Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: WBVfYvg23zl3zK4Idix/pvxatSZbBYo2S+Em9WzETPY=
Subject key identifier: 1A:36:03:66:A7:7A:41:2F:36:2A:D8:82:BC:D2:72:92:AE:8B:44:1E
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 019A4D7421660A6606435BEFC43DD2450639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:47 +0000
Manifest this update: Tue 04 Nov 2025 06:00:47 +0000
Manifest next update: Wed 05 Nov 2025 06:00:47 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: N3yGXmqypvOFUFDWh1eD7JB2reBmrZtA08JhCjIqWOc=)
2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:21:66:0a:66:06:43:5b:ef:c4:3d:d2:45:06:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Nov 4 06:00:47 2025 GMT
Not After : Nov 5 06:00:47 2025 GMT
Subject: CN=1a360366a77a412f362ad882bcd27292ae8b441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:77:cf:36:f6:fa:e4:1e:c0:34:1b:88:ee:
5e:0a:4e:d2:c4:e5:81:e0:a6:d4:af:36:e1:aa:c8:
26:e1:f4:a9:2e:46:1e:c1:a2:47:11:c3:86:24:1d:
bf:fc:3c:8b:6c:a5:52:08:42:2c:c0:a8:a9:cf:18:
77:65:01:4c:6e:2c:46:53:75:59:cc:58:cf:73:30:
8c:60:14:e3:09:0f:58:f5:11:13:a8:96:f1:38:a0:
83:0d:3b:f8:c0:6f:2e:17:19:5e:c5:ba:4f:b7:d5:
78:9d:60:10:2b:51:00:bc:a1:2b:8c:42:3d:26:25:
de:93:3a:e0:87:34:83:1c:0d:c6:ef:39:a8:f9:0e:
55:d1:35:f4:f4:80:14:f7:2a:5d:e3:c1:be:11:f9:
f9:62:d4:58:eb:51:63:1f:4b:33:ca:a8:1f:74:db:
70:e6:a4:88:c5:f8:7f:fa:bf:60:65:57:79:68:bf:
ef:a7:1d:79:03:7c:98:ba:02:46:64:9e:31:7b:65:
0f:b9:e2:bb:74:18:b8:ff:9d:26:19:72:e8:92:ba:
80:d1:5b:f2:ba:cc:70:04:58:c8:28:2a:97:ef:c3:
6e:3a:08:cf:1b:b2:09:da:cb:28:c1:2a:01:cc:f8:
9d:bc:ca:cb:62:18:3f:f4:ca:33:3b:d2:3f:b2:d7:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:03:66:A7:7A:41:2F:36:2A:D8:82:BC:D2:72:92:AE:8B:44:1E
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:41:39:67:26:da:8b:9f:ac:bd:17:ea:28:1e:7c:09:96:
b9:6d:fc:0f:e1:db:f6:57:09:e1:82:92:3b:8a:4c:81:39:34:
f4:c6:4d:cc:de:cc:1d:90:28:71:16:38:db:54:6d:cf:94:46:
ec:51:5b:b1:40:71:8c:af:43:18:4b:ac:04:11:a6:74:82:08:
ef:d2:d3:23:2a:5f:03:1d:d6:17:47:67:00:3d:65:ef:66:7f:
ee:16:8c:a1:8e:07:18:5f:3e:b0:39:d5:00:13:a6:ec:18:53:
fb:bf:48:a9:f1:c5:3d:58:81:d5:36:ef:cb:43:18:48:5a:3c:
0d:7d:e5:54:c2:c5:0e:95:99:30:a8:d1:aa:f3:62:2d:21:11:
df:56:82:05:d8:bc:cf:3b:47:a0:b1:65:f2:c1:bb:6e:2a:ef:
1d:92:90:73:7a:31:40:74:5d:6c:e2:33:74:f0:88:ed:34:88:
bf:be:6e:e2:62:2a:be:05:77:11:cd:42:02:ee:b2:62:0c:54:
77:84:f2:17:d4:23:81:5e:8e:c9:d0:f3:60:c2:ae:6c:5a:e4:
66:bb:40:11:19:bb:49:0d:63:52:d3:cc:87:5e:7a:fb:ab:68:
49:fc:32:82:53:56:06:60:1e:bb:1e:f6:cf:73:07:bc:87:8c:
b6:79:b3:0c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpNdCFmCmYGQ1vvxD3SRQY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmY0ZDU5Y2JkOTc4YWUxMTI3YzY3ZmQyMmYwNGM2MmZm
ODM3Y2YwHhcNMjUxMTA0MDYwMDQ3WhcNMjUxMTA1MDYwMDQ3WjAzMTEwLwYDVQQD
EygxYTM2MDM2NmE3N2E0MTJmMzYyYWQ4ODJiY2QyNzI5MmFlOGI0NDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsel3zzb2+uQewDQbiO5eCk7SxOWB
4KbUrzbhqsgm4fSpLkYewaJHEcOGJB2//DyLbKVSCEIswKipzxh3ZQFMbixGU3VZ
zFjPczCMYBTjCQ9Y9RETqJbxOKCDDTv4wG8uFxlexbpPt9V4nWAQK1EAvKErjEI9
JiXekzrghzSDHA3G7zmo+Q5V0TX09IAU9ypd48G+Efn5YtRY61FjH0szyqgfdNtw
5qSIxfh/+r9gZVd5aL/vpx15A3yYugJGZJ4xe2UPueK7dBi4/50mGXLokrqA0Vvy
usxwBFjIKCqX78NuOgjPG7IJ2ssowSoBzPidvMrLYhg/9MozO9I/stehdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBo2A2anekEvNirYgrzScpKui0QeMB8GA1UdIwQY
MBaAFPu/TVnL2XiuESfGf9IvBMYv+DfPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03OU5XY3ZaZUs0Uko4Wl8waThFeGlfNE44OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvODhjOTk1LWVkZTAtNGNjNC1hNjZk
LTI1YmFhODIzMGZjYi8xLzEtNzlOV2N2WmVLNFJKOFpfMGk4RXhpXzROODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM0Lzg4Yzk5NS1lZGUwLTRjYzQtYTY2ZC0yNWJhYTgyMzBm
Y2IvMS8xLTc5TldjdlplSzRSSjhaXzBpOEV4aV80Tjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc9B
OWcm2oufrL0X6igefAmWuW38D+Hb9lcJ4YKSO4pMgTk09MZNzN7MHZAocRY421Rt
z5RG7FFbsUBxjK9DGEusBBGmdIII79LTIypfAx3WF0dnAD1l72Z/7haMoY4HGF8+
sDnVABOm7BhT+79IqfHFPViB1Tbvy0MYSFo8DX3lVMLFDpWZMKjRqvNiLSER31aC
Bdi8zztHoLFl8sG7birvHZKQc3oxQHRdbOIzdPCI7TSIv75u4mIqvgV3Ec1CAu6y
YgxUd4TyF9QjgV6OydDzYMKubFrkZrtAERm7SQ1jUtPMh156+6toSfwyglNWBmAe
ux72z3MHvIeMtnmzDA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:51 2025 by rpki-client