Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: 0Qbg3tTpgyaFPrR8f4iFQme9DamNNsFi19fGp5PbFQU=
Subject key identifier: 18:1D:3C:9B:8E:28:EF:7F:49:2F:28:E1:28:2A:F4:E7:C2:CC:29:30
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 0199FCC63F47BE620F890ABC8A68D5E2BF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: iRz2e5shnSXIXPD0F3ffPS02c4ZLC+fYziYJv26Txsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3f:47:be:62:0f:89:0a:bc:8a:68:d5:e2:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=181d3c9b8e28ef7f492f28e1282af4e7c2cc2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:6e:c7:d2:43:be:11:2e:50:f6:88:5e:5a:
2e:dc:2f:0f:4e:4a:e1:78:b0:5f:3b:21:27:c9:7f:
45:3d:12:10:b8:90:09:fa:62:80:60:f6:99:19:83:
1c:64:c8:47:0d:2d:a5:ea:72:ae:df:f4:dc:55:78:
50:78:30:2c:36:2c:a0:03:88:45:c9:43:a3:1a:07:
f6:60:d2:9e:a5:f2:a7:a5:8d:58:1f:91:cb:83:eb:
c4:f3:14:f9:6c:25:31:3e:c0:7a:47:54:68:5a:a6:
6e:3f:e6:d3:f7:31:2e:ee:a1:9b:01:b8:23:b3:bf:
da:d5:b7:87:53:10:6d:db:c9:69:f8:c7:58:1d:85:
bf:66:c5:69:71:31:0a:d4:e2:ef:ca:20:87:a2:86:
6f:f4:66:bc:a0:0f:57:24:3b:13:6c:49:79:d5:d8:
36:24:5d:0f:78:5d:ae:2f:36:ea:fa:5f:e5:0b:3a:
26:43:c5:96:ba:ef:7f:94:5a:6b:d4:28:9a:bd:19:
fc:8b:92:f2:63:93:44:63:0a:fe:71:bc:11:3d:ae:
8d:a8:1e:29:59:c0:8a:ea:d5:a4:00:c2:a4:bb:45:
26:9b:80:5c:79:1a:b4:43:9a:08:64:a9:4f:6e:f1:
7b:26:d9:8d:c1:60:f6:a4:bf:21:9e:67:9b:11:a5:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:3C:9B:8E:28:EF:7F:49:2F:28:E1:28:2A:F4:E7:C2:CC:29:30
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:5d:d6:fa:3a:64:f0:3c:07:df:d0:5d:b5:4f:96:de:f1:
e3:46:7d:6a:c3:d3:78:f5:e1:9e:8f:de:69:9b:ab:49:69:dd:
f2:93:85:1b:64:d6:58:93:a4:1c:d8:86:f8:34:6e:75:1d:e0:
57:b0:11:63:a0:08:e5:2d:de:15:76:41:af:91:c1:69:70:9b:
7a:41:4c:cb:61:4b:e8:c8:2e:48:c2:12:e2:e6:e3:5a:d8:25:
f6:aa:3a:15:3e:00:5d:62:08:3a:83:cf:13:21:cb:d6:af:ba:
dd:b0:c4:d0:db:41:7c:50:ca:0d:af:54:b1:24:52:39:c5:52:
e8:e8:3f:0d:ab:8e:51:94:e2:44:42:5e:fc:f5:36:bc:d6:23:
a7:71:71:a2:41:f8:a6:aa:ce:3f:1f:55:16:e8:ed:9c:de:0d:
fd:df:cd:55:8f:7c:83:e0:76:34:0b:36:ba:26:c3:a5:d4:db:
c0:1f:a3:13:4d:21:3a:62:8f:cb:72:bc:0f:d8:b5:5b:bb:37:
a3:25:c7:73:b3:94:34:a6:23:26:59:3b:90:06:c4:3a:47:0c:
0d:7a:29:84:eb:53:19:9c:56:36:fa:8f:b8:01:12:73:73:d3:
cc:d7:38:9e:75:e5:d9:18:9e:bd:f9:f3:e9:01:96:8b:9b:6b:
b7:86:2a:c5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8xj9HvmIPiQq8imjV4r8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3
MDZmODIwHhcNMjUxMDE5MTQwMTE0WhcNMjUxMDIwMTQwMTE0WjAzMTEwLwYDVQQD
EygxODFkM2M5YjhlMjhlZjdmNDkyZjI4ZTEyODJhZjRlN2MyY2MyOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC5ux9JDvhEuUPaIXlou3C8PTkrh
eLBfOyEnyX9FPRIQuJAJ+mKAYPaZGYMcZMhHDS2l6nKu3/TcVXhQeDAsNiygA4hF
yUOjGgf2YNKepfKnpY1YH5HLg+vE8xT5bCUxPsB6R1RoWqZuP+bT9zEu7qGbAbgj
s7/a1beHUxBt28lp+MdYHYW/ZsVpcTEK1OLvyiCHooZv9Ga8oA9XJDsTbEl51dg2
JF0PeF2uLzbq+l/lCzomQ8WWuu9/lFpr1CiavRn8i5LyY5NEYwr+cbwRPa6NqB4p
WcCK6tWkAMKku0Umm4BceRq0Q5oIZKlPbvF7JtmNwWD2pL8hnmebEaU/tQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBgdPJuOKO9/SS8o4Sgq9OfCzCkwMB8GA1UdIwQY
MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj
LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5
MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICxd
1vo6ZPA8B9/QXbVPlt7x40Z9asPTePXhno/eaZurSWnd8pOFG2TWWJOkHNiG+DRu
dR3gV7ARY6AI5S3eFXZBr5HBaXCbekFMy2FL6MguSMIS4ubjWtgl9qo6FT4AXWII
OoPPEyHL1q+63bDE0NtBfFDKDa9UsSRSOcVS6Og/DauOUZTiREJe/PU2vNYjp3Fx
okH4pqrOPx9VFujtnN4N/d/NVY98g+B2NAs2uibDpdTbwB+jE00hOmKPy3K8D9i1
W7s3oyXHc7OUNKYjJlk7kAbEOkcMDXophOtTGZxWNvqPuAESc3PTzNc4nnXl2Rie
vfnz6QGWi5trt4YqxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:58 2025 by rpki-client