Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: Sjbinq80tHOxOHB/01yb0kyHUVL1Uj/65Is+hv2r0wY=
Subject key identifier: 89:FA:91:75:F7:D7:A1:95:0A:CC:BB:79:15:89:4D:61:EE:C8:64:B1
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 0199FBEB46B8618D7D2E6B47DFBC0C3D0842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0F7B
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: 3xLv6B4pdRY2T2kcqi/tq9nmRQTomwKywjD5EZ2015o=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:46:b8:61:8d:7d:2e:6b:47:df:bc:0c:3d:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=89fa9175f7d7a1950accbb7915894d61eec864b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:c6:47:77:c1:1d:96:06:55:eb:1a:1b:77:
31:ed:50:42:99:1a:95:31:cf:4f:67:df:35:cc:15:
af:b9:91:5c:98:03:b6:4a:ae:86:96:e1:4f:1b:36:
aa:72:ea:14:04:98:2c:f5:0f:58:f9:c5:e7:6c:cd:
c1:a2:53:6e:30:6b:03:03:52:b2:9c:83:04:2e:78:
4e:e2:d7:30:a5:76:d5:09:89:31:1b:80:39:3f:f6:
3d:90:48:89:16:d3:7a:fa:3a:99:24:48:7f:f2:f5:
67:f9:65:75:40:4f:2f:2b:cc:04:a4:6e:08:02:cf:
56:e2:7c:41:78:35:17:b4:fc:2a:8c:b5:75:07:69:
d8:ea:af:28:12:f8:00:32:f0:0f:cb:6f:5e:58:bc:
a2:16:10:12:d1:73:25:f8:cd:21:d9:11:d0:e3:b2:
20:2c:e5:b2:7e:53:e1:a1:7e:a9:cd:e5:2e:88:ac:
f7:98:53:2f:be:f3:7a:9b:33:14:d7:c9:b7:3b:3c:
69:a6:4d:2a:b5:a2:ce:e4:c0:97:fa:2d:6d:f5:9f:
c0:0c:32:86:26:df:9a:a1:d9:29:1a:1f:f9:87:8f:
07:a2:58:92:55:b0:d4:d4:aa:98:30:2e:4d:70:0e:
31:d4:eb:a7:2f:4f:29:d6:98:59:bd:ae:a0:0a:0e:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:91:75:F7:D7:A1:95:0A:CC:BB:79:15:89:4D:61:EE:C8:64:B1
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:c3:06:4f:72:e5:63:42:5c:32:15:eb:b9:d2:ec:3f:7a:
a5:04:e0:17:96:1e:e8:8f:11:5d:3b:f2:71:87:74:eb:36:15:
85:f1:00:66:b9:91:da:1d:fc:e0:e0:f5:37:a6:1b:5c:a6:3c:
79:2f:48:aa:dd:65:94:3c:31:cc:16:25:af:66:a9:2d:ba:83:
e2:0f:72:c4:4b:84:65:a3:fa:13:cf:85:80:47:bd:eb:6e:3b:
ec:31:c5:b9:ad:05:cc:6d:9b:9f:54:34:5c:3e:42:29:12:2d:
0d:de:cc:5c:c3:9e:f4:ce:f5:f0:58:de:3f:24:ca:f7:0a:24:
e0:fc:ae:a2:87:f2:07:16:bb:a7:da:d5:83:fd:4c:7a:2f:4b:
91:fa:d7:b7:a4:b4:2d:40:46:93:9c:f8:3d:35:2e:86:85:ea:
a1:cd:71:e9:10:4e:8f:be:ec:9b:46:87:97:06:db:c3:fc:68:
90:da:10:61:4b:6f:38:88:83:ca:73:96:d1:76:5a:ad:54:47:
b0:cf:74:2a:ba:60:7a:84:3f:b8:24:9d:6b:e3:76:84:f6:5e:
2e:b5:ef:d6:0e:fe:2f:3a:d8:00:86:0b:ec:74:4d:fa:c5:5c:
9a:86:b0:9e:0c:a9:54:fb:03:c3:c7:31:59:84:49:b5:8b:07:
6d:54:23:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn760a4YY19LmtH37wMPQhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1
ZjZjZTAwHhcNMjUxMDE5MTAwMjA0WhcNMjUxMDIwMTAwMjA0WjAzMTEwLwYDVQQD
Eyg4OWZhOTE3NWY3ZDdhMTk1MGFjY2JiNzkxNTg5NGQ2MWVlYzg2NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyTGR3fBHZYGVesaG3cx7VBCmRqV
Mc9PZ981zBWvuZFcmAO2Sq6GluFPGzaqcuoUBJgs9Q9Y+cXnbM3BolNuMGsDA1Ky
nIMELnhO4tcwpXbVCYkxG4A5P/Y9kEiJFtN6+jqZJEh/8vVn+WV1QE8vK8wEpG4I
As9W4nxBeDUXtPwqjLV1B2nY6q8oEvgAMvAPy29eWLyiFhAS0XMl+M0h2RHQ47Ig
LOWyflPhoX6pzeUuiKz3mFMvvvN6mzMU18m3Ozxppk0qtaLO5MCX+i1t9Z/ADDKG
Jt+aodkpGh/5h48HoliSVbDU1KqYMC5NcA4x1OunL08p1phZva6gCg48SwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIn6kXX316GVCsy7eRWJTWHuyGSxMB8GA1UdIwQY
MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3
LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1
YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt7D
Bk9y5WNCXDIV67nS7D96pQTgF5Ye6I8RXTvycYd06zYVhfEAZrmR2h384OD1N6Yb
XKY8eS9Iqt1llDwxzBYlr2apLbqD4g9yxEuEZaP6E8+FgEe962477DHFua0FzG2b
n1Q0XD5CKRItDd7MXMOe9M718FjePyTK9wok4PyuoofyBxa7p9rVg/1Mei9LkfrX
t6S0LUBGk5z4PTUuhoXqoc1x6RBOj77sm0aHlwbbw/xokNoQYUtvOIiDynOW0XZa
rVRHsM90KrpgeoQ/uCSda+N2hPZeLrXv1g7+LzrYAIYL7HRN+sVcmoawngypVPsD
w8cxWYRJtYsHbVQj3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:12 2025 by rpki-client