Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: UTxnmkofv1HZMZv+ictxiVvc9Y4F2FVa6BbQflLFhgs=
Subject key identifier: 74:70:D7:D3:D2:7A:F2:59:29:42:F0:D0:15:30:FD:34:E8:D8:EC:BD
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 0199FD344E1663CF4182F87BDA3BF1D7B732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 0204
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: GYSRKYTnOqqZcuy7YyStesbEkOyoiUKAWxjunT/nXlU=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4e:16:63:cf:41:82:f8:7b:da:3b:f1:d7:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=7470d7d3d27af2592942f0d01530fd34e8d8ecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:6a:71:f9:c8:58:2c:86:7f:0a:5e:a5:3c:
58:36:db:9c:71:e7:4f:33:cc:b6:9d:19:68:65:6c:
cf:20:80:c5:f0:f5:b5:56:68:96:8e:a1:b8:86:03:
cf:08:00:6e:0d:9c:a3:14:d6:9f:03:d8:21:ae:f7:
52:da:6c:b3:ce:89:b8:b7:79:01:70:de:0a:ab:e1:
0d:28:21:e2:82:71:1c:94:07:f3:a7:15:54:2a:f7:
f6:4e:10:4e:c9:bf:65:f3:1f:51:b3:10:2e:c1:58:
b2:86:9d:b8:68:bf:3e:23:f1:95:7e:a7:6f:fc:c0:
ef:25:d1:08:31:29:42:a7:af:56:f1:7f:05:d5:b7:
75:cb:c7:01:6c:c7:6c:6d:c1:4c:43:91:6a:73:bc:
c4:56:dd:b7:75:6d:fd:bb:41:32:a6:41:3c:13:b7:
f8:ba:ba:6f:f8:0e:cd:08:a3:16:77:9f:ee:32:07:
b5:f6:aa:ca:ff:2a:b3:ca:86:31:80:77:dc:92:52:
67:c7:fc:5e:b8:4a:80:85:16:76:e6:fa:0b:af:75:
39:22:78:a5:93:c2:9b:92:c1:f3:7f:69:ec:f7:a2:
85:4e:de:b5:55:e0:54:a3:4c:00:ab:a6:68:cc:c6:
63:21:20:1b:7e:23:a4:d2:95:a5:42:69:c5:c5:45:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:D7:D3:D2:7A:F2:59:29:42:F0:D0:15:30:FD:34:E8:D8:EC:BD
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:df:1a:26:43:89:84:fb:41:6d:16:0a:b2:a3:db:be:24:f4:
54:a4:7d:07:c4:3f:99:60:2d:a3:f0:ee:df:90:15:23:0b:f9:
99:6b:38:6a:be:c0:41:0a:95:3c:e9:1d:f0:a0:70:1c:c3:81:
91:5f:fa:0d:6e:bd:5a:c9:f6:88:71:79:53:02:98:98:93:42:
f4:8b:e4:fc:b4:e3:50:e4:7b:4a:12:0c:35:a2:31:3a:26:27:
df:42:e0:73:1b:c6:29:d2:b2:ce:29:f0:51:1d:0d:b0:4c:53:
a5:2c:bb:3f:90:dd:91:10:f9:64:ad:42:68:8a:53:0d:70:96:
9f:73:32:77:ec:c0:7b:83:2f:82:6a:79:7d:1f:26:4b:77:e7:
77:72:f4:61:2b:07:6e:4c:02:95:e2:1c:dd:86:b9:1a:ef:2d:
56:b8:8e:d3:7d:4e:11:ca:78:6a:94:dc:ef:fb:14:db:7b:4e:
3e:1f:23:5d:78:41:2a:ad:2f:f3:63:d5:2d:5a:2b:8a:07:f3:
e5:c6:ac:5f:58:14:e2:ab:5f:bb:a6:65:cc:46:dd:17:13:d3:
1f:3e:67:0c:f3:20:5a:79:bd:6c:57:94:e1:19:f1:2b:d9:fd:
66:db:56:65:b1:f5:5c:df:56:8e:09:f4:87:9c:07:a5:58:f6:
29:a7:cd:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NE4WY89Bgvh72jvx17cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh
MThjZWUwHhcNMjUxMDE5MTYwMTI3WhcNMjUxMDIwMTYwMTI3WjAzMTEwLwYDVQQD
Eyg3NDcwZDdkM2QyN2FmMjU5Mjk0MmYwZDAxNTMwZmQzNGU4ZDhlY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy21qcfnIWCyGfwpepTxYNtuccedP
M8y2nRloZWzPIIDF8PW1VmiWjqG4hgPPCABuDZyjFNafA9ghrvdS2myzzom4t3kB
cN4Kq+ENKCHignEclAfzpxVUKvf2ThBOyb9l8x9RsxAuwViyhp24aL8+I/GVfqdv
/MDvJdEIMSlCp69W8X8F1bd1y8cBbMdsbcFMQ5Fqc7zEVt23dW39u0EypkE8E7f4
urpv+A7NCKMWd5/uMge19qrK/yqzyoYxgHfcklJnx/xeuEqAhRZ25voLr3U5Inil
k8KbksHzf2ns96KFTt61VeBUo0wAq6ZozMZjISAbfiOk0pWlQmnFxUUWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRw19PSevJZKULw0BUw/TTo2Oy9MB8GA1UdIwQY
MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt
YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy
LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN8aJkOJ
hPtBbRYKsqPbviT0VKR9B8Q/mWAto/Du35AVIwv5mWs4ar7AQQqVPOkd8KBwHMOB
kV/6DW69Wsn2iHF5UwKYmJNC9Ivk/LTjUOR7ShIMNaIxOiYn30LgcxvGKdKyzinw
UR0NsExTpSy7P5DdkRD5ZK1CaIpTDXCWn3Myd+zAe4Mvgmp5fR8mS3fnd3L0YSsH
bkwCleIc3Ya5Gu8tVriO031OEcp4apTc7/sU23tOPh8jXXhBKq0v82PVLVorigfz
5casX1gU4qtfu6ZlzEbdFxPTHz5nDPMgWnm9bFeU4RnxK9n9ZttWZbH1XN9Wjgn0
h5wHpVj2KafNoQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:17 2025 by rpki-client