:8a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Nov 4 23:00:29 2025 GMT
Not After : Nov 5 23:00:29 2025 GMT
Subject: CN=208fb1d2166a2b6b77ed8be932d82a0c80a2dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:5e:48:2f:44:1a:e7:26:55:8d:02:1f:27:
d3:ff:85:79:cc:3d:2a:e3:50:34:8b:53:d8:23:d5:
f4:d1:0b:64:b5:95:37:c4:26:69:30:15:87:28:e3:
d4:3c:dc:e7:b4:c2:7a:65:92:33:05:aa:92:54:d0:
95:2c:12:8f:f1:52:2f:cd:d7:74:a7:9b:00:ff:19:
9b:80:d4:f8:28:c8:eb:43:d0:b4:74:2c:40:9f:c4:
fc:5e:35:d7:10:bf:93:d0:7f:1a:40:e3:aa:0b:ee:
d8:b1:97:19:09:17:7b:d6:c5:7b:bb:08:ec:d8:d2:
ab:47:10:02:9a:77:e5:70:97:e6:75:a5:9c:0c:4d:
60:2b:9c:26:2e:e1:62:1d:86:0d:19:76:80:72:3c:
79:19:47:d5:f9:12:7f:04:7c:41:a3:d4:18:b6:0f:
88:ac:aa:67:d5:30:23:95:f4:b5:b7:2d:97:dc:8b:
07:13:08:7b:6a:30:94:2f:4d:d8:1f:68:07:53:d3:
d2:be:2d:4c:22:c3:21:54:85:2f:17:ed:9c:26:a3:
39:5c:cb:8e:30:7b:0a:3c:20:e1:bc:23:07:09:34:
0d:9b:a2:ad:89:1a:0c:3b:26:b7:13:5a:97:a5:d5:
43:ab:25:71:a0:bb:a6:c6:eb:f3:09:4d:83:e8:5d:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:B1:D2:16:6A:2B:6B:77:ED:8B:E9:32:D8:2A:0C:80:A2:DF:FE
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:b7:93:b1:30:89:2e:08:cd:6b:72:d5:b1:d2:a3:0c:ac:
23:5f:eb:58:a7:81:1f:c6:61:17:5a:e1:ca:7b:e8:46:2a:57:
70:0e:20:f2:98:23:d6:c0:2f:82:7e:e3:14:c7:93:b1:01:d0:
57:65:75:f1:1e:56:80:80:dd:a5:af:40:43:c8:fd:80:31:d3:
3d:cc:86:e0:72:8c:90:ee:f6:55:ca:4f:8c:79:31:6a:2e:c2:
ba:64:bc:26:1e:ad:11:a3:6c:3f:77:de:9d:c7:d9:cc:97:a9:
51:e7:e4:77:00:56:09:bc:86:83:fa:2e:d3:4c:df:9f:57:eb:
c0:db:9c:fd:38:b3:f0:25:9b:bd:67:3d:a5:9d:fa:c5:11:05:
62:df:b4:04:fb:ce:c0:b6:f1:4b:09:ae:ad:b4:e5:46:0c:bf:
e2:73:28:c1:7a:02:47:b7:1d:91:c6:a2:71:a9:3a:42:7e:3a:
1a:17:a6:95:2f:be:d1:23:2a:66:1e:41:f0:65:f0:b4:9f:bc:
d6:29:51:26:4e:50:bc:41:1b:68:b0:62:d7:b1:ff:1b:78:dd:
9d:b2:7a:75:41:af:af:35:79:fc:ef:fc:e0:3f:cc:cb:f1:70:
e5:04:bb:ed:ea:42:0f:e0:53:fb:b6:4d:5d:ba:3e:86:f6:d1:
95:53:98:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGbNd+tU+3H8sDQcLBYplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3
OWRjMGYwHhcNMjUxMTA0MjMwMDI5WhcNMjUxMTA1MjMwMDI5WjAzMTEwLwYDVQQD
EygyMDhmYjFkMjE2NmEyYjZiNzdlZDhiZTkzMmQ4MmEwYzgwYTJkZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrleSC9EGucmVY0CHyfT/4V5zD0q
41A0i1PYI9X00QtktZU3xCZpMBWHKOPUPNzntMJ6ZZIzBaqSVNCVLBKP8VIvzdd0
p5sA/xmbgNT4KMjrQ9C0dCxAn8T8XjXXEL+T0H8aQOOqC+7YsZcZCRd71sV7uwjs
2NKrRxACmnflcJfmdaWcDE1gK5wmLuFiHYYNGXaAcjx5GUfV+RJ/BHxBo9QYtg+I
rKpn1TAjlfS1ty2X3IsHEwh7ajCUL03YH2gHU9PSvi1MIsMhVIUvF+2cJqM5XMuO
MHsKPCDhvCMHCTQNm6KtiRoMOya3E1qXpdVDqyVxoLumxuvzCU2D6F3wUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCPsdIWaitrd+2L6TLYKgyAot/+MB8GA1UdIwQY
MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt
ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm
LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegK3k7Ew
iS4IzWty1bHSowysI1/rWKeBH8ZhF1rhynvoRipXcA4g8pgj1sAvgn7jFMeTsQHQ
V2V18R5WgIDdpa9AQ8j9gDHTPcyG4HKMkO72VcpPjHkxai7CumS8Jh6tEaNsP3fe
ncfZzJepUefkdwBWCbyGg/ou00zfn1frwNuc/Tiz8CWbvWc9pZ36xREFYt+0BPvO
wLbxSwmurbTlRgy/4nMowXoCR7cdkcaicak6Qn46GhemlS++0SMqZh5B8GXwtJ+8
1ilRJk5QvEEbaLBi17H/G3jdnbJ6dUGvrzV5/O/84D/My/Fw5QS77epCD+BT+7ZN
Xbo+hvbRlVOYwg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:43:16 2025 by rpki-client