Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: XwCS/a/sXm/O48q7lEd3w4tejHI4ue/cHLm3D63LUwM=
Subject key identifier: 69:10:BD:3E:D7:A7:3C:17:A8:C4:EB:28:BB:30:2B:A4:68:F7:E4:31
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019A4DE1F884CB3E17A4675DD2A14D3ADBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: rTPeFNlcd6RpR0KoAiDUQXI8wUeKGyqWvkCLFwsgJoY=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f8:84:cb:3e:17:a4:67:5d:d2:a1:4d:3a:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=6910bd3ed7a73c17a8c4eb28bb302ba468f7e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:0f:f2:71:90:ef:c7:11:ba:12:f3:b2:6a:
1c:d7:e2:99:16:1e:94:34:b0:0f:e3:3c:34:16:ff:
f6:c0:67:75:3f:20:78:cb:a8:11:4b:c0:4b:7e:07:
85:72:ca:a6:1a:95:43:53:56:93:f2:a5:3c:21:a0:
f1:3e:35:2f:a7:7b:b4:04:ae:30:e7:88:ff:a8:70:
7c:70:e8:97:9e:38:e1:3e:56:a8:a9:70:82:6c:06:
d0:a9:d3:9a:52:e3:f6:d0:e4:df:f2:b2:63:e2:0e:
37:aa:24:e4:19:aa:9c:30:d0:66:8d:bc:22:c4:5d:
3a:8f:bc:34:9a:d6:13:03:d3:e0:e9:27:d9:b2:15:
82:50:db:c7:b2:49:d7:c5:62:14:72:3d:fa:b3:44:
a9:f7:62:1f:50:f7:10:f4:1a:bb:88:63:a5:85:5c:
2d:7f:19:59:5a:a4:b9:f8:01:65:8a:e6:20:07:1c:
ba:8f:47:a0:f2:1b:57:fc:78:c6:c2:e7:29:f6:06:
3d:95:9b:24:dc:24:12:19:f8:c6:9e:e3:b6:71:e6:
ca:09:e4:3b:d3:e9:2a:96:82:9a:f2:ac:40:bb:d5:
93:3a:76:81:eb:57:55:3a:91:17:1e:96:02:29:bf:
98:a9:2a:5a:a5:41:27:c0:33:cc:6d:66:07:80:1f:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:BD:3E:D7:A7:3C:17:A8:C4:EB:28:BB:30:2B:A4:68:F7:E4:31
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:74:35:d7:28:4d:7d:30:6d:7d:58:9d:c4:96:00:7c:e2:d5:
58:fa:8b:40:1a:7a:17:b9:31:f0:28:28:49:d9:ce:d8:d4:fc:
3e:96:98:9e:2e:98:bb:53:83:0e:33:11:e0:45:5d:77:6d:69:
2a:4b:bc:92:e9:92:53:46:5c:3b:26:dc:ee:15:7f:6a:81:f7:
0d:e9:c9:84:33:8b:c5:02:8a:1e:5b:a1:cd:97:b5:3b:4c:77:
ee:aa:3b:11:d7:99:9b:ec:5e:3e:14:43:e6:77:da:03:42:fe:
46:68:95:55:ca:f7:d0:4c:67:48:79:b2:ad:56:7c:33:fd:01:
a4:75:52:58:2d:eb:23:a3:86:ef:20:63:eb:d9:21:3d:c2:bb:
4f:97:d2:5a:62:b4:ec:93:41:8f:42:e2:24:71:af:41:85:51:
4b:1f:03:74:02:76:88:37:4e:57:44:2a:00:25:90:a4:2d:f9:
8a:ba:ce:3b:70:e5:83:85:52:cd:80:e7:95:6a:94:70:30:8f:
88:bc:e3:ae:83:9c:e0:49:5d:bb:1d:7b:e0:75:e6:10:f2:27:
f6:01:49:ed:d1:3a:4e:53:9e:0e:26:bd:c5:f8:48:1f:ba:74:
4c:7f:c1:ab:ac:1d:61:23:04:7a:29:b6:8e:5b:b2:6b:59:a1:
0b:15:aa:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpN4fiEyz4XpGdd0qFNOtvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWRmNTYyNDhmOTc3N2ZhMjJkNWRhNmMwNGI1ZmIzMzJh
NGIzNTAwHhcNMjUxMTA0MDgwMDQ2WhcNMjUxMTA1MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg2OTEwYmQzZWQ3YTczYzE3YThjNGViMjhiYjMwMmJhNDY4ZjdlNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUwP8nGQ78cRuhLzsmoc1+KZFh6U
NLAP4zw0Fv/2wGd1PyB4y6gRS8BLfgeFcsqmGpVDU1aT8qU8IaDxPjUvp3u0BK4w
54j/qHB8cOiXnjjhPlaoqXCCbAbQqdOaUuP20OTf8rJj4g43qiTkGaqcMNBmjbwi
xF06j7w0mtYTA9Pg6SfZshWCUNvHsknXxWIUcj36s0Sp92IfUPcQ9Bq7iGOlhVwt
fxlZWqS5+AFliuYgBxy6j0eg8htX/HjGwucp9gY9lZsk3CQSGfjGnuO2cebKCeQ7
0+kqloKa8qxAu9WTOnaB61dVOpEXHpYCKb+YqSpapUEnwDPMbWYHgB8SXQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGkQvT7XpzwXqMTrKLswK6Ro9+QxMB8GA1UdIwQY
MBaAFPid9WJI+Xd/oi1dpsBLX7MypLNQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KMzFZa2o1ZDMtaUxWMm13RXRmc3pLa3MxQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3
LWMxNmJhZWRmNmZhNi8xLzEtSjMxWWtqNWQzLWlMVjJtd0V0ZnN6S2tzMUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1L2Q0NmQyNS01ZDhmLTQ5ODktYjU1Ny1jMTZiYWVkZjZm
YTYvMS8xLUozMVlrajVkMy1pTFYybXdFdGZzektrczFBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnQ1
1yhNfTBtfVidxJYAfOLVWPqLQBp6F7kx8CgoSdnO2NT8PpaYni6Yu1ODDjMR4EVd
d21pKku8kumSU0ZcOybc7hV/aoH3DenJhDOLxQKKHluhzZe1O0x37qo7EdeZm+xe
PhRD5nfaA0L+RmiVVcr30ExnSHmyrVZ8M/0BpHVSWC3rI6OG7yBj69khPcK7T5fS
WmK07JNBj0LiJHGvQYVRSx8DdAJ2iDdOV0QqACWQpC35irrOO3Dlg4VSzYDnlWqU
cDCPiLzjroOc4Eldux174HXmEPIn9gFJ7dE6TlOeDia9xfhIH7p0TH/Bq6wdYSME
eim2jluya1mhCxWq+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:08 2025 by rpki-client