Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: xIk92zXs/YjqqMxhOQr/m7uRp6LdvTXdfVtHQYAnbOI=
Subject key identifier: 51:D4:3C:BB:64:D2:F9:AF:34:53:FF:39:40:7E:09:A1:B6:46:5F:E4
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 0199FE7E1B6849DBB7A01BED36A159D4F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0AF1
Signing time: Sun 19 Oct 2025 22:01:41 +0000
Manifest this update: Sun 19 Oct 2025 22:01:41 +0000
Manifest next update: Mon 20 Oct 2025 22:01:41 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: KQ/NGfgaVjmAHiJT/fvtMv3HG+fw9kB7VaVLsFk5STo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:1b:68:49:db:b7:a0:1b:ed:36:a1:59:d4:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Oct 19 22:01:41 2025 GMT
Not After : Oct 20 22:01:41 2025 GMT
Subject: CN=51d43cbb64d2f9af3453ff39407e09a1b6465fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:84:c2:2a:cc:f7:cd:26:cb:ea:d6:7f:5d:
bd:ad:27:25:57:8a:25:38:be:2e:85:fe:bd:9f:29:
e4:18:94:6c:a7:e2:7a:e3:45:b1:03:f3:49:d1:39:
8f:15:af:b9:66:07:20:cc:bc:a8:f3:85:aa:12:15:
85:ff:ae:dc:5f:3a:7d:dc:68:b0:c8:ee:8f:25:d5:
54:60:3f:ba:16:0a:19:f6:2e:05:53:6e:8c:b1:3c:
3b:40:0e:0d:67:a5:a9:3d:e4:0b:d0:93:9f:8c:02:
32:70:3b:aa:9d:cf:64:ef:74:f7:f2:74:71:bf:d0:
69:ec:9c:8f:86:3d:83:f3:2c:27:b3:92:23:84:37:
86:b2:01:0c:ba:4b:9f:37:bf:49:bc:b7:f1:c4:91:
54:6b:ac:73:59:b2:01:9c:70:95:67:ae:63:5b:85:
f5:48:51:cd:e6:67:7d:a2:98:1a:a5:d8:e5:f1:c6:
c5:bc:5c:3d:d7:20:c6:56:50:8c:8d:72:21:32:c8:
cb:e8:ba:4a:2a:81:62:63:08:ca:54:8f:1d:b2:24:
16:57:af:d0:f8:49:85:77:9b:ce:70:77:33:7e:95:
a9:c8:28:33:a6:4c:b9:87:bd:8d:5e:e9:b0:b3:91:
d3:24:92:f8:71:5a:d6:6b:b3:80:f7:8c:a8:22:ba:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:3C:BB:64:D2:F9:AF:34:53:FF:39:40:7E:09:A1:B6:46:5F:E4
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:68:8a:7f:d5:08:f1:45:9c:7a:39:8d:b8:d3:13:aa:83:01:
64:bf:e9:bf:a3:e0:00:d9:b8:ff:dd:4b:7c:68:a4:a9:6b:a3:
46:59:4c:fa:fb:d1:f3:7d:2e:8e:27:87:17:0b:a6:b1:7a:6e:
f2:3d:82:ba:e1:98:d4:f6:3a:34:63:63:14:b4:81:b4:60:40:
c9:4f:a0:cd:f3:09:3e:2b:f2:df:f9:98:b0:e2:f3:19:e0:45:
00:16:05:bc:f9:0b:23:2a:c5:3b:bf:99:c1:26:45:30:96:88:
ae:f2:22:33:f0:c5:25:00:f4:1d:dc:60:50:e9:d0:5a:59:cf:
9b:69:aa:66:b7:2d:8f:76:74:8c:34:bc:51:40:66:ac:90:c2:
5a:65:14:27:2e:aa:44:6a:c8:ba:a0:1b:d8:ed:55:d2:b4:33:
d7:83:b7:65:84:5e:22:1a:ae:be:9a:62:74:24:f3:ee:32:6a:
9d:b4:65:fc:5e:7e:41:46:85:48:34:69:72:c4:1f:7b:b6:e6:
ec:d5:4e:5f:92:32:97:ce:14:8b:e6:07:5d:a6:e2:34:ab:bd:
41:be:30:f6:64:64:8b:c1:af:06:48:a8:03:f0:7e:5e:ac:34:
33:5e:e6:a8:b5:1c:9f:8d:17:34:b7:4a:fd:00:2c:3a:2d:62:
44:02:ce:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fhtoSdu3oBvtNqFZ1Pf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4
MmNhZDMwHhcNMjUxMDE5MjIwMTQxWhcNMjUxMDIwMjIwMTQxWjAzMTEwLwYDVQQD
Eyg1MWQ0M2NiYjY0ZDJmOWFmMzQ1M2ZmMzk0MDdlMDlhMWI2NDY1ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA022EwirM980my+rWf129rSclV4ol
OL4uhf69nynkGJRsp+J640WxA/NJ0TmPFa+5ZgcgzLyo84WqEhWF/67cXzp93Giw
yO6PJdVUYD+6FgoZ9i4FU26MsTw7QA4NZ6WpPeQL0JOfjAIycDuqnc9k73T38nRx
v9Bp7JyPhj2D8ywns5IjhDeGsgEMukufN79JvLfxxJFUa6xzWbIBnHCVZ65jW4X1
SFHN5md9opgapdjl8cbFvFw91yDGVlCMjXIhMsjL6LpKKoFiYwjKVI8dsiQWV6/Q
+EmFd5vOcHczfpWpyCgzpky5h72NXumws5HTJJL4cVrWa7OA94yoIrqwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHUPLtk0vmvNFP/OUB+CaG2Rl/kMB8GA1UdIwQY
MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It
OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx
LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGiKf9UI
8UWcejmNuNMTqoMBZL/pv6PgANm4/91LfGikqWujRllM+vvR830ujieHFwumsXpu
8j2CuuGY1PY6NGNjFLSBtGBAyU+gzfMJPivy3/mYsOLzGeBFABYFvPkLIyrFO7+Z
wSZFMJaIrvIiM/DFJQD0HdxgUOnQWlnPm2mqZrctj3Z0jDS8UUBmrJDCWmUUJy6q
RGrIuqAb2O1V0rQz14O3ZYReIhquvppidCTz7jJqnbRl/F5+QUaFSDRpcsQfe7bm
7NVOX5Iyl84Ui+YHXabiNKu9Qb4w9mRki8GvBkioA/B+Xqw0M17mqLUcn40XNLdK
/QAsOi1iRALOVA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:58 2025 by rpki-client