Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: AA/uBGWesha3KuqPArn8OrMClG+ejvCpLD+2QnvN6gE=
Subject key identifier: 6F:FE:E9:79:23:79:80:5F:B4:D9:00:C7:B5:B5:57:58:CA:43:BB:58
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019A50AB8438A4172FDBED33EE141684EB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1209
Signing time: Tue 04 Nov 2025 21:00:08 +0000
Manifest this update: Tue 04 Nov 2025 21:00:08 +0000
Manifest next update: Wed 05 Nov 2025 21:00:08 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: T+rVflWapUvjOgqpsmF8vSsFNPBuNNjVaRAWMIadm6U=)
2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:84:38:a4:17:2f:db:ed:33:ee:14:16:84:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Nov 4 21:00:08 2025 GMT
Not After : Nov 5 21:00:08 2025 GMT
Subject: CN=6ffee9792379805fb4d900c7b5b55758ca43bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:b2:6d:0b:05:ae:17:b2:36:7b:8f:db:8d:
d7:9f:be:85:fc:24:cf:71:25:e7:0b:65:15:7f:4e:
78:be:f5:d6:4c:aa:5a:ae:3e:b9:ca:a0:f6:81:a3:
ee:30:77:bb:a2:ac:33:18:7e:84:fd:5d:ee:5a:9f:
85:c9:55:bb:23:6a:d6:94:71:d1:18:2e:99:a8:c5:
fb:c1:f1:37:b2:9a:34:81:13:14:13:2a:ad:80:17:
1b:7c:c8:d4:ed:4f:84:d1:3d:bb:07:f4:db:76:70:
bb:4a:2f:8b:0b:e2:01:be:2e:96:75:b0:e0:4e:3a:
3c:ed:5a:d4:87:45:06:b4:bd:dd:1e:99:5a:cc:e9:
81:65:0a:fe:67:0b:8c:3e:7a:6c:14:e6:b0:e2:1d:
ca:55:d0:b1:c4:13:ec:00:7a:c0:4e:5b:a2:02:52:
91:53:bf:fa:49:e0:c3:24:56:4c:96:ce:1c:4c:ef:
1b:6d:99:be:fa:40:56:7d:97:14:89:a6:cd:c7:e8:
70:3d:e6:43:87:30:29:bf:2a:96:ac:31:17:27:2f:
bf:23:a8:59:63:3c:d6:d5:4c:d0:7b:e3:d4:29:ac:
b5:8b:be:de:f6:60:73:cf:50:fd:67:38:ad:16:dc:
58:ce:a9:ec:63:12:83:a7:13:05:9e:d9:54:10:f0:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:E9:79:23:79:80:5F:B4:D9:00:C7:B5:B5:57:58:CA:43:BB:58
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8a:b4:86:78:db:fb:00:e5:9e:f4:1c:87:bc:61:25:a4:38:
ab:d8:be:56:81:0d:ce:89:07:70:c1:a8:2c:eb:eb:79:bc:bd:
5a:e8:59:a4:5c:d7:01:36:38:af:3f:37:75:91:b8:02:4c:df:
e4:5a:f7:5c:7c:5a:91:8b:f0:bf:d3:b6:7d:44:32:3c:3a:5a:
e0:fe:18:a1:21:aa:21:ab:2f:ab:41:64:15:29:24:82:f7:c7:
c6:a9:76:03:78:1a:10:38:e3:01:59:41:f9:d4:db:08:d5:19:
52:af:e1:75:06:05:2f:af:1e:58:21:0a:ba:c7:21:5f:02:99:
d3:79:34:dd:94:97:8f:15:17:e5:21:1d:63:76:81:3d:5c:1a:
fa:ce:2b:8c:5e:42:b8:c3:3c:d9:2c:9a:28:70:f8:4f:2b:74:
05:4e:2d:de:e6:76:81:83:2e:02:b1:fd:55:1f:10:dc:c8:a0:
02:18:ee:f8:f6:33:e1:6f:0a:5c:6e:d0:7c:93:04:27:15:3e:
21:fc:f0:1b:61:18:cf:ac:d8:7c:3b:5f:38:a6:35:20:31:a6:
72:9a:27:02:43:e5:86:23:3a:fc:34:cc:15:3d:ab:42:2b:55:
11:6c:d0:e7:79:1b:35:a7:a6:0b:f2:9b:de:e4:9f:15:5f:01:
81:f1:a0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQq4Q4pBcv2+0z7hQWhOs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjUxMTA0MjEwMDA4WhcNMjUxMTA1MjEwMDA4WjAzMTEwLwYDVQQD
Eyg2ZmZlZTk3OTIzNzk4MDVmYjRkOTAwYzdiNWI1NTc1OGNhNDNiYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3taybQsFrheyNnuP243Xn76F/CTP
cSXnC2UVf054vvXWTKparj65yqD2gaPuMHe7oqwzGH6E/V3uWp+FyVW7I2rWlHHR
GC6ZqMX7wfE3spo0gRMUEyqtgBcbfMjU7U+E0T27B/TbdnC7Si+LC+IBvi6WdbDg
Tjo87VrUh0UGtL3dHplazOmBZQr+ZwuMPnpsFOaw4h3KVdCxxBPsAHrATluiAlKR
U7/6SeDDJFZMls4cTO8bbZm++kBWfZcUiabNx+hwPeZDhzApvyqWrDEXJy+/I6hZ
YzzW1UzQe+PUKay1i77e9mBzz1D9ZzitFtxYzqnsYxKDpxMFntlUEPA/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/+6XkjeYBftNkAx7W1V1jKQ7tYMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4q0hnjb
+wDlnvQch7xhJaQ4q9i+VoENzokHcMGoLOvreby9WuhZpFzXATY4rz83dZG4Akzf
5Fr3XHxakYvwv9O2fUQyPDpa4P4YoSGqIasvq0FkFSkkgvfHxql2A3gaEDjjAVlB
+dTbCNUZUq/hdQYFL68eWCEKuschXwKZ03k03ZSXjxUX5SEdY3aBPVwa+s4rjF5C
uMM82SyaKHD4Tyt0BU4t3uZ2gYMuArH9VR8Q3MigAhju+PYz4W8KXG7QfJMEJxU+
IfzwG2EYz6zYfDtfOKY1IDGmcponAkPlhiM6/DTMFT2rQitVEWzQ53kbNaemC/Kb
3uSfFV8BgfGgSg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:58 2025 by rpki-client