Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier: oITO5NNm/mGmenuYxA2GYYe7PM7p+PiaUd4IptvovY8=
Subject key identifier: 87:E4:39:3B:DB:71:4A:E4:EF:F5:DC:92:A4:01:CC:C5:63:90:34:00
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial: 019A4DE171DAD71D24339A9DC6D90AF3AE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number: 04F7
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: lEAg4gCg+36rKK7R5LHRfCmEaw4pu5JbPQwkG74+ucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:71:da:d7:1d:24:33:9a:9d:c6:d9:0a:f3:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=87e4393bdb714ae4eff5dc92a401ccc563903400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:22:0b:4d:17:d2:75:88:39:4e:88:32:63:
f6:ef:be:dc:1b:53:db:6d:33:ea:45:91:01:4e:23:
14:43:92:9c:1a:ac:37:1c:0e:ea:50:ec:88:dc:d5:
61:79:47:e5:e2:b9:f7:59:33:73:dc:31:86:6a:43:
a1:40:b0:c0:07:8c:4e:e4:76:27:03:d5:c0:18:48:
61:1f:4d:ff:d0:cd:1e:ff:9d:dc:fb:aa:a8:ea:f9:
c6:8e:1d:1d:f1:3d:d4:e6:20:e7:4e:7e:76:c9:ee:
0a:ea:f5:0f:32:cd:5f:ce:ea:dc:0f:78:9f:61:d2:
28:6a:5b:45:f7:53:68:4c:c5:04:8c:26:30:e8:5b:
21:d2:ba:c8:19:24:7e:c0:1c:78:44:0f:ee:64:d6:
05:92:ac:95:6a:93:7a:d6:b9:24:70:8c:c4:34:2e:
85:26:80:39:e9:f0:62:98:62:98:64:67:9e:46:9c:
61:ab:5b:21:3f:99:69:74:e9:9a:38:f5:59:f9:b4:
bb:05:dd:9c:94:5a:3e:96:79:63:83:00:61:10:3a:
98:b4:fb:62:2e:1e:52:d4:54:20:c1:24:30:62:17:
9c:8f:7d:21:c0:a7:78:b8:a6:cd:61:a1:fc:78:1a:
0e:f8:20:7c:a3:3c:ec:82:31:3b:0f:bb:45:44:db:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:39:3B:DB:71:4A:E4:EF:F5:DC:92:A4:01:CC:C5:63:90:34:00
X509v3 Authority Key Identifier:
keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:68:4c:3c:ba:75:d2:34:a2:74:36:ce:74:30:92:13:39:
4b:d4:11:3e:6b:e2:a3:c6:dd:ce:3f:0f:b2:b3:67:6a:76:99:
49:21:5e:52:56:c9:f5:ab:94:30:19:f4:41:4c:13:f9:9b:df:
9e:b8:cf:9e:47:90:c8:ea:9b:9f:24:01:b5:d2:27:c0:3d:ac:
f1:74:ea:a3:fe:65:8e:5b:f5:83:9c:58:a6:b0:4a:31:cd:2a:
3f:90:3f:11:f8:19:60:27:6a:36:78:72:40:b0:f3:4b:df:a5:
65:7b:25:5f:07:aa:4a:a9:ee:0a:86:36:d2:d7:03:83:c0:9f:
a2:09:a8:55:5f:55:95:a3:5f:d1:52:b8:f9:55:2a:74:59:57:
6e:dd:dc:79:32:de:31:c1:cc:31:0a:b1:21:f9:c7:d3:6f:cb:
34:1b:42:3d:42:a4:97:a5:b7:05:bc:d9:d8:a4:35:e3:e5:a9:
bf:e2:a9:5f:38:5f:8c:15:50:62:86:81:63:9e:5a:8e:75:1e:
40:36:41:b4:be:78:3c:cd:a0:51:0d:89:e4:f5:d9:b1:cd:c2:
02:a2:3a:f1:10:42:26:65:51:25:1c:75:6e:22:ba:dd:48:32:
d0:fe:c2:23:9b:93:5d:a4:24:f5:eb:53:e2:09:39:a4:09:8b:
ac:e1:c2:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4XHa1x0kM5qdxtkK864BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy
YjE0MGQwHhcNMjUxMTA0MDgwMDExWhcNMjUxMTA1MDgwMDExWjAzMTEwLwYDVQQD
Eyg4N2U0MzkzYmRiNzE0YWU0ZWZmNWRjOTJhNDAxY2NjNTYzOTAzNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMiC00X0nWIOU6IMmP2777cG1Pb
bTPqRZEBTiMUQ5KcGqw3HA7qUOyI3NVheUfl4rn3WTNz3DGGakOhQLDAB4xO5HYn
A9XAGEhhH03/0M0e/53c+6qo6vnGjh0d8T3U5iDnTn52ye4K6vUPMs1fzurcD3if
YdIoaltF91NoTMUEjCYw6Fsh0rrIGSR+wBx4RA/uZNYFkqyVapN61rkkcIzENC6F
JoA56fBimGKYZGeeRpxhq1shP5lpdOmaOPVZ+bS7Bd2clFo+lnljgwBhEDqYtPti
Lh5S1FQgwSQwYhecj30hwKd4uKbNYaH8eBoO+CB8ozzsgjE7D7tFRNsQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfkOTvbcUrk7/XckqQBzMVjkDQAMB8GA1UdIwQY
MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt
NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi
LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJdoTDy6
ddI0onQ2znQwkhM5S9QRPmvio8bdzj8PsrNnanaZSSFeUlbJ9auUMBn0QUwT+Zvf
nrjPnkeQyOqbnyQBtdInwD2s8XTqo/5ljlv1g5xYprBKMc0qP5A/EfgZYCdqNnhy
QLDzS9+lZXslXweqSqnuCoY20tcDg8CfogmoVV9VlaNf0VK4+VUqdFlXbt3ceTLe
McHMMQqxIfnH02/LNBtCPUKkl6W3BbzZ2KQ14+Wpv+KpXzhfjBVQYoaBY55ajnUe
QDZBtL54PM2gUQ2J5PXZsc3CAqI68RBCJmVRJRx1biK63Ugy0P7CI5uTXaQk9etT
4gk5pAmLrOHCEw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:12 2025 by rpki-client