Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: nQxTx7XTU0OLYqk/hlKhnc6m2haVWDQksN8DGnfM2S0=
Subject key identifier: 4A:37:69:9B:E8:D9:AD:54:E0:6A:B8:52:B0:22:8C:C4:61:85:39:51
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 0199FBB35E248FC4962977299F5900DCCEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 6E
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: 6MdGRSn8y7W5gsT2XmIwFEbUd/bxyrHXjmJw4uwY9wg=)
2: _uXBkuhUshA9qmVceLo2r4NfxjI.roa (hash: eLDt5MUCNFk11wBf0J4j69ReU2zTScT7dm7QbxFh55c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5e:24:8f:c4:96:29:77:29:9f:59:00:dc:ce:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=4a37699be8d9ad54e06ab852b0228cc461853951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:f6:46:32:5e:ef:26:2c:92:31:20:f9:f1:
fd:5e:a1:c3:f0:e0:7a:81:83:9e:4d:98:4e:d2:9d:
f3:1c:54:c3:9c:ae:7a:f1:a6:b2:c7:f7:2b:e9:89:
0d:ae:fc:1c:67:e1:4c:f1:fb:d0:c9:61:29:9f:2e:
4e:e7:83:91:36:7f:b0:b0:6e:93:ab:80:cf:e9:a5:
6d:7b:cc:c6:6d:5e:b8:54:c9:07:05:c5:4e:9b:e1:
29:29:5f:df:9f:14:e7:cc:ef:21:a7:fc:65:e7:20:
01:34:e8:41:94:f8:40:43:74:a1:f0:03:43:d7:b4:
dc:b4:3a:9b:20:b8:f5:a3:15:9e:b8:fe:d9:1e:7e:
dd:ff:0c:a6:56:c0:c7:cb:18:a6:ae:be:d1:c5:5c:
37:7f:16:54:48:70:75:9f:2c:b2:3e:28:c7:6f:a4:
f7:a6:cd:1b:de:30:41:3c:0d:c0:90:e6:1c:b2:32:
51:0e:66:78:80:5f:00:67:fb:b4:dd:ff:c3:39:00:
ab:8a:e6:c1:84:8a:f5:8f:3d:f4:ef:c1:34:6e:19:
aa:1c:b8:0b:22:9a:17:80:1f:6e:b9:66:15:8c:74:
8a:12:91:09:8a:8a:42:2c:56:ed:3c:71:d3:e9:62:
47:85:4a:ba:fc:20:17:93:86:ec:b3:5f:ee:41:14:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:69:9B:E8:D9:AD:54:E0:6A:B8:52:B0:22:8C:C4:61:85:39:51
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:3f:b4:59:ae:8f:95:1a:41:e5:1c:8c:bb:b2:c4:78:b5:
98:92:cd:22:1d:99:06:82:a1:dd:06:a8:b1:85:c4:a9:90:f6:
3c:a1:50:a2:c1:71:7f:f8:b9:81:29:01:33:f3:66:e5:5a:d4:
e5:de:d4:c2:b4:a1:ae:cb:f7:68:bc:70:8f:b0:c4:5d:bc:17:
1b:80:8a:f8:74:82:70:53:da:64:ed:7b:ec:28:9b:5f:0e:b3:
df:28:d8:e0:d9:28:b7:b2:f2:e1:ec:8a:51:e8:47:d3:bf:80:
c8:5c:9c:87:e2:e8:f6:71:bf:40:a2:bb:f3:43:7f:43:14:96:
75:6f:01:c1:95:4c:aa:c6:b6:fc:a1:17:1d:9d:92:8d:ea:89:
66:f8:ea:70:02:66:04:1f:dd:37:04:be:e0:cc:b1:05:8a:6f:
7c:e8:98:f0:97:1b:51:c7:95:82:e1:68:a6:0f:55:81:e3:cf:
2d:fa:bb:87:29:36:1f:5a:3c:12:5e:74:b7:41:9c:82:33:14:
2f:db:80:01:99:d8:8e:75:56:de:7a:14:8d:8e:fa:36:9d:c0:
f8:02:6b:ce:a3:53:98:c7:e9:25:b4:3a:35:6b:28:8d:9c:81:
8e:48:f1:c9:cc:dc:cc:59:f6:7c:60:48:6d:57:5a:ac:70:a4:
46:58:c0:dc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7s14kj8SWKXcpn1kA3M72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5
NTBlODIwHhcNMjUxMDE5MDkwMTAwWhcNMjUxMDIwMDkwMTAwWjAzMTEwLwYDVQQD
Eyg0YTM3Njk5YmU4ZDlhZDU0ZTA2YWI4NTJiMDIyOGNjNDYxODUzOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMH2RjJe7yYskjEg+fH9XqHD8OB6
gYOeTZhO0p3zHFTDnK568aayx/cr6YkNrvwcZ+FM8fvQyWEpny5O54ORNn+wsG6T
q4DP6aVte8zGbV64VMkHBcVOm+EpKV/fnxTnzO8hp/xl5yABNOhBlPhAQ3Sh8AND
17TctDqbILj1oxWeuP7ZHn7d/wymVsDHyximrr7RxVw3fxZUSHB1nyyyPijHb6T3
ps0b3jBBPA3AkOYcsjJRDmZ4gF8AZ/u03f/DOQCriubBhIr1jz3078E0bhmqHLgL
IpoXgB9uuWYVjHSKEpEJiopCLFbtPHHT6WJHhUq6/CAXk4bss1/uQRRFIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEo3aZvo2a1U4Gq4UrAijMRhhTlRMB8GA1UdIwQY
MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx
LTg3NDdkYWE1OTNmMi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNkLzIyZjBhOC1iNmYwLTQ0YjYtOWFhMS04NzQ3ZGFhNTkz
ZjIvMS8xLTM4WkdvMjc4ZkV4UjBsMU5ZOGtSTmFWRG9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvs/
tFmuj5UaQeUcjLuyxHi1mJLNIh2ZBoKh3QaosYXEqZD2PKFQosFxf/i5gSkBM/Nm
5VrU5d7UwrShrsv3aLxwj7DEXbwXG4CK+HSCcFPaZO177CibXw6z3yjY4Nkot7Ly
4eyKUehH07+AyFych+Lo9nG/QKK780N/QxSWdW8BwZVMqsa2/KEXHZ2SjeqJZvjq
cAJmBB/dNwS+4MyxBYpvfOiY8JcbUceVguFopg9VgePPLfq7hyk2H1o8El50t0Gc
gjMUL9uAAZnYjnVW3noUjY76Np3A+AJrzqNTmMfpJbQ6NWsojZyBjkjxyczczFn2
fGBIbVdarHCkRljA3A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:02 2025 by rpki-client