Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: 9TNAelOgxA6pvLePxxLJ/PeNrwWOVMwf4aqMU/WRzak=
Subject key identifier: 13:C2:CF:FD:BC:ED:2A:35:1F:98:43:D2:6C:B6:C4:CC:8F:D1:EF:3E
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019A4E4F4F8E2688A09256202236166745C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0B65
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: /DGnibv6QX1PN86MEFWyA4SEYkfIvIkRg+Y+VwGZVIc=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4f:8e:26:88:a0:92:56:20:22:36:16:67:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=13c2cffdbced2a351f9843d26cb6c4cc8fd1ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:ad:b6:57:f0:40:f3:a6:d2:62:a1:fa:df:
da:20:d4:41:b4:c5:f8:bf:2b:cc:07:d8:18:f5:b9:
db:a4:4e:95:fa:76:42:33:67:72:52:be:1f:a5:2d:
13:f3:a6:fb:27:eb:36:a4:11:47:61:e5:4d:a5:fb:
a7:89:d9:95:a9:98:c9:40:4b:6a:19:fd:25:d8:b2:
b2:dc:67:90:76:5d:1a:b5:ce:e5:cc:07:58:7b:34:
2b:a2:86:c0:f6:a1:b1:69:ae:82:bc:89:1a:98:54:
c8:73:fe:20:3c:5e:31:31:f5:7b:0b:26:5b:6a:12:
21:d3:f7:a2:c0:e5:02:9c:7f:66:31:f8:5d:91:3e:
03:08:45:4c:45:36:f5:22:2e:dd:8d:d4:a5:b5:5b:
5c:20:69:5c:0b:a3:8f:cc:60:d1:43:ca:c1:97:c7:
9e:47:10:b9:fe:0c:92:7d:a2:1b:ac:13:bc:ba:e3:
0d:d6:17:5f:e4:03:87:c8:12:93:11:28:ec:13:61:
2e:98:c3:6c:3c:13:43:f3:ce:ae:c0:1b:b8:b8:c8:
c1:b6:c6:12:65:ba:dc:41:e7:ea:f4:c0:c4:67:75:
87:86:20:89:47:fd:51:e5:41:10:73:41:a1:c4:bf:
17:aa:9a:2f:db:58:24:35:18:2e:fb:c0:a5:b0:a2:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:CF:FD:BC:ED:2A:35:1F:98:43:D2:6C:B6:C4:CC:8F:D1:EF:3E
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:80:df:f8:cd:2d:3c:8e:ea:c2:0b:ab:7d:78:ff:17:ad:
f1:8d:0e:d0:dc:a1:8f:e1:be:95:ce:11:dd:ab:82:8e:29:16:
41:07:3e:7c:86:54:69:a4:32:a7:1e:28:b9:38:fd:d5:6f:f9:
25:44:23:a6:bd:6b:02:99:e5:ef:43:87:9f:cd:d5:ea:1f:4c:
6f:29:a1:2f:23:7f:90:2a:86:62:8b:47:dd:ad:a4:0d:40:23:
dd:9c:2a:d2:86:27:da:6c:90:12:1b:e9:f4:2a:77:1b:f2:eb:
69:62:56:31:1d:1d:1e:eb:4d:24:7a:6c:dd:d5:0a:5f:9f:d3:
db:8b:da:09:2c:1a:5e:41:17:7f:9c:d2:6f:cb:f9:23:c5:be:
25:af:37:7d:45:0f:28:0c:1b:13:51:bb:13:74:7c:e4:1e:33:
a0:56:d4:d8:ef:1f:27:2b:5b:64:d3:d7:ec:c2:a4:27:77:c8:
58:ed:e1:ba:96:be:ef:36:29:1f:d8:75:37:93:5d:29:26:18:
36:b7:e6:1c:59:3e:ef:df:b6:19:1f:2e:2f:14:99:5b:1d:26:
4d:aa:eb:b7:fd:a2:2e:bb:05:2d:99:94:8d:63:28:0e:d5:d1:
cf:ed:8a:6c:86:ab:d9:d3:77:5a:e1:80:b9:04:86:6d:3c:43:
30:52:e9:0a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOT0+OJoigklYgIjYWZ0XBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjUxMTA0MTAwMDExWhcNMjUxMTA1MTAwMDExWjAzMTEwLwYDVQQD
EygxM2MyY2ZmZGJjZWQyYTM1MWY5ODQzZDI2Y2I2YzRjYzhmZDFlZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGttlfwQPOm0mKh+t/aINRBtMX4
vyvMB9gY9bnbpE6V+nZCM2dyUr4fpS0T86b7J+s2pBFHYeVNpfunidmVqZjJQEtq
Gf0l2LKy3GeQdl0atc7lzAdYezQroobA9qGxaa6CvIkamFTIc/4gPF4xMfV7CyZb
ahIh0/eiwOUCnH9mMfhdkT4DCEVMRTb1Ii7djdSltVtcIGlcC6OPzGDRQ8rBl8ee
RxC5/gySfaIbrBO8uuMN1hdf5AOHyBKTESjsE2EumMNsPBND886uwBu4uMjBtsYS
ZbrcQefq9MDEZ3WHhiCJR/1R5UEQc0GhxL8Xqpov21gkNRgu+8ClsKITnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBPCz/287So1H5hD0my2xMyP0e8+MB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/qA
3/jNLTyO6sILq314/xet8Y0O0Nyhj+G+lc4R3auCjikWQQc+fIZUaaQypx4ouTj9
1W/5JUQjpr1rApnl70OHn83V6h9MbymhLyN/kCqGYotH3a2kDUAj3Zwq0oYn2myQ
Ehvp9Cp3G/LraWJWMR0dHutNJHps3dUKX5/T24vaCSwaXkEXf5zSb8v5I8W+Ja83
fUUPKAwbE1G7E3R85B4zoFbU2O8fJytbZNPX7MKkJ3fIWO3hupa+7zYpH9h1N5Nd
KSYYNrfmHFk+79+2GR8uLxSZWx0mTarrt/2iLrsFLZmUjWMoDtXRz+2KbIar2dN3
WuGAuQSGbTxDMFLpCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:52 2025 by rpki-client