Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: w04zcqUgJqswmHACOjQIM0jxwsrI1M0EhoN7Plk3gNU=
Subject key identifier: 6B:E8:EE:B2:E0:22:30:51:0D:E9:2F:D6:E9:88:24:B8:7D:FC:9A:A6
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019A50E40B8E624E92F3F336DEF3AF757CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 1435
Signing time: Tue 04 Nov 2025 22:01:53 +0000
Manifest this update: Tue 04 Nov 2025 22:01:53 +0000
Manifest next update: Wed 05 Nov 2025 22:01:53 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: CwzcIRbmaSp5LbfRZc9iQKmyRFkGQha3EuaTaGN7SnQ=)
2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:0b:8e:62:4e:92:f3:f3:36:de:f3:af:75:7c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Nov 4 22:01:53 2025 GMT
Not After : Nov 5 22:01:53 2025 GMT
Subject: CN=6be8eeb2e02230510de92fd6e98824b87dfc9aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:84:85:61:be:13:c5:79:5c:8e:95:a9:43:
af:f2:05:fa:d9:4a:ed:8c:1a:16:95:1c:0f:66:cb:
3e:8d:ef:34:5d:8a:7e:40:92:9c:91:98:d8:63:fc:
52:3b:54:1e:9e:9f:d1:e3:96:e6:0f:07:7c:04:a0:
54:ef:77:14:3c:90:0d:c1:b2:31:66:bb:a8:f3:96:
02:ea:27:e5:9f:1f:63:6c:49:c7:80:5f:3e:86:3e:
a0:2b:58:b6:80:cd:16:88:43:97:fc:00:f6:22:43:
d4:bf:24:3e:1c:d6:22:e6:94:ec:d4:db:36:a7:08:
93:0d:63:7b:f1:ff:eb:41:c9:af:67:cd:5c:23:00:
a6:5c:3c:2f:16:4c:c4:d8:28:63:f1:22:a8:c1:e7:
8f:37:0a:cc:c6:ab:68:16:36:e7:1b:9e:e7:19:3e:
02:63:5a:a0:69:28:5d:a6:78:6a:f1:c8:a5:31:59:
50:01:47:22:63:fe:90:6a:9c:62:62:52:1e:5d:89:
39:72:7d:d6:15:ed:65:68:ab:ea:c9:de:f7:46:0b:
b5:78:04:87:ce:2d:b7:be:7b:ee:df:85:8c:9f:d4:
c1:c2:4a:f7:f5:8f:0b:52:6e:a8:f8:d1:6e:7c:46:
b0:04:06:63:7b:5d:bd:8d:61:67:41:58:17:92:b2:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:EE:B2:E0:22:30:51:0D:E9:2F:D6:E9:88:24:B8:7D:FC:9A:A6
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:82:4b:c2:18:c5:64:f5:ab:b5:87:2a:a1:fe:11:38:7a:9e:
11:02:2f:c4:02:32:10:66:4e:93:48:0e:ae:d8:06:74:f2:1c:
a5:cb:41:4d:b3:f0:ef:90:e1:2d:60:72:5c:78:c8:18:6d:79:
8b:62:67:cb:c1:bf:2a:0a:5f:ef:08:5a:c1:91:1a:69:7e:36:
2e:50:c0:75:31:01:79:0f:8d:e5:ac:c7:58:a8:dd:2f:db:eb:
a5:21:de:98:32:9b:5d:f2:65:e0:5b:19:c0:3d:29:26:df:84:
bf:95:0f:23:e9:8f:6e:29:ed:37:44:80:62:52:55:3f:42:b6:
56:c0:92:ef:d6:18:8b:51:ef:b9:8c:2c:17:4d:59:47:20:4b:
b3:29:d8:2c:03:79:47:d1:6d:88:fd:33:43:fd:ce:73:f7:55:
d5:42:01:97:ea:83:be:d4:a6:98:f5:40:71:71:d9:ea:1a:37:
e5:d5:24:af:0c:8b:17:3a:40:d5:82:e2:8a:c2:70:69:88:1f:
2d:7c:4c:45:8b:91:13:fe:b3:e9:06:51:5a:78:5e:18:43:9b:
9c:86:9d:04:a8:ec:68:d3:0f:05:1d:5f:89:a3:a9:bd:f2:e7:
d0:2c:3a:bf:10:13:ac:82:2a:ce:db:19:b2:54:3f:0e:db:13:
66:a1:54:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5AuOYk6S8/M23vOvdXz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj
YWJkNjYwHhcNMjUxMTA0MjIwMTUzWhcNMjUxMTA1MjIwMTUzWjAzMTEwLwYDVQQD
Eyg2YmU4ZWViMmUwMjIzMDUxMGRlOTJmZDZlOTg4MjRiODdkZmM5YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5huEhWG+E8V5XI6VqUOv8gX62Urt
jBoWlRwPZss+je80XYp+QJKckZjYY/xSO1Qenp/R45bmDwd8BKBU73cUPJANwbIx
Zruo85YC6iflnx9jbEnHgF8+hj6gK1i2gM0WiEOX/AD2IkPUvyQ+HNYi5pTs1Ns2
pwiTDWN78f/rQcmvZ81cIwCmXDwvFkzE2Chj8SKoweePNwrMxqtoFjbnG57nGT4C
Y1qgaShdpnhq8cilMVlQAUciY/6QapxiYlIeXYk5cn3WFe1laKvqyd73Rgu1eASH
zi23vnvu34WMn9TBwkr39Y8LUm6o+NFufEawBAZje129jWFnQVgXkrJ81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvo7rLgIjBRDekv1umIJLh9/JqmMB8GA1UdIwQY
MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt
NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2
LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYJLwhjF
ZPWrtYcqof4ROHqeEQIvxAIyEGZOk0gOrtgGdPIcpctBTbPw75DhLWByXHjIGG15
i2Jny8G/Kgpf7whawZEaaX42LlDAdTEBeQ+N5azHWKjdL9vrpSHemDKbXfJl4FsZ
wD0pJt+Ev5UPI+mPbintN0SAYlJVP0K2VsCS79YYi1HvuYwsF01ZRyBLsynYLAN5
R9FtiP0zQ/3Oc/dV1UIBl+qDvtSmmPVAcXHZ6ho35dUkrwyLFzpA1YLiisJwaYgf
LXxMRYuRE/6z6QZRWnheGEObnIadBKjsaNMPBR1fiaOpvfLn0Cw6vxATrIIqztsZ
slQ/DtsTZqFUIw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:24 2025 by rpki-client