Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: 4i5yoDWXWm+XSvL/b+nE4et3bDzhjdAPq3ghhLAPC4g=
Subject key identifier: 4E:65:4E:4C:BC:37:CC:66:75:79:F4:7E:4A:85:62:49:6D:61:45:BA
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0199FC8F7B06BA4D03D8D8169800E5EE130E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: 3BDH1Mx0C7A2K2KeDxnXT7O66J9r5dy2FdTu4OS2y0U=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7b:06:ba:4d:03:d8:d8:16:98:00:e5:ee:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=4e654e4cbc37cc667579f47e4a8562496d6145ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:e0:52:d1:93:6b:50:83:3f:cd:ab:f5:b6:
a2:f6:10:e3:6c:94:e7:a1:3c:06:f5:cc:4c:ca:6f:
ed:30:74:95:e7:2f:d0:65:37:78:4b:3f:34:fe:7f:
63:ea:a2:a0:96:ed:31:6f:b3:de:4e:59:37:bd:65:
ed:83:bf:bd:0e:68:9d:3b:59:d2:97:5d:69:3b:12:
4d:cc:52:c3:69:7d:bc:a8:08:7c:eb:8b:eb:a9:eb:
9d:04:01:20:05:22:5a:1a:c0:4c:db:0f:05:92:08:
0c:32:c4:26:09:79:38:90:ef:79:67:fe:1a:5d:a0:
c1:ee:c7:ac:fc:de:c7:0e:d0:42:f9:d1:b3:7d:fe:
72:33:68:6c:5f:2f:71:45:16:28:a3:38:55:ad:7c:
f1:c7:62:2f:a5:27:48:36:18:90:db:c2:af:8b:8b:
06:de:0f:b3:4d:57:34:64:99:c7:44:f1:68:46:06:
d7:d5:14:d2:af:46:e6:b0:0b:56:c8:c9:ee:de:a2:
bd:95:18:fc:c7:50:45:ce:80:ce:0e:4b:0b:fa:59:
5e:bc:98:e7:d6:fe:14:29:7c:64:16:7c:e6:e3:0d:
cf:95:52:f0:af:b1:f5:c9:5f:7f:0e:1d:7d:48:80:
aa:2d:1d:06:78:2d:dd:34:0f:dd:d8:bd:e7:32:5b:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:4E:4C:BC:37:CC:66:75:79:F4:7E:4A:85:62:49:6D:61:45:BA
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:36:27:d5:a5:98:81:43:de:5c:f7:b5:9f:6e:02:ee:78:98:
23:bc:77:b9:a8:a2:7a:fb:87:0d:44:22:46:55:7b:6c:06:29:
dd:8c:71:b7:2a:97:7d:15:71:a0:fd:64:c5:50:4c:4b:54:87:
02:ec:ef:66:9a:92:8e:91:6e:48:5e:e0:85:98:3b:e2:83:a4:
19:69:0d:e3:1c:18:f4:a2:e1:ec:1e:40:5b:dd:c5:42:1f:ba:
2d:2f:80:1e:11:0d:7f:df:b8:cb:e5:33:25:81:97:1d:dd:14:
6f:06:49:b8:c6:9a:5c:8a:c2:f9:17:f8:df:5a:51:98:b4:88:
5e:f4:5c:ba:be:8e:13:b5:c9:1e:eb:9a:b4:7f:03:81:9c:21:
0a:6e:38:c8:d9:3c:b0:4a:9a:9b:a4:72:59:7b:52:b5:20:41:
d5:03:8b:0c:7c:1c:4a:f8:4a:7e:b9:91:39:f5:67:58:1e:d2:
90:08:df:b0:ef:07:ce:0c:76:3a:e4:e5:aa:2f:97:0c:a6:10:
42:3b:7d:91:01:93:81:e8:33:04:dd:62:f0:0d:a1:13:5f:fa:
6a:e8:6b:b1:1a:67:5c:2e:0f:33:bc:e1:5c:7d:cd:ca:6b:50:
24:4c:94:ec:ac:95:19:4a:3b:c5:c1:16:da:5d:4f:8b:7f:47:
5b:05:c9:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8j3sGuk0D2NgWmADl7hMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk
YTExMjYwHhcNMjUxMDE5MTMwMTI1WhcNMjUxMDIwMTMwMTI1WjAzMTEwLwYDVQQD
Eyg0ZTY1NGU0Y2JjMzdjYzY2NzU3OWY0N2U0YTg1NjI0OTZkNjE0NWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNfgUtGTa1CDP82r9bai9hDjbJTn
oTwG9cxMym/tMHSV5y/QZTd4Sz80/n9j6qKglu0xb7PeTlk3vWXtg7+9DmidO1nS
l11pOxJNzFLDaX28qAh864vrqeudBAEgBSJaGsBM2w8FkggMMsQmCXk4kO95Z/4a
XaDB7ses/N7HDtBC+dGzff5yM2hsXy9xRRYoozhVrXzxx2IvpSdINhiQ28Kvi4sG
3g+zTVc0ZJnHRPFoRgbX1RTSr0bmsAtWyMnu3qK9lRj8x1BFzoDODksL+llevJjn
1v4UKXxkFnzm4w3PlVLwr7H1yV9/Dh19SICqLR0GeC3dNA/d2L3nMlvH3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE5lTky8N8xmdXn0fkqFYkltYUW6MB8GA1UdIwQY
MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw
LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4
OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTYn
1aWYgUPeXPe1n24C7niYI7x3uaiievuHDUQiRlV7bAYp3YxxtyqXfRVxoP1kxVBM
S1SHAuzvZpqSjpFuSF7ghZg74oOkGWkN4xwY9KLh7B5AW93FQh+6LS+AHhENf9+4
y+UzJYGXHd0UbwZJuMaaXIrC+Rf431pRmLSIXvRcur6OE7XJHuuatH8DgZwhCm44
yNk8sEqam6RyWXtStSBB1QOLDHwcSvhKfrmROfVnWB7SkAjfsO8Hzgx2OuTlqi+X
DKYQQjt9kQGTgegzBN1i8A2hE1/6auhrsRpnXC4PM7zhXH3NymtQJEyU7KyVGUo7
xcEW2l1Pi39HWwXJOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:14 2025 by rpki-client