Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: UTmXCjJpOnTidzpFcu0b1XDkUvxCwieiAE7m4M8EuYY=
Subject key identifier: 25:69:78:01:77:3A:49:DF:69:8B:41:A7:A1:CF:55:2D:DF:69:B7:77
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019A4E4F960ACE7499EBF7ACA71332A255AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 16DD
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: /5QQFlMpibuj5/kherXUSbK+LLOH3n/MXfqgb6aLf4M=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:96:0a:ce:74:99:eb:f7:ac:a7:13:32:a2:55:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=25697801773a49df698b41a7a1cf552ddf69b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:24:70:c7:b6:32:66:cb:23:0e:7b:cd:f6:
40:c1:93:52:a4:eb:73:4b:5a:02:ea:6b:62:87:e3:
4e:c3:c3:4e:34:eb:f0:e0:ea:5e:b9:51:2c:f5:bc:
8e:d4:2b:53:17:7c:f0:5d:ea:10:f1:c7:ad:84:81:
59:21:7a:05:ee:86:7c:43:3b:3b:8c:96:34:e6:f3:
25:d3:e3:05:21:6e:c2:88:f8:9f:91:2a:39:a9:d5:
c7:7b:54:54:55:b3:12:25:eb:b0:2e:58:0b:18:a0:
5a:58:08:2e:b4:ce:5d:58:57:9c:c5:30:f8:33:78:
50:1e:ff:44:b2:05:c9:ab:18:87:05:59:e4:45:ab:
59:85:f2:4b:da:5d:59:bb:66:19:5a:ac:73:97:38:
ec:32:0d:17:a2:11:57:27:32:55:b9:46:cc:e8:d1:
b0:c4:96:6f:fe:05:fb:c1:72:7c:4b:09:d3:c2:9e:
61:37:34:1e:12:3e:6f:d8:81:53:21:77:76:15:0b:
91:23:97:42:ba:b7:4d:38:d9:a2:8c:fa:51:6a:dc:
bd:72:43:4e:5f:cd:a4:8b:e6:0c:a6:70:6b:ed:67:
04:32:3f:de:cd:13:38:0d:33:8c:91:67:7a:7a:2f:
29:70:4d:9c:6f:81:4e:31:d3:e7:b5:eb:00:06:b2:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:78:01:77:3A:49:DF:69:8B:41:A7:A1:CF:55:2D:DF:69:B7:77
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:ec:3b:63:f4:cd:11:db:e4:d5:9d:32:e8:7b:b5:5a:1a:
39:a5:1e:2d:4d:9d:b2:98:26:57:fc:0a:54:c0:22:9e:42:1e:
47:ac:c2:df:36:9f:6f:31:f6:8a:90:45:15:ef:01:ce:c5:11:
f0:ea:d8:69:84:d2:06:cd:7d:c5:89:5c:de:fd:00:6a:4d:e5:
15:ea:12:87:69:80:6d:6d:76:57:22:12:ba:96:22:74:37:ee:
54:98:0d:e2:37:e0:27:22:53:e9:bc:8f:23:b9:91:e7:21:5f:
04:96:cd:0a:23:e8:ff:c3:f4:cf:0d:93:70:a5:1b:89:0c:10:
1a:aa:78:8d:69:b5:87:e2:5f:36:6e:26:c4:40:0b:18:df:f6:
3c:73:84:4a:83:ff:22:3f:c4:44:7f:37:b0:1f:0b:7a:82:c9:
55:56:fd:49:d3:29:2b:da:6a:62:05:34:23:1c:6c:ee:e3:c1:
fc:34:fc:51:e1:2f:b9:22:48:2a:9f:47:95:d9:75:84:3d:dc:
02:5b:20:f1:a5:0c:d3:d0:c0:e2:cd:ad:cc:75:c0:be:25:72:
60:91:b6:28:cc:c0:b3:31:70:5b:76:79:cf:fe:40:54:2c:8c:
2f:ec:b3:29:f6:08:f7:40:01:ea:88:89:34:ce:92:c4:62:7b:
9a:45:8d:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOT5YKznSZ6/espxMyolWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4
ZmMyMDkwHhcNMjUxMTA0MTAwMDI5WhcNMjUxMTA1MTAwMDI5WjAzMTEwLwYDVQQD
EygyNTY5NzgwMTc3M2E0OWRmNjk4YjQxYTdhMWNmNTUyZGRmNjliNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18kcMe2MmbLIw57zfZAwZNSpOtz
S1oC6mtih+NOw8NONOvw4OpeuVEs9byO1CtTF3zwXeoQ8cethIFZIXoF7oZ8Qzs7
jJY05vMl0+MFIW7CiPifkSo5qdXHe1RUVbMSJeuwLlgLGKBaWAgutM5dWFecxTD4
M3hQHv9EsgXJqxiHBVnkRatZhfJL2l1Zu2YZWqxzlzjsMg0XohFXJzJVuUbM6NGw
xJZv/gX7wXJ8SwnTwp5hNzQeEj5v2IFTIXd2FQuRI5dCurdNONmijPpRaty9ckNO
X82ki+YMpnBr7WcEMj/ezRM4DTOMkWd6ei8pcE2cb4FOMdPntesABrL6nQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCVpeAF3OknfaYtBp6HPVS3fabd3MB8GA1UdIwQY
MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi
LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz
ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk7s
O2P0zRHb5NWdMuh7tVoaOaUeLU2dspgmV/wKVMAinkIeR6zC3zafbzH2ipBFFe8B
zsUR8OrYaYTSBs19xYlc3v0Aak3lFeoSh2mAbW12VyISupYidDfuVJgN4jfgJyJT
6byPI7mR5yFfBJbNCiPo/8P0zw2TcKUbiQwQGqp4jWm1h+JfNm4mxEALGN/2PHOE
SoP/Ij/ERH83sB8LeoLJVVb9SdMpK9pqYgU0Ixxs7uPB/DT8UeEvuSJIKp9Hldl1
hD3cAlsg8aUM09DA4s2tzHXAviVyYJG2KMzAszFwW3Z5z/5AVCyML+yzKfYI90AB
6oiJNM6SxGJ7mkWNFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:57 2025 by rpki-client