Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: 1/bUEa5mnq0GW3SBl0VPQHpF/dQWioRJWoShtXredug=
Subject key identifier: F1:ED:ED:17:66:E0:CE:A2:57:7C:F0:70:8D:2F:1E:8A:D4:C1:00:EB
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019A4DE1B78A09CE857C206D4A8043B56EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 13AE
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: pMJ6sMEZ5C93Bi0mPdhgO8j2gebG1OmllHRqhMsDGwE=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b7:8a:09:ce:85:7c:20:6d:4a:80:43:b5:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=f1eded1766e0cea2577cf0708d2f1e8ad4c100eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:fc:0f:cf:12:79:e1:eb:a0:c1:fd:ce:01:
3e:58:a2:0f:28:ad:ae:66:ec:95:4c:91:45:80:8e:
05:c4:87:91:3c:35:e5:86:d4:26:bb:ee:84:0a:6d:
33:d3:47:1f:4f:04:cc:60:d3:6f:6a:3a:24:70:78:
11:48:25:6d:a3:ce:b6:4e:69:34:6e:59:6f:2b:eb:
7b:26:3f:19:00:92:b3:57:42:c8:b8:e5:a1:05:d2:
a7:40:7f:f5:bb:cc:6a:c5:25:55:2a:34:60:49:98:
3b:3a:98:65:c0:3a:f9:0c:8d:57:13:ae:25:da:ca:
e6:24:63:4a:d3:0e:8c:4d:4e:30:3d:36:77:a7:2d:
5d:d2:dc:16:21:0a:96:32:6c:4e:70:53:3b:f1:09:
f0:fe:98:6e:8d:d5:9a:7c:cf:71:d7:08:b9:09:5c:
25:8d:1a:83:2d:a6:f9:e3:61:50:35:d5:d5:8d:84:
40:b1:7f:ae:dc:1e:b5:1f:92:74:55:ff:c5:fa:6b:
a4:ba:45:9d:19:b9:82:0f:ad:00:13:35:5a:60:46:
0d:af:df:0c:b7:d2:f9:45:80:8f:b6:b5:d7:a8:9c:
97:40:13:84:8a:75:aa:67:a4:98:ac:89:8f:fd:e6:
5c:c9:af:40:0f:16:aa:86:b8:68:f1:ac:4c:97:50:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:ED:ED:17:66:E0:CE:A2:57:7C:F0:70:8D:2F:1E:8A:D4:C1:00:EB
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:65:73:3d:6e:a1:45:05:d1:ee:16:9a:dd:81:9e:47:d2:b2:
20:1b:b4:76:c0:12:8e:d6:f7:ad:9f:9d:f0:ea:aa:cd:cf:01:
87:3a:1f:2e:c2:8d:44:e6:d8:bd:fb:ae:bf:4c:c1:2e:0c:32:
b8:0b:7f:41:37:e8:a9:24:36:8c:64:33:48:a5:38:c7:7f:0d:
83:30:c9:5f:e2:a6:8b:d8:42:7e:a5:9b:54:3e:77:03:91:59:
1a:02:d1:d8:c0:70:79:e2:dc:34:58:c8:41:2d:e8:b9:5d:43:
fe:e0:9d:66:b1:e3:f2:42:cb:b8:22:1c:d6:a2:04:db:e7:db:
f9:1f:d8:83:92:f3:ec:ec:47:42:a1:1c:54:3f:a0:8f:04:8b:
8e:65:2a:6e:c4:e3:12:86:51:32:c1:ab:d1:78:9c:8a:99:94:
20:9c:a9:d0:3d:e2:e3:22:79:0c:d2:40:f3:74:c6:a7:37:c7:
5a:c5:02:aa:bd:85:55:75:3d:d0:19:9b:e3:f7:63:1a:44:05:
97:15:33:eb:3c:f5:da:89:5e:10:a2:8f:6b:f4:9e:69:19:0c:
3b:bf:4f:e2:43:98:79:e4:fd:4c:f8:ec:06:a9:1b:d5:02:dc:
1a:8f:76:dc:3e:bc:be:e6:19:f5:4f:5e:34:d5:b5:75:03:54:
ce:3e:6c:44
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpN4beKCc6FfCBtSoBDtW7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy
MjI4YTQwHhcNMjUxMTA0MDgwMDI5WhcNMjUxMTA1MDgwMDI5WjAzMTEwLwYDVQQD
EyhmMWVkZWQxNzY2ZTBjZWEyNTc3Y2YwNzA4ZDJmMWU4YWQ0YzEwMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5r8D88SeeHroMH9zgE+WKIPKK2u
ZuyVTJFFgI4FxIeRPDXlhtQmu+6ECm0z00cfTwTMYNNvajokcHgRSCVto862Tmk0
bllvK+t7Jj8ZAJKzV0LIuOWhBdKnQH/1u8xqxSVVKjRgSZg7OphlwDr5DI1XE64l
2srmJGNK0w6MTU4wPTZ3py1d0twWIQqWMmxOcFM78Qnw/phujdWafM9x1wi5CVwl
jRqDLab542FQNdXVjYRAsX+u3B61H5J0Vf/F+mukukWdGbmCD60AEzVaYEYNr98M
t9L5RYCPtrXXqJyXQBOEinWqZ6SYrImP/eZcya9ADxaqhrho8axMl1DlGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPHt7Rdm4M6iV3zwcI0vHorUwQDrMB8GA1UdIwQY
MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm
LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw
MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2Vz
PW6hRQXR7haa3YGeR9KyIBu0dsASjtb3rZ+d8Oqqzc8BhzofLsKNRObYvfuuv0zB
LgwyuAt/QTfoqSQ2jGQzSKU4x38NgzDJX+Kmi9hCfqWbVD53A5FZGgLR2MBweeLc
NFjIQS3ouV1D/uCdZrHj8kLLuCIc1qIE2+fb+R/Yg5Lz7OxHQqEcVD+gjwSLjmUq
bsTjEoZRMsGr0XicipmUIJyp0D3i4yJ5DNJA83TGpzfHWsUCqr2FVXU90Bmb4/dj
GkQFlxUz6zz12oleEKKPa/SeaRkMO79P4kOYeeT9TPjsBqkb1QLcGo923D68vuYZ
9U9eNNW1dQNUzj5sRA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:26 2025 by rpki-client