Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: yT1VIY0seJmypQVXSMrKIUsyXXVHcwhuoXjqR+lWzZ4=
Subject key identifier: BA:F3:CB:B5:21:93:D4:9F:76:0F:0D:42:FA:3F:DE:D0:0E:E6:7D:71
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019A4E86D111CA2C64C604AF30264B89BAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: x0j4+j2de4vvs0uyq6ZnjBZmLH5bIViKkzkFO7N4bGI=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d1:11:ca:2c:64:c6:04:af:30:26:4b:89:ba:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=baf3cbb52193d49f760f0d42fa3fded00ee67d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:93:84:64:af:c2:ef:7c:56:fb:42:c8:59:
06:2c:78:ce:d1:94:9d:84:bb:22:79:02:0b:6a:c3:
0a:f7:d0:60:a3:21:40:af:d1:60:78:29:87:92:96:
24:64:e9:68:4b:6c:fb:67:7a:c2:31:de:fd:05:a5:
9a:f4:0b:64:13:7b:f7:a1:92:52:4d:c2:eb:f1:29:
cf:d3:09:73:8e:42:bb:1b:de:73:06:29:17:f3:89:
a0:dd:09:e9:83:6c:31:5b:df:82:17:9d:6a:95:69:
75:8a:f1:16:a8:98:63:74:47:00:a9:6a:02:af:e1:
ca:60:7b:32:55:ab:ed:54:fc:3d:ef:82:72:5e:b4:
d1:6d:d3:34:d1:8b:fb:72:2c:1e:ad:86:55:74:b5:
0a:54:40:cd:4a:0a:72:28:88:c0:58:77:e7:dc:63:
21:d6:9c:be:fc:c2:48:c3:52:1c:28:b2:f3:bd:88:
f1:b9:ce:ea:16:a4:ae:e6:06:c6:32:57:24:53:97:
87:c5:9f:e7:1d:fb:3e:21:e2:27:04:90:21:d8:a0:
7e:61:be:ba:80:6d:a7:41:e7:3e:58:cf:3a:85:8e:
be:23:87:ce:4a:b4:0f:57:c2:c9:dc:10:ff:ba:6f:
a4:67:5a:d7:49:62:36:d9:0e:8e:c4:12:92:78:49:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:CB:B5:21:93:D4:9F:76:0F:0D:42:FA:3F:DE:D0:0E:E6:7D:71
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:bb:d0:bc:02:14:5f:11:1c:9e:2b:4a:df:13:3d:75:fe:
0d:43:cf:98:bb:1b:4c:09:66:e8:64:12:bb:68:b1:02:9c:10:
6a:65:28:4a:db:b0:b8:aa:90:8c:c5:83:27:27:1c:d3:35:e6:
c0:57:9d:da:a7:2c:9d:a1:af:f4:6f:6b:60:33:67:00:06:b5:
cf:45:19:35:ea:97:ef:df:9d:0f:9b:7c:ed:9d:ae:75:bb:89:
38:c4:b3:0d:ea:68:13:e9:3b:aa:0c:d0:86:cb:89:5f:c2:2a:
fd:2a:03:4c:ba:c8:41:bc:b4:dc:05:ca:2e:1a:e0:23:b6:98:
8f:3e:c5:5f:c6:5b:45:71:85:2d:1f:d0:4b:a6:4b:13:2a:61:
88:a4:41:91:3a:2a:ce:a9:9a:ad:8e:11:f0:d7:d9:b4:5a:ab:
8d:85:64:3c:8d:2e:87:9c:bc:d3:9e:46:a7:d9:11:a8:d8:65:
e2:9b:48:33:fb:81:21:97:a0:e6:f6:1a:e0:67:c9:a4:6b:ee:
d7:49:e0:3d:bd:c3:8c:b6:ea:17:7f:50:de:61:3c:5d:32:49:
a7:47:b0:5f:df:86:98:bf:7c:2f:2f:9e:a9:e4:88:24:40:fb:
9b:d7:a5:e5:1c:29:b5:f8:1c:55:ed:27:d0:13:67:d5:69:06:
ca:d2:76:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOhtERyixkxgSvMCZLibr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4
M2I0NTQwHhcNMjUxMTA0MTEwMDQ5WhcNMjUxMTA1MTEwMDQ5WjAzMTEwLwYDVQQD
EyhiYWYzY2JiNTIxOTNkNDlmNzYwZjBkNDJmYTNmZGVkMDBlZTY3ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGiThGSvwu98VvtCyFkGLHjO0ZSd
hLsieQILasMK99BgoyFAr9FgeCmHkpYkZOloS2z7Z3rCMd79BaWa9AtkE3v3oZJS
TcLr8SnP0wlzjkK7G95zBikX84mg3Qnpg2wxW9+CF51qlWl1ivEWqJhjdEcAqWoC
r+HKYHsyVavtVPw974JyXrTRbdM00Yv7ciwerYZVdLUKVEDNSgpyKIjAWHfn3GMh
1py+/MJIw1IcKLLzvYjxuc7qFqSu5gbGMlckU5eHxZ/nHfs+IeInBJAh2KB+Yb66
gG2nQec+WM86hY6+I4fOSrQPV8LJ3BD/um+kZ1rXSWI22Q6OxBKSeEmjOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLrzy7Uhk9Sfdg8NQvo/3tAO5n1xMB8GA1UdIwQY
MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5
LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk
ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVi7
0LwCFF8RHJ4rSt8TPXX+DUPPmLsbTAlm6GQSu2ixApwQamUoStuwuKqQjMWDJycc
0zXmwFed2qcsnaGv9G9rYDNnAAa1z0UZNeqX79+dD5t87Z2udbuJOMSzDepoE+k7
qgzQhsuJX8Iq/SoDTLrIQby03AXKLhrgI7aYjz7FX8ZbRXGFLR/QS6ZLEyphiKRB
kToqzqmarY4R8NfZtFqrjYVkPI0uh5y8055Gp9kRqNhl4ptIM/uBIZeg5vYa4GfJ
pGvu10ngPb3DjLbqF39Q3mE8XTJJp0ewX9+GmL98Ly+eqeSIJED7m9el5Rwptfgc
Ve0n0BNn1WkGytJ2sA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:05 2025 by rpki-client