Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: BHqcx4tk/4I5m4q+yf4ESbF+RjJXxga6sjt1axHUUIs=
Subject key identifier: 44:A8:1F:74:0B:9F:B3:42:AE:C0:DC:A2:23:D8:79:A5:65:CF:3D:F1
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019A51511661C6F33FBC8BFCA210580693C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 0323
Signing time: Wed 05 Nov 2025 00:00:59 +0000
Manifest this update: Wed 05 Nov 2025 00:00:59 +0000
Manifest next update: Thu 06 Nov 2025 00:00:59 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: y1n+fu4JFksMIdHLCu2dmwn6aSreIY8/ZMdy/SRawZo=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:16:61:c6:f3:3f:bc:8b:fc:a2:10:58:06:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Nov 5 00:00:59 2025 GMT
Not After : Nov 6 00:00:59 2025 GMT
Subject: CN=44a81f740b9fb342aec0dca223d879a565cf3df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:27:54:45:e8:3c:64:14:96:8e:e0:4d:1f:
39:33:d7:50:a9:bd:cb:62:3f:5c:4d:64:1e:8f:0a:
7a:84:3d:a4:4f:2d:66:79:25:99:3b:18:c9:62:a4:
0d:3e:79:7a:4e:bd:87:e8:a3:8a:de:7a:57:ec:59:
ae:c9:9c:1b:52:4e:2e:af:80:04:15:3e:8e:a2:55:
fb:2a:aa:6e:7c:92:b5:e8:f6:79:cf:4c:ee:dc:7b:
17:5e:3b:b2:75:4c:4d:2d:67:7e:0c:31:33:51:a9:
72:d6:8b:c7:d4:a1:1d:d5:49:7b:dc:b1:9a:a0:da:
6d:e5:09:ea:a8:de:dc:17:c2:c9:d6:07:b1:56:d7:
4c:cf:c7:44:16:05:ba:ea:e5:66:de:0c:26:53:d0:
01:99:16:4c:10:b4:64:3e:ea:71:9a:d1:a4:a5:d6:
46:f9:40:98:75:89:c8:ff:a0:ad:69:7d:53:b4:32:
99:fb:b9:73:aa:e8:17:cc:3f:4c:13:1a:6d:67:4e:
b3:f3:a2:c0:5b:5e:64:cc:2f:55:1f:5b:95:85:23:
d9:4d:47:96:bb:f7:7d:a9:c1:16:c0:69:fd:be:21:
91:c5:e0:f5:95:84:85:58:f5:c6:46:28:cf:73:04:
46:4b:e0:bd:74:8c:74:0e:bd:b1:63:f3:8d:15:82:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:1F:74:0B:9F:B3:42:AE:C0:DC:A2:23:D8:79:A5:65:CF:3D:F1
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e0:75:56:49:43:e3:0b:f3:6c:a6:b3:d7:3a:33:8b:03:48:
e5:f2:f5:f3:ff:5d:63:f3:f5:7e:66:07:b9:a4:1e:0d:36:45:
84:86:0a:aa:2e:72:a2:e4:32:33:63:fb:74:84:31:84:9b:0c:
76:9d:3e:db:00:ff:78:52:3e:54:ff:93:65:67:88:99:8e:93:
c0:ed:58:33:a3:56:46:e5:18:6c:8a:b4:33:ed:5b:ad:b8:1e:
da:3d:95:94:71:3d:05:fb:e6:d0:56:46:cf:ff:9a:13:d5:60:
ab:7f:38:09:4b:6e:da:e3:95:e1:69:de:ce:f5:88:24:de:23:
31:2e:33:87:d0:89:c9:85:9c:31:f3:8e:e3:b4:03:7b:1a:82:
70:17:f0:63:ae:e7:87:cb:03:35:16:22:c7:db:df:7b:ce:8e:
bd:e6:6c:71:a6:cd:0b:d7:64:35:37:ee:d3:11:14:5c:36:c4:
77:10:5a:d9:c9:e5:5c:e9:24:e6:b2:09:de:a9:62:66:f2:80:
94:ae:5a:17:bd:80:b3:78:f3:8c:d6:a1:6e:db:41:19:60:9d:
85:7d:47:72:12:39:08:36:97:2b:7e:7f:8b:72:da:13:48:2d:
cb:12:35:0a:f5:35:1d:5d:b7:70:82:49:ef:73:0b:08:a4:41:
be:0e:1a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRURZhxvM/vIv8ohBYBpPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2Q4YWFhMTBlZGNmNWQwODE0MDM5MTUzOTk3YmZiZjRk
MzViYTkwHhcNMjUxMTA1MDAwMDU5WhcNMjUxMTA2MDAwMDU5WjAzMTEwLwYDVQQD
Eyg0NGE4MWY3NDBiOWZiMzQyYWVjMGRjYTIyM2Q4NzlhNTY1Y2YzZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo08nVEXoPGQUlo7gTR85M9dQqb3L
Yj9cTWQejwp6hD2kTy1meSWZOxjJYqQNPnl6Tr2H6KOK3npX7FmuyZwbUk4ur4AE
FT6OolX7KqpufJK16PZ5z0zu3HsXXjuydUxNLWd+DDEzUaly1ovH1KEd1Ul73LGa
oNpt5QnqqN7cF8LJ1gexVtdMz8dEFgW66uVm3gwmU9ABmRZMELRkPupxmtGkpdZG
+UCYdYnI/6CtaX1TtDKZ+7lzqugXzD9MExptZ06z86LAW15kzC9VH1uVhSPZTUeW
u/d9qcEWwGn9viGRxeD1lYSFWPXGRijPcwRGS+C9dIx0Dr2xY/ONFYJ5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESoH3QLn7NCrsDcoiPYeaVlzz3xMB8GA1UdIwQY
MBaAFNR9iqoQ7c9dCBQDkVOZe/v001upMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTkt
YmNlZDU3OWMwYjdiLzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTktYmNlZDU3OWMwYjdi
LzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeB1VklD
4wvzbKaz1zoziwNI5fL18/9dY/P1fmYHuaQeDTZFhIYKqi5youQyM2P7dIQxhJsM
dp0+2wD/eFI+VP+TZWeImY6TwO1YM6NWRuUYbIq0M+1brbge2j2VlHE9Bfvm0FZG
z/+aE9Vgq384CUtu2uOV4WnezvWIJN4jMS4zh9CJyYWcMfOO47QDexqCcBfwY67n
h8sDNRYix9vfe86OveZscabNC9dkNTfu0xEUXDbEdxBa2cnlXOkk5rIJ3qliZvKA
lK5aF72As3jzjNahbttBGWCdhX1HchI5CDaXK35/i3LaE0gtyxI1CvU1HV23cIJJ
73MLCKRBvg4a+Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:18:44 2025 by rpki-client