Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: 9KDnwZiMzNKJOgrk7fLtF9DIaDUl3ZTePw4cFutzk74=
Subject key identifier: F5:B1:C7:F8:48:89:87:CC:6C:A1:A4:E0:F9:99:0B:1F:D8:11:A3:AB
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019A5074DE9BDB34AC53507417AF6B5C363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 0F94
Signing time: Tue 04 Nov 2025 20:00:27 +0000
Manifest this update: Tue 04 Nov 2025 20:00:27 +0000
Manifest next update: Wed 05 Nov 2025 20:00:27 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: vH1lfGvHO7kl0e0IO+sKxGHjXEwpXYrPSSYcu8X/bTE=)
2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:de:9b:db:34:ac:53:50:74:17:af:6b:5c:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Nov 4 20:00:27 2025 GMT
Not After : Nov 5 20:00:27 2025 GMT
Subject: CN=f5b1c7f8488987cc6ca1a4e0f9990b1fd811a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:a1:c3:d8:b8:e9:54:7e:7e:e1:68:56:29:
99:97:f1:90:f1:2e:bb:9c:51:0e:de:d3:49:b2:e0:
0c:db:08:1c:6e:52:c5:9f:63:c2:5d:36:0f:ec:2d:
9a:01:6e:c1:76:00:20:dc:f0:11:a1:b7:1d:b0:db:
1a:8b:80:49:0e:aa:8d:55:fc:49:77:6b:16:1a:23:
00:00:a3:bf:1b:16:cb:99:20:8f:9d:c5:c7:9e:f3:
63:2d:ad:ac:11:bf:70:4b:27:c0:c2:92:9e:77:64:
68:a6:59:e1:7e:66:0b:78:37:6c:3a:7d:79:fa:05:
b7:15:41:cb:ee:65:da:f3:e5:e0:75:a7:23:31:ee:
9f:f3:07:42:64:ef:df:13:d2:04:65:f4:dc:06:2d:
d1:a7:0b:e2:73:15:dc:90:95:02:9e:bf:45:61:d3:
0a:7d:4e:25:18:ad:71:6c:d5:02:e2:73:17:83:53:
6b:9c:e5:b1:d6:48:e3:72:b4:02:0a:b5:1d:54:ab:
5b:fc:b2:94:6a:75:ff:7a:ee:d2:76:48:9d:23:77:
26:77:ad:33:66:76:ba:57:de:0d:4e:8a:6f:8c:51:
b0:1c:5e:32:a6:2e:07:d0:e8:4d:53:49:a3:d2:87:
b9:17:64:b7:09:a3:f6:d9:67:a6:db:de:d0:d3:45:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:C7:F8:48:89:87:CC:6C:A1:A4:E0:F9:99:0B:1F:D8:11:A3:AB
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:64:c8:c5:28:c9:55:8a:b6:24:1c:76:40:da:0b:6f:31:
d0:aa:60:85:3e:7e:54:5c:d8:f7:21:2a:0e:66:eb:60:68:c3:
8b:a5:79:d6:03:a5:3b:53:96:79:98:ec:2f:56:44:50:5b:65:
8f:98:6e:e2:9b:8a:4c:f4:23:6e:42:95:7b:17:1e:8d:f3:32:
54:ef:bd:09:07:a3:16:a7:b1:18:2e:45:d5:78:66:b9:5e:12:
1a:d3:3b:98:1e:c3:e6:4b:34:35:bf:44:83:3a:6d:d5:0f:f0:
08:e7:07:4d:30:de:c2:7a:54:ec:0e:8a:59:d2:20:7f:47:70:
3a:a1:6c:51:17:b1:f0:48:95:50:de:7d:31:f7:7d:b0:a4:f8:
41:ea:34:76:83:11:ca:da:f5:97:72:4a:5d:66:67:e8:99:78:
5b:d8:4a:0e:44:8c:8b:f1:3c:78:bf:4f:f2:e7:a8:df:8a:e3:
b3:5b:73:2b:8a:90:c1:c1:5b:5e:41:4a:5b:64:b0:f3:c6:69:
49:25:3c:97:71:f0:32:7f:69:8c:ee:b8:3e:fe:af:18:d8:be:
61:8d:c0:36:bf:23:c6:3c:af:e6:0c:16:a8:a7:4d:cd:f2:4e:
a6:63:8c:84:e9:43:c9:70:3a:0d:2d:ce:00:6c:ac:80:30:0c:
75:aa:29:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdN6b2zSsU1B0F69rXDY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4
ZTQwMjQwHhcNMjUxMTA0MjAwMDI3WhcNMjUxMTA1MjAwMDI3WjAzMTEwLwYDVQQD
EyhmNWIxYzdmODQ4ODk4N2NjNmNhMWE0ZTBmOTk5MGIxZmQ4MTFhM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuOhw9i46VR+fuFoVimZl/GQ8S67
nFEO3tNJsuAM2wgcblLFn2PCXTYP7C2aAW7BdgAg3PARobcdsNsai4BJDqqNVfxJ
d2sWGiMAAKO/GxbLmSCPncXHnvNjLa2sEb9wSyfAwpKed2RoplnhfmYLeDdsOn15
+gW3FUHL7mXa8+XgdacjMe6f8wdCZO/fE9IEZfTcBi3RpwvicxXckJUCnr9FYdMK
fU4lGK1xbNUC4nMXg1NrnOWx1kjjcrQCCrUdVKtb/LKUanX/eu7SdkidI3cmd60z
Zna6V94NTopvjFGwHF4ypi4H0OhNU0mj0oe5F2S3CaP22Wem297Q00WL4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWxx/hIiYfMbKGk4PmZCx/YEaOrMB8GA1UdIwQY
MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct
YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx
LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYatkyMUo
yVWKtiQcdkDaC28x0KpghT5+VFzY9yEqDmbrYGjDi6V51gOlO1OWeZjsL1ZEUFtl
j5hu4puKTPQjbkKVexcejfMyVO+9CQejFqexGC5F1XhmuV4SGtM7mB7D5ks0Nb9E
gzpt1Q/wCOcHTTDewnpU7A6KWdIgf0dwOqFsURex8EiVUN59Mfd9sKT4Qeo0doMR
ytr1l3JKXWZn6Jl4W9hKDkSMi/E8eL9P8ueo34rjs1tzK4qQwcFbXkFKW2Sw88Zp
SSU8l3HwMn9pjO64Pv6vGNi+YY3ANr8jxjyv5gwWqKdNzfJOpmOMhOlDyXA6DS3O
AGysgDAMdaop/w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:08 2025 by rpki-client