Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: 5erxH3bqk573Yzn1asME2kdOKIWC1zZLIwUdgFD3CTg=
Subject key identifier: 45:E0:EC:3A:E9:C5:8E:BC:A1:91:28:F3:92:1A:7B:24:BC:E6:48:EB
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 0199FCC6798499880B11FD9725F1740B556D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0E29
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: 5KlcU269Nu0qFCJQZKIqmG8NGMcMz3+oHpm+EuvSx5Q=)
2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:79:84:99:88:0b:11:fd:97:25:f1:74:0b:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=45e0ec3ae9c58ebca19128f3921a7b24bce648eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:73:e1:fe:43:85:78:1c:9f:ee:de:7b:7b:
87:31:c3:76:6a:a9:d3:b3:15:e5:60:9f:04:25:df:
2c:fb:ac:9c:76:c1:d0:50:b9:84:02:b2:5d:13:db:
60:62:bb:cb:7e:18:9e:3e:2d:59:24:a4:93:57:b8:
99:98:c8:b2:9e:79:62:99:6a:59:ff:f3:93:9f:2a:
1a:d6:c1:4d:9d:e0:7a:2e:2e:a5:91:e2:4d:7b:13:
d7:17:f3:c9:82:30:82:2a:21:3b:bd:4b:b4:28:7a:
1b:b7:6d:b0:9d:81:e1:7b:80:94:26:86:a4:cc:16:
51:4a:cf:f5:86:5d:de:d4:73:62:b6:e3:b8:ea:db:
3a:21:62:ad:cf:26:28:3f:eb:9c:c1:83:be:e0:c5:
e3:da:47:62:bf:35:4b:d8:e7:ae:c3:e9:d5:79:71:
cc:b3:39:50:19:2b:16:e9:d8:cc:a4:94:94:cd:e2:
0e:91:f1:1b:56:c2:5b:02:8e:60:ba:a6:6f:6d:78:
2f:97:ab:cf:ee:40:19:1f:a4:c6:a1:40:30:bb:a3:
eb:97:e3:fd:58:44:b2:93:9c:d6:1c:9e:8f:e8:91:
a9:49:29:d0:3b:20:89:cf:0f:3b:57:61:be:af:37:
af:12:ad:83:a0:54:36:7c:5d:bb:ae:32:9f:05:d0:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:EC:3A:E9:C5:8E:BC:A1:91:28:F3:92:1A:7B:24:BC:E6:48:EB
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:09:4a:b1:fc:9b:09:e8:e5:7a:82:4d:19:e9:79:c4:44:
ad:a6:20:f8:a7:ab:49:79:7c:4c:6e:cf:a3:e1:88:74:0d:9d:
75:8b:3f:18:0b:58:65:5e:9a:de:3f:db:59:be:24:30:a7:dc:
81:6d:83:65:4e:1e:d2:30:59:66:eb:98:f9:62:d3:75:f8:d5:
85:f4:45:e1:9f:c6:66:1b:67:2e:ae:75:73:82:bd:f4:a2:6c:
f1:40:93:3d:4f:eb:1f:a9:65:11:cd:72:62:0c:1d:37:42:49:
a7:07:fa:73:ba:94:1b:a3:f5:1b:39:73:67:38:0f:82:fd:ec:
79:b0:33:5d:d8:f2:67:89:77:16:e1:d4:5e:e7:4c:cf:5a:5b:
34:d4:ae:13:9d:c7:90:9c:ac:17:c0:00:30:c2:50:f7:d1:ff:
5d:08:55:6b:6c:9e:55:92:f0:cf:e7:b8:d9:f7:50:8f:2c:53:
d3:6b:16:bb:8a:26:81:2b:2c:ef:62:65:34:d2:9d:f2:30:dc:
7e:51:93:05:98:65:45:54:29:73:4a:67:51:e9:a0:41:50:d4:
dd:f0:20:ac:58:e0:7b:b7:04:2d:76:d9:d1:96:b3:71:74:a8:
4d:fc:d2:2e:e3:df:84:7b:4f:68:21:c5:e7:a9:4c:29:25:31:
37:ed:b8:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnmEmYgLEf2XJfF0C1VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzQwMDc0MTRjZmYxNmNkY2YzYTNhYTIyYTk2Njc3Zjhi
ZTJiNjgwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
Eyg0NWUwZWMzYWU5YzU4ZWJjYTE5MTI4ZjM5MjFhN2IyNGJjZTY0OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+hz4f5DhXgcn+7ee3uHMcN2aqnT
sxXlYJ8EJd8s+6ycdsHQULmEArJdE9tgYrvLfhiePi1ZJKSTV7iZmMiynnlimWpZ
//OTnyoa1sFNneB6Li6lkeJNexPXF/PJgjCCKiE7vUu0KHobt22wnYHhe4CUJoak
zBZRSs/1hl3e1HNituO46ts6IWKtzyYoP+ucwYO+4MXj2kdivzVL2Oeuw+nVeXHM
szlQGSsW6djMpJSUzeIOkfEbVsJbAo5guqZvbXgvl6vP7kAZH6TGoUAwu6Prl+P9
WESyk5zWHJ6P6JGpSSnQOyCJzw87V2G+rzevEq2DoFQ2fF27rjKfBdB9SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXg7DrpxY68oZEo85IaeyS85kjrMB8GA1UdIwQY
MBaAFNY0AHQUz/Fs3POjqiKpZnf4vitoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2Yzgt
ZGVjYjkyZDFhNTIzLzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2YzgtZGVjYjkyZDFhNTIz
LzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeQJSrH8
mwno5XqCTRnpecREraYg+KerSXl8TG7Po+GIdA2ddYs/GAtYZV6a3j/bWb4kMKfc
gW2DZU4e0jBZZuuY+WLTdfjVhfRF4Z/GZhtnLq51c4K99KJs8UCTPU/rH6llEc1y
YgwdN0JJpwf6c7qUG6P1GzlzZzgPgv3sebAzXdjyZ4l3FuHUXudMz1pbNNSuE53H
kJysF8AAMMJQ99H/XQhVa2yeVZLwz+e42fdQjyxT02sWu4omgSss72JlNNKd8jDc
flGTBZhlRVQpc0pnUemgQVDU3fAgrFjge7cELXbZ0ZazcXSoTfzSLuPfhHtPaCHF
56lMKSUxN+24EA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:16 2025 by rpki-client