Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: FC+lt9jSB1tVXr4loCbQV9Kx92QI7h2awTvbX7CSgPA=
Subject key identifier: D0:6C:5F:D1:96:74:41:CE:86:98:98:75:07:9D:06:F4:3B:C0:B0:99
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0199FBEA8A6034FDE3D6675C5E431E816688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 07F8
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: 7cU0y8XMElJxZcYNPTmGf5eUGMPYhDWRAK+76j9k9kQ=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8a:60:34:fd:e3:d6:67:5c:5e:43:1e:81:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=d06c5fd1967441ce86989875079d06f43bc0b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:a1:28:fb:e4:23:4f:ed:22:ce:fc:4f:ed:
bf:49:c8:da:b8:53:02:1f:73:f0:4f:52:83:64:8e:
11:51:c2:f5:ee:e0:22:7a:ed:af:bb:ea:f8:18:52:
c3:76:9d:ca:f1:fc:92:fe:6d:7f:9c:74:47:e6:42:
50:c9:d1:19:42:38:ff:c5:ba:03:0a:a2:f1:43:45:
d1:b4:51:6f:59:e9:a1:8d:87:4b:a3:33:47:dd:eb:
66:c0:9f:ce:75:84:8d:d7:84:9b:91:df:82:6f:db:
e1:99:02:74:09:a5:f4:32:4f:a4:a6:8a:a5:28:7c:
ee:38:88:8c:be:e7:7f:b0:e9:da:98:ef:80:29:30:
f8:5d:d7:76:56:6b:5c:c3:31:7f:7f:da:d4:98:9c:
8e:76:8e:15:97:ee:a3:4f:a4:78:c4:9e:70:6f:be:
63:b6:e3:9d:6d:32:f6:20:7b:21:d9:9c:0d:48:5a:
1d:bf:00:02:60:aa:99:7b:12:51:a5:dd:01:ce:6d:
c3:6c:e4:60:e8:7c:aa:62:aa:23:17:19:05:d7:82:
c9:3b:06:29:8a:fa:a5:bb:69:f9:fd:96:3d:a8:ae:
11:5b:d6:1a:6e:bb:44:67:aa:f1:6b:00:3e:ab:17:
4b:89:d6:e2:08:b7:39:81:e9:9a:6a:0c:87:9f:0d:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:5F:D1:96:74:41:CE:86:98:98:75:07:9D:06:F4:3B:C0:B0:99
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:21:e9:2a:ab:6f:6a:92:ab:2f:ad:26:78:f1:4c:05:4e:87:
2d:f5:91:7d:1c:cb:70:ae:3f:b3:ed:1f:4b:f7:48:d6:79:e4:
b0:ef:8e:6d:68:d3:58:2d:cc:7a:89:ea:d0:ed:c5:73:00:f8:
4a:0f:76:cc:47:2b:0b:f3:1b:fa:72:7b:97:4e:da:80:02:2b:
85:7e:f8:44:a4:96:b2:29:c5:76:28:c6:a3:41:c0:00:0a:73:
22:82:09:a8:c0:97:1f:8b:48:3e:f6:6f:31:c5:7c:53:5d:e6:
a0:83:5c:88:35:83:fe:72:46:56:e7:57:a2:2c:50:03:ea:5e:
4c:3f:89:08:4a:98:c4:eb:61:9f:c6:2d:ea:af:ad:c2:92:a7:
01:88:ac:6b:ac:53:8d:1c:01:22:70:99:9a:e5:2f:f6:19:de:
b2:a7:3f:92:ab:23:c4:61:31:e2:14:2c:b4:52:a3:53:6f:f0:
ea:95:c4:4b:ed:0e:2a:37:25:f7:1f:4c:a4:75:59:93:7d:6e:
be:8e:62:3c:77:9e:b5:41:42:a0:90:52:6f:c0:92:8b:47:54:
b6:a4:3d:9c:26:25:62:7a:4e:e4:0d:1e:82:dd:2e:e3:bf:2c:
e2:41:2a:8d:69:06:5e:57:e2:d2:d5:31:d4:9a:80:e6:1b:3c:
65:ea:26:53
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn76opgNP3j1mdcXkMegWaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjUxMDE5MTAwMTE1WhcNMjUxMDIwMTAwMTE1WjAzMTEwLwYDVQQD
EyhkMDZjNWZkMTk2NzQ0MWNlODY5ODk4NzUwNzlkMDZmNDNiYzBiMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2hKPvkI0/tIs78T+2/ScjauFMC
H3PwT1KDZI4RUcL17uAieu2vu+r4GFLDdp3K8fyS/m1/nHRH5kJQydEZQjj/xboD
CqLxQ0XRtFFvWemhjYdLozNH3etmwJ/OdYSN14Sbkd+Cb9vhmQJ0CaX0Mk+kpoql
KHzuOIiMvud/sOnamO+AKTD4Xdd2VmtcwzF/f9rUmJyOdo4Vl+6jT6R4xJ5wb75j
tuOdbTL2IHsh2ZwNSFodvwACYKqZexJRpd0Bzm3DbORg6HyqYqojFxkF14LJOwYp
ivqlu2n5/ZY9qK4RW9YabrtEZ6rxawA+qxdLidbiCLc5gemaagyHnw0heQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNBsX9GWdEHOhpiYdQedBvQ7wLCZMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyHp
KqtvapKrL60mePFMBU6HLfWRfRzLcK4/s+0fS/dI1nnksO+ObWjTWC3Meonq0O3F
cwD4Sg92zEcrC/Mb+nJ7l07agAIrhX74RKSWsinFdijGo0HAAApzIoIJqMCXH4tI
PvZvMcV8U13moINciDWD/nJGVudXoixQA+peTD+JCEqYxOthn8Yt6q+twpKnAYis
a6xTjRwBInCZmuUv9hnesqc/kqsjxGEx4hQstFKjU2/w6pXES+0OKjcl9x9MpHVZ
k31uvo5iPHeetUFCoJBSb8CSi0dUtqQ9nCYlYnpO5A0egt0u478s4kEqjWkGXlfi
0tUx1JqA5hs8ZeomUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:25 2025 by rpki-client