Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: 6J5JTB6ppiCJIA7LII6yfTlZgq0wEddYJMYU7+DymzU=
Subject key identifier: F7:B2:B1:96:5D:8D:69:40:1D:1C:82:21:F8:E4:FA:37:29:25:4D:36
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0199FC5905988635C81CFF58A53062160E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1420
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: G3XUeUFL/W9Ka9wVNwmA4vQqjJ/hoLKNuzG3X4Xu9aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:05:98:86:35:c8:1c:ff:58:a5:30:62:16:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=f7b2b1965d8d69401d1c8221f8e4fa3729254d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:8b:a8:25:d9:c5:d7:03:7c:fd:b8:af:e4:
d4:70:98:57:c7:d0:43:b8:79:fc:9e:40:27:24:25:
bb:2a:a2:c0:a4:5e:42:e6:b5:4e:75:1f:2d:65:56:
21:df:ec:46:fc:9e:27:b1:54:a4:92:cb:ba:32:8b:
23:4d:ae:d9:8c:f8:5c:cb:64:99:21:ee:68:bb:b0:
b3:f5:22:64:32:87:3c:76:c1:45:65:0a:1b:ad:74:
b7:2c:9d:d5:1e:f3:93:51:37:df:ee:26:44:cd:ca:
2c:65:9a:6d:35:5f:a5:a8:d7:bf:3b:7d:b7:e8:8c:
84:26:51:1a:e4:52:e9:14:b1:d7:a0:ae:16:1b:b2:
52:49:c1:bc:20:c4:db:5d:d9:58:d6:04:15:44:d2:
2e:09:6a:9f:70:d0:a4:f5:6a:f0:e8:e0:e4:a1:d6:
fd:e6:d2:3e:d8:cd:3f:b6:a8:dc:2b:58:e9:66:2c:
d2:ab:dc:e5:15:cc:d2:71:61:2f:85:f8:53:f4:70:
68:a7:c2:e4:5c:49:c6:af:e1:02:51:a6:18:bc:ff:
ca:86:b2:a6:26:5b:b9:33:6f:d2:a3:bc:09:b5:19:
ae:ce:09:85:5d:a3:6f:1b:50:e9:49:49:99:6e:5a:
76:b3:fc:20:01:b0:f2:a6:c2:db:04:f7:f4:20:29:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:B1:96:5D:8D:69:40:1D:1C:82:21:F8:E4:FA:37:29:25:4D:36
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:69:8f:a4:19:97:7a:ba:ad:67:fe:f7:1e:39:4b:79:c0:
24:93:d2:0e:00:26:5a:2b:45:85:85:08:6e:89:3a:b5:cb:a1:
b9:2c:86:d3:e5:6d:13:48:fe:91:f1:ba:b2:81:d7:5d:af:d1:
6e:9e:78:3e:69:07:59:55:ad:37:5f:f2:4b:54:d5:ea:45:d4:
33:f1:3a:e4:37:42:5a:68:b8:53:b4:09:36:0b:a6:1e:0b:7f:
9d:fa:d0:67:c1:59:d3:e5:89:8c:6f:29:0e:b8:48:5b:19:bf:
88:6d:e1:79:24:3f:58:85:e4:1d:e3:70:92:ea:f7:20:e9:ef:
7d:1f:b2:e6:3b:b4:0a:09:81:10:0e:4c:7a:e8:5e:b7:f0:22:
a6:00:18:ef:24:8b:a7:f4:15:70:d2:84:be:e0:7f:3a:76:11:
c2:fb:c6:5f:be:d0:fc:de:f4:cc:9c:20:72:f0:c7:1e:5c:f6:
36:58:7f:53:82:3f:fc:b1:75:3f:df:87:65:21:2b:4c:c3:2b:
6e:93:be:bc:a5:93:c9:ae:4f:dc:d6:c2:ab:d9:63:d5:c6:f8:
fb:6b:ad:f6:bf:91:b7:79:55:bd:65:6b:3e:d1:26:bd:ed:79:
1d:5c:f5:33:6b:50:33:aa:9b:ba:ad:dc:3c:97:ce:24:6b:d2:
bb:de:4e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQWYhjXIHP9YpTBiFg4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZWFiYTUzZDZkZmJhYjRlOTc2MTIwYzFlMjAyNjhiYmZl
OGEwZTAwHhcNMjUxMDE5MTIwMTU2WhcNMjUxMDIwMTIwMTU2WjAzMTEwLwYDVQQD
EyhmN2IyYjE5NjVkOGQ2OTQwMWQxYzgyMjFmOGU0ZmEzNzI5MjU0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsmLqCXZxdcDfP24r+TUcJhXx9BD
uHn8nkAnJCW7KqLApF5C5rVOdR8tZVYh3+xG/J4nsVSkksu6MosjTa7ZjPhcy2SZ
Ie5ou7Cz9SJkMoc8dsFFZQobrXS3LJ3VHvOTUTff7iZEzcosZZptNV+lqNe/O323
6IyEJlEa5FLpFLHXoK4WG7JSScG8IMTbXdlY1gQVRNIuCWqfcNCk9Wrw6ODkodb9
5tI+2M0/tqjcK1jpZizSq9zlFczScWEvhfhT9HBop8LkXEnGr+ECUaYYvP/KhrKm
Jlu5M2/So7wJtRmuzgmFXaNvG1DpSUmZblp2s/wgAbDypsLbBPf0ICkuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeysZZdjWlAHRyCIfjk+jcpJU02MB8GA1UdIwQY
MBaAFNfqulPW37q06XYSDB4gJou/6KDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQt
MmFlNzkzZGE0NzcwLzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQtMmFlNzkzZGE0Nzcw
LzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCFpj6QZ
l3q6rWf+9x45S3nAJJPSDgAmWitFhYUIbok6tcuhuSyG0+VtE0j+kfG6soHXXa/R
bp54PmkHWVWtN1/yS1TV6kXUM/E65DdCWmi4U7QJNgumHgt/nfrQZ8FZ0+WJjG8p
DrhIWxm/iG3heSQ/WIXkHeNwkur3IOnvfR+y5ju0CgmBEA5Meuhet/AipgAY7ySL
p/QVcNKEvuB/OnYRwvvGX77Q/N70zJwgcvDHHlz2Nlh/U4I//LF1P9+HZSErTMMr
bpO+vKWTya5P3NbCq9lj1cb4+2ut9r+Rt3lVvWVrPtEmve15HVz1M2tQM6qbuq3c
PJfOJGvSu95OGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:32 2025 by rpki-client