Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: p29VqEKr0NqRU0f+V/AYewo80v6qoY5GmVx28R8qJfU=
Subject key identifier: E3:C8:87:76:AF:3B:6E:C9:FF:E7:46:D0:AD:59:39:A6:90:51:8C:B6
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019A4DE1E6486EA0F2CEC417C2C50A50ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 0FCD
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: eFMZxD4jhbw/j1/UNb5MA2LYt+FB9arDJTQ6q/E53lQ=)
2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e6:48:6e:a0:f2:ce:c4:17:c2:c5:0a:50:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=e3c88776af3b6ec9ffe746d0ad5939a690518cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:26:77:b1:67:0c:94:cc:cd:74:8d:21:93:
98:82:fc:93:13:37:d1:55:60:50:c2:21:75:aa:0e:
52:25:f1:f7:2c:ec:f4:70:5f:70:80:86:f3:5f:38:
4c:4e:14:33:bc:b4:4e:89:61:d3:36:f4:07:04:c8:
04:70:7b:fb:18:dd:f5:a6:ab:71:d6:94:ab:5b:e6:
51:cd:34:cd:ca:03:da:5e:3d:2b:b3:85:d1:2c:4d:
99:bf:2f:58:ae:b7:e3:50:ee:a2:a8:05:f4:e0:7d:
45:53:68:b5:b4:2d:a0:6d:76:d3:17:1c:fa:3f:f9:
a7:96:7f:ec:cc:e1:41:69:24:a6:cc:8b:1d:f5:c4:
8b:72:77:58:9a:fc:0d:48:9a:0c:45:9a:9d:49:93:
83:a8:37:11:5a:99:1c:41:a8:07:83:2e:64:99:71:
a9:3c:8b:cf:34:c7:69:46:e0:ad:1a:3d:59:30:ad:
83:64:82:39:70:cb:71:d7:d6:6f:b6:56:7f:a3:99:
92:44:2b:37:76:59:03:d2:57:7c:51:a4:73:41:32:
34:6c:28:c0:fb:1c:b4:f4:6f:78:39:dd:75:c3:0b:
86:0e:58:ae:61:a8:07:77:d9:f3:13:72:fa:4c:0d:
f6:e2:08:7d:87:f8:56:19:25:23:75:ae:9c:df:61:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:87:76:AF:3B:6E:C9:FF:E7:46:D0:AD:59:39:A6:90:51:8C:B6
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0b:38:2b:5f:43:80:48:b0:7e:7c:0b:7c:98:cd:08:e4:4b:
54:50:61:5f:25:53:6c:8a:4c:fb:c0:69:13:a5:cc:30:c4:73:
c7:a5:8d:65:f8:9c:5d:ac:6e:5c:5a:32:1c:5d:43:8b:d3:01:
d1:29:a9:0d:57:d9:d3:be:e6:28:0a:6f:8e:0e:ea:df:b3:07:
d7:48:0c:1c:40:cc:26:f0:0f:4a:37:a4:db:45:42:46:65:1e:
30:13:b5:87:af:ee:3a:ff:1e:6f:4e:f1:5d:aa:2a:b7:13:b3:
fc:00:9c:91:63:b4:9a:88:bd:5a:ca:9e:91:6a:2a:0e:8e:7e:
3d:bc:5c:98:c3:47:25:e5:73:55:61:86:40:64:97:fd:77:b9:
f9:b2:49:96:ad:bf:7e:f5:66:58:58:2a:69:96:39:7e:66:21:
53:42:04:44:e1:5c:84:9b:fc:6e:0c:bd:ef:88:96:6e:af:5a:
a6:f6:b8:60:f1:6d:ac:08:12:2f:18:9b:20:c2:cf:88:4c:64:
65:63:4b:29:2e:a2:92:ed:e3:d1:2f:3a:8b:4c:77:15:4e:7e:
3b:a3:8e:db:6f:8e:c0:99:9b:fa:93:0e:ae:e1:0b:01:35:be:
ce:c9:28:14:94:e1:9b:ad:66:69:dd:c9:e4:03:79:47:3c:51:
f0:29:ef:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4eZIbqDyzsQXwsUKUK3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjUxMTA0MDgwMDQxWhcNMjUxMTA1MDgwMDQxWjAzMTEwLwYDVQQD
EyhlM2M4ODc3NmFmM2I2ZWM5ZmZlNzQ2ZDBhZDU5MzlhNjkwNTE4Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzkmd7FnDJTMzXSNIZOYgvyTEzfR
VWBQwiF1qg5SJfH3LOz0cF9wgIbzXzhMThQzvLROiWHTNvQHBMgEcHv7GN31pqtx
1pSrW+ZRzTTNygPaXj0rs4XRLE2Zvy9YrrfjUO6iqAX04H1FU2i1tC2gbXbTFxz6
P/mnln/szOFBaSSmzIsd9cSLcndYmvwNSJoMRZqdSZODqDcRWpkcQagHgy5kmXGp
PIvPNMdpRuCtGj1ZMK2DZII5cMtx19ZvtlZ/o5mSRCs3dlkD0ld8UaRzQTI0bCjA
+xy09G94Od11wwuGDliuYagHd9nzE3L6TA324gh9h/hWGSUjda6c32FYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPIh3avO27J/+dG0K1ZOaaQUYy2MB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgs4K19D
gEiwfnwLfJjNCORLVFBhXyVTbIpM+8BpE6XMMMRzx6WNZficXaxuXFoyHF1Di9MB
0SmpDVfZ077mKApvjg7q37MH10gMHEDMJvAPSjek20VCRmUeMBO1h6/uOv8eb07x
XaoqtxOz/ACckWO0moi9WsqekWoqDo5+PbxcmMNHJeVzVWGGQGSX/Xe5+bJJlq2/
fvVmWFgqaZY5fmYhU0IEROFchJv8bgy974iWbq9apva4YPFtrAgSLxibIMLPiExk
ZWNLKS6iku3j0S86i0x3FU5+O6OO22+OwJmb+pMOruELATW+zskoFJThm61mad3J
5AN5RzxR8CnvEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:52 2025 by rpki-client