Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: GLmnBe0/RgqH3vCuLWTt4LNafa7Kq0tRVJusjG9qaXY=
Subject key identifier: F0:47:75:43:8D:E1:56:63:E0:F3:C7:67:18:3B:9C:F4:FC:62:7B:AF
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 0199FC217E285FD48CE325E65B7DDF41E165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 44
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: dV6sVuCZlSHYFSh+Myfq9bO/VgK0Kc1iAi3x2FfeThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:28:5f:d4:8c:e3:25:e6:5b:7d:df:41:e1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=f04775438de15663e0f3c767183b9cf4fc627baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:d7:14:7f:89:53:4b:01:4c:92:14:8a:6f:
94:6a:b1:17:f7:25:23:de:bf:48:e1:f6:43:9c:d0:
29:c0:be:bd:55:33:fe:9d:19:7b:8b:ef:b1:89:36:
9d:7f:a1:e9:bd:58:17:18:0a:91:36:97:ec:a1:f1:
0d:b8:94:21:fa:74:fd:3c:60:9d:21:ee:7d:68:a2:
e2:92:b5:51:25:32:2a:6d:fa:bb:8a:33:60:ee:fa:
f9:ab:5f:9a:dd:3f:d6:99:0b:92:60:0b:9d:96:0b:
d8:1a:3e:4d:6d:83:0d:f6:03:2e:e3:e7:47:bf:20:
f8:5e:d0:c7:da:a1:ff:d6:45:6e:df:c6:d1:76:48:
f7:37:af:5c:e5:44:15:7b:d2:b1:32:b0:cc:15:31:
6d:97:b8:d2:2b:0a:e2:84:d1:ff:11:76:25:d2:83:
43:15:d9:fe:11:22:cc:f7:2b:23:41:d2:f6:63:f2:
55:51:06:20:72:b5:0c:cc:43:b8:dc:de:cf:80:9d:
30:a7:25:ce:22:c0:d5:c1:10:07:4b:19:92:9b:d9:
f7:a1:cc:54:de:b1:25:fb:63:86:3d:ff:8b:8d:9d:
bc:8f:5c:18:4b:6e:87:1b:f8:43:44:27:6b:53:e9:
b8:f5:51:20:84:af:7d:70:f9:76:77:cb:c1:ba:6c:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:75:43:8D:E1:56:63:E0:F3:C7:67:18:3B:9C:F4:FC:62:7B:AF
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:4f:4a:85:71:51:41:6e:9c:98:ec:ac:7f:12:3e:fd:51:
a8:8a:d1:13:e6:14:81:08:47:6a:0b:b3:87:a6:cf:f1:ec:52:
ce:3d:1a:ef:88:49:0c:1c:d5:ee:c2:3d:c8:b2:d0:d1:34:9c:
b2:a7:63:cf:91:06:e1:f9:24:58:a1:28:5e:32:c8:02:19:6a:
0c:e7:bf:d2:aa:ef:4f:5f:3e:b7:0f:ae:a0:b4:0b:69:1d:7e:
25:57:30:13:a4:93:c1:17:cf:15:93:27:61:d6:c8:96:e2:d6:
e1:10:03:21:ac:68:ea:d8:60:b6:1c:9d:f6:6c:b9:44:e7:63:
34:c1:be:86:ca:fc:b0:5c:8b:45:ad:2c:e3:bf:99:08:ca:7b:
e1:02:65:93:26:99:ed:b5:4a:53:1c:1b:ac:78:50:6e:ec:c6:
41:85:c9:d5:76:df:da:13:35:9f:f7:0d:f4:00:c7:19:8d:e0:
b9:62:6d:44:9b:bb:db:8f:54:73:f0:70:c9:15:16:21:f2:e7:
2c:13:27:f7:07:ea:ba:05:68:12:f4:7d:3c:84:5a:b3:9b:bc:
44:34:67:f4:c5:34:0d:6c:1c:ee:aa:bc:cf:04:0a:5d:02:42:
d9:77:cc:aa:8a:71:16:24:06:6b:75:61:d3:0d:df:f7:23:98:
79:81:65:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IX4oX9SM4yXmW33fQeFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy
YjM1MzYwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD
EyhmMDQ3NzU0MzhkZTE1NjYzZTBmM2M3NjcxODNiOWNmNGZjNjI3YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvnXFH+JU0sBTJIUim+UarEX9yUj
3r9I4fZDnNApwL69VTP+nRl7i++xiTadf6HpvVgXGAqRNpfsofENuJQh+nT9PGCd
Ie59aKLikrVRJTIqbfq7ijNg7vr5q1+a3T/WmQuSYAudlgvYGj5NbYMN9gMu4+dH
vyD4XtDH2qH/1kVu38bRdkj3N69c5UQVe9KxMrDMFTFtl7jSKwrihNH/EXYl0oND
Fdn+ESLM9ysjQdL2Y/JVUQYgcrUMzEO43N7PgJ0wpyXOIsDVwRAHSxmSm9n3ocxU
3rEl+2OGPf+LjZ28j1wYS26HG/hDRCdrU+m49VEghK99cPl2d8vBumwxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBHdUON4VZj4PPHZxg7nPT8YnuvMB8GA1UdIwQY
MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt
NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh
LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgRPSoVx
UUFunJjsrH8SPv1RqIrRE+YUgQhHaguzh6bP8exSzj0a74hJDBzV7sI9yLLQ0TSc
sqdjz5EG4fkkWKEoXjLIAhlqDOe/0qrvT18+tw+uoLQLaR1+JVcwE6STwRfPFZMn
YdbIluLW4RADIaxo6thgthyd9my5ROdjNMG+hsr8sFyLRa0s47+ZCMp74QJlkyaZ
7bVKUxwbrHhQbuzGQYXJ1Xbf2hM1n/cN9ADHGY3guWJtRJu7249Uc/BwyRUWIfLn
LBMn9wfqugVoEvR9PIRas5u8RDRn9MU0DWwc7qq8zwQKXQJC2XfMqopxFiQGa3Vh
0w3f9yOYeYFllQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:40 2025 by rpki-client