Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: zFxODZTBw7L+EZFBTIcMiSsQNJLvhmKNea/LgIe12AI=
Subject key identifier: F9:4C:CD:63:A9:C6:08:8E:3A:B4:5D:E5:0A:B7:4D:A9:06:54:EC:D0
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019A5151488718C5EF0EF605C22B3B725D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:01:12 +0000
Manifest this update: Wed 05 Nov 2025 00:01:12 +0000
Manifest next update: Thu 06 Nov 2025 00:01:12 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: r2/zhyOwTYyc7un5eF4PWR8SVzY21tYQC2hJAqq+Unk=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:48:87:18:c5:ef:0e:f6:05:c2:2b:3b:72:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Nov 5 00:01:12 2025 GMT
Not After : Nov 6 00:01:12 2025 GMT
Subject: CN=f94ccd63a9c6088e3ab45de50ab74da90654ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:82:a0:ea:92:05:79:bd:64:ae:2b:d1:a4:
66:4c:84:8c:71:90:8a:d2:76:21:4f:fa:e5:d5:ab:
94:b6:b4:cd:37:8f:92:fb:8b:ce:58:a8:9f:60:e4:
10:be:63:05:b4:49:f4:24:c5:72:bb:a1:47:3f:d0:
08:0a:8f:ca:1c:85:72:19:be:32:62:56:f0:ce:5d:
0e:1e:86:85:c5:75:ca:7e:14:44:14:b5:e3:25:88:
4c:92:71:1b:f7:21:62:7a:36:62:f6:62:8b:77:e3:
ff:89:d9:39:3a:79:ab:bb:3f:9c:ae:2f:50:de:d1:
54:e8:64:97:e8:b0:93:7a:eb:42:cc:62:30:3c:07:
e4:80:74:01:ea:7f:54:7b:cd:b7:34:76:26:06:b5:
d7:a5:87:10:98:8c:c0:ca:dc:ae:8d:fb:bf:10:c6:
bc:4f:d1:37:7a:0c:f0:8e:e1:da:62:1e:0a:de:ef:
b5:6a:7b:77:f2:f7:8e:87:a6:b7:2b:92:11:6a:90:
37:c8:bc:3d:cd:5a:b6:8c:26:43:5d:f0:c7:12:5e:
f6:d1:15:39:6f:d9:b2:6b:72:09:87:18:f1:d5:34:
88:f0:4e:f0:8f:1c:92:d3:b6:69:86:fd:3c:8a:d2:
7d:f3:fa:1a:a5:ce:e5:cc:8f:ba:32:e5:f7:fb:16:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:CD:63:A9:C6:08:8E:3A:B4:5D:E5:0A:B7:4D:A9:06:54:EC:D0
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:29:2e:4e:28:e0:1e:e2:9a:88:b5:08:0c:2f:f3:9d:88:e5:
94:81:a2:3e:ea:d3:8d:8e:d6:ac:44:f6:37:b2:e6:f6:88:5c:
db:71:6d:2e:b8:be:32:aa:f5:1d:9b:e2:30:17:1c:c3:36:d9:
66:1c:3c:68:bb:e2:b9:b7:5f:5a:e1:e8:9c:37:5a:91:7d:e0:
5d:23:cc:0e:e1:3b:c1:a3:97:0e:b7:d2:b3:88:7a:01:b2:7b:
22:d1:4e:4a:bc:fd:81:4f:b2:3b:4f:03:ba:31:b8:1c:33:c3:
3f:1c:63:73:14:52:65:8d:8f:ef:9c:34:d1:86:6d:5b:09:f0:
7c:56:b1:90:e2:4f:9c:7f:db:c8:8f:86:49:b8:ac:73:6c:d4:
5a:62:eb:e3:8b:6c:e8:d4:76:d5:9c:bb:e0:70:dd:e2:34:e2:
af:33:db:d4:05:9d:13:b5:39:3b:48:a5:a1:41:f9:a3:00:79:
b0:82:ae:fa:e5:5c:13:80:70:dc:e9:27:83:85:33:51:d0:ba:
7a:be:9b:4f:29:92:3d:c3:35:f2:d4:0d:b9:5d:75:71:b0:04:
df:05:d2:f1:e9:98:b0:81:cb:93:d5:a2:6d:bb:a8:be:52:b8:
fc:de:1f:71:e0:cf:93:81:9e:2c:df:28:43:de:ec:bb:75:30:
45:ef:51:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUUiHGMXvDvYFwis7cl0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy
OTkwOTQwHhcNMjUxMTA1MDAwMTEyWhcNMjUxMTA2MDAwMTEyWjAzMTEwLwYDVQQD
EyhmOTRjY2Q2M2E5YzYwODhlM2FiNDVkZTUwYWI3NGRhOTA2NTRlY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8KCoOqSBXm9ZK4r0aRmTISMcZCK
0nYhT/rl1auUtrTNN4+S+4vOWKifYOQQvmMFtEn0JMVyu6FHP9AICo/KHIVyGb4y
Ylbwzl0OHoaFxXXKfhREFLXjJYhMknEb9yFiejZi9mKLd+P/idk5Onmruz+cri9Q
3tFU6GSX6LCTeutCzGIwPAfkgHQB6n9Ue823NHYmBrXXpYcQmIzAytyujfu/EMa8
T9E3egzwjuHaYh4K3u+1ant38veOh6a3K5IRapA3yLw9zVq2jCZDXfDHEl720RU5
b9mya3IJhxjx1TSI8E7wjxyS07Zphv08itJ98/oapc7lzI+6MuX3+xaFRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlMzWOpxgiOOrRd5Qq3TakGVOzQMB8GA1UdIwQY
MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt
MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm
LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCkuTijg
HuKaiLUIDC/znYjllIGiPurTjY7WrET2N7Lm9ohc23FtLri+Mqr1HZviMBccwzbZ
Zhw8aLviubdfWuHonDdakX3gXSPMDuE7waOXDrfSs4h6AbJ7ItFOSrz9gU+yO08D
ujG4HDPDPxxjcxRSZY2P75w00YZtWwnwfFaxkOJPnH/byI+GSbisc2zUWmLr44ts
6NR21Zy74HDd4jTirzPb1AWdE7U5O0iloUH5owB5sIKu+uVcE4Bw3Okng4UzUdC6
er6bTymSPcM18tQNuV11cbAE3wXS8emYsIHLk9WibbuovlK4/N4fceDPk4GeLN8o
Q97su3UwRe9RbA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:27 2025 by rpki-client