Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: RggDwpyrHaR/USDP6/UeHBzCo25l7IxymO3NPXYaoj8=
Subject key identifier: 30:02:34:C6:BE:7C:2C:9F:1A:3A:8E:46:F4:05:10:7A:B6:92:B7:30
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019A4F627F095A204467D6B6FCCE9B6BD512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 08FB
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: sGDfXGXavSEhbmcaPSobqFIipoma8PaahN+Uw7bHZDE=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7f:09:5a:20:44:67:d6:b6:fc:ce:9b:6b:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=300234c6be7c2c9f1a3a8e46f405107ab692b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:7f:b8:e1:b1:91:09:3f:78:ca:bd:60:46:
0c:0a:7d:2a:d4:57:a9:c1:92:38:b5:8b:64:b0:8c:
47:82:46:fa:8b:be:02:56:8a:a3:53:b5:33:12:fe:
08:19:6a:9f:cf:e7:b7:1f:d6:64:41:bd:bf:da:76:
ec:cf:2a:2d:29:e5:61:b1:a7:94:73:4f:8e:64:ad:
c2:d5:9c:73:42:98:1b:ea:8b:9d:68:8b:52:bf:1f:
9a:db:f1:f7:49:4f:10:8a:63:e6:5f:4b:48:85:53:
54:d6:ae:73:45:85:e0:93:dd:5a:31:d2:f6:e6:b9:
e5:22:fb:4e:61:a1:2a:31:44:3d:8d:b5:f0:e4:d4:
0b:78:39:51:ec:75:48:4e:12:36:54:03:98:59:c3:
22:6e:36:1c:04:7b:96:8c:93:7d:22:20:01:38:23:
f5:d0:62:f7:1a:17:1c:c4:cb:f7:f3:68:41:62:cb:
a9:45:3d:7c:5f:73:84:be:72:82:36:5f:f8:a3:8b:
b5:b3:26:cc:04:69:5c:61:a0:e9:82:16:64:a6:ca:
be:96:8e:cb:e0:15:fa:75:ae:05:c3:df:cc:85:6b:
06:e5:ea:ec:6a:d3:ae:c3:1f:0c:2f:f9:79:2d:c6:
43:67:8f:04:1f:ff:3f:b2:8f:8e:c8:f1:a8:f5:87:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:34:C6:BE:7C:2C:9F:1A:3A:8E:46:F4:05:10:7A:B6:92:B7:30
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:3e:33:f4:85:82:ea:80:2b:4d:9e:ce:cb:93:67:b5:dd:
e2:5e:e0:d1:52:56:14:ba:31:74:30:93:58:7a:a7:87:2d:6b:
c0:fc:d4:f2:8f:56:af:16:ba:14:e2:9d:bc:b3:33:22:ae:4e:
6a:68:d0:0b:41:34:9c:79:9e:a3:93:29:cb:43:70:c1:bf:37:
72:df:51:56:2b:ce:64:f5:32:7d:6a:76:12:7b:9c:10:e6:2f:
ad:f8:a4:70:36:59:9b:bb:2e:09:b6:b6:03:e0:d2:31:57:b9:
21:97:bb:10:0e:5a:ab:ac:99:88:c8:44:6e:91:b6:33:ed:8e:
9d:0a:50:e4:78:b4:86:e6:33:27:1e:7d:60:a5:0e:5f:3d:72:
3a:9c:e3:73:63:8a:ca:ac:36:88:04:8f:f0:c9:2b:e2:74:ed:
ea:e4:3c:16:cf:ab:d0:4d:96:ef:67:9c:ae:d3:38:bc:87:7f:
c8:ca:4b:d2:2c:38:ae:72:d7:6e:d7:e1:7b:fc:d4:02:59:f7:
46:2e:2d:15:3a:b5:54:79:a7:e3:72:7f:1b:5d:e6:cb:e5:41:
e9:23:95:ce:32:18:c9:43:c4:29:c5:43:c0:04:3f:90:d3:a2:
a9:01:7f:ec:fa:15:f0:1a:0d:93:a9:68:b4:bc:2e:38:9a:d8:
a5:8e:f4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYn8JWiBEZ9a2/M6ba9USMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk
ODE5MjYwHhcNMjUxMTA0MTUwMDQ2WhcNMjUxMTA1MTUwMDQ2WjAzMTEwLwYDVQQD
EygzMDAyMzRjNmJlN2MyYzlmMWEzYThlNDZmNDA1MTA3YWI2OTJiNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJ/uOGxkQk/eMq9YEYMCn0q1Fep
wZI4tYtksIxHgkb6i74CVoqjU7UzEv4IGWqfz+e3H9ZkQb2/2nbszyotKeVhsaeU
c0+OZK3C1ZxzQpgb6oudaItSvx+a2/H3SU8QimPmX0tIhVNU1q5zRYXgk91aMdL2
5rnlIvtOYaEqMUQ9jbXw5NQLeDlR7HVIThI2VAOYWcMibjYcBHuWjJN9IiABOCP1
0GL3GhccxMv382hBYsupRT18X3OEvnKCNl/4o4u1sybMBGlcYaDpghZkpsq+lo7L
4BX6da4Fw9/MhWsG5ersatOuwx8ML/l5LcZDZ48EH/8/so+OyPGo9Yf0zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDACNMa+fCyfGjqORvQFEHq2krcwMB8GA1UdIwQY
MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt
Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw
LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5g+M/SF
guqAK02ezsuTZ7Xd4l7g0VJWFLoxdDCTWHqnhy1rwPzU8o9Wrxa6FOKdvLMzIq5O
amjQC0E0nHmeo5Mpy0Nwwb83ct9RVivOZPUyfWp2EnucEOYvrfikcDZZm7suCba2
A+DSMVe5IZe7EA5aq6yZiMhEbpG2M+2OnQpQ5Hi0huYzJx59YKUOXz1yOpzjc2OK
yqw2iASP8Mkr4nTt6uQ8Fs+r0E2W72ecrtM4vId/yMpL0iw4rnLXbtfhe/zUAln3
Ri4tFTq1VHmn43J/G13my+VB6SOVzjIYyUPEKcVDwAQ/kNOiqQF/7PoV8BoNk6lo
tLwuOJrYpY70BQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:43:00 2025 by rpki-client