Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: UkeGVTfIzd2SfdWHC15X85E65RbYCNMsR9e8Dz/CV6Q=
Subject key identifier: 2E:11:AB:78:8C:E0:47:76:1B:21:12:B2:43:03:1C:D0:57:C7:E2:D8
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0199FE46D3CE2B9287E8FC9185C310E31B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: K8BBBJ90TWNe7Df10m4TJxdfmN7BMpAxNTfRI09NfLk=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d3:ce:2b:92:87:e8:fc:91:85:c3:10:e3:1b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=2e11ab788ce047761b2112b243031cd057c7e2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:8e:a0:77:98:64:17:21:ca:8d:24:24:e8:
0c:3a:9e:b0:e1:3d:9f:8c:12:4b:f8:45:ac:a3:7d:
02:e3:bf:fe:75:6c:43:fa:57:4d:b5:5a:10:95:06:
f7:bd:5d:eb:ce:fc:dd:02:4a:d9:7c:4d:d6:e4:b4:
47:53:ce:ae:7c:a3:20:de:9f:06:5e:37:39:97:08:
04:31:c1:3c:99:12:8c:dc:4b:bb:d6:40:e5:be:77:
91:74:50:d6:1f:31:32:08:fb:40:3d:32:34:c5:95:
c4:dc:4a:df:10:80:50:7e:9b:81:a1:bf:e2:45:b4:
d1:ee:19:2c:d3:a0:a8:c7:30:d6:51:42:3f:32:68:
86:e4:61:9c:c2:16:37:f7:7d:0a:f2:12:02:3b:de:
05:e2:c8:2b:52:48:7b:a7:f3:e4:ad:82:2f:81:6f:
34:a6:38:19:89:24:96:1a:61:ae:45:cb:25:dd:19:
92:fd:3e:70:f8:d1:11:fd:b2:91:b1:23:a4:e2:40:
59:b4:1e:c4:c1:84:0b:bc:67:df:2b:40:26:b4:6e:
b2:e1:5d:ae:ef:d7:35:cf:f0:8d:55:8b:bb:10:3d:
dc:f1:c3:a0:08:bb:51:9e:91:7d:27:7e:9d:33:8c:
38:d7:31:66:0e:93:de:a8:a6:da:6d:33:79:78:ae:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:AB:78:8C:E0:47:76:1B:21:12:B2:43:03:1C:D0:57:C7:E2:D8
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6b:94:ed:22:91:3b:93:2f:19:40:ce:85:ed:72:07:19:36:
8c:92:f4:34:25:44:7e:b0:c7:35:5d:a4:c8:be:b8:89:fd:98:
8c:d5:23:64:88:c8:a6:b3:19:28:8c:56:28:ba:12:cf:72:cb:
53:fb:31:f0:7f:b5:9a:74:eb:16:80:40:69:b8:5e:17:69:90:
48:18:50:c6:51:41:df:25:c6:8f:47:9d:2e:6b:f4:21:78:ca:
d4:b2:1b:cc:3e:c4:b9:1a:72:de:cd:3b:7e:6e:ce:1c:d0:09:
8e:e4:09:fd:66:f0:3c:83:57:c7:8e:66:48:d1:9b:e3:17:ca:
6f:75:a2:d8:1f:fc:44:13:bf:ea:47:ac:af:10:81:93:f5:b3:
e3:a9:27:2f:a0:64:f2:6c:1a:e4:4b:de:f4:01:78:a6:ff:67:
1a:61:23:c6:bc:93:b3:e2:8b:81:fb:b2:1b:4f:66:68:d4:e2:
f1:33:77:ee:38:dc:f9:93:44:70:70:84:aa:55:e2:34:d8:0e:
d1:df:a5:e6:da:72:3c:12:d2:61:51:4f:39:da:d6:02:22:e3:
94:f0:ac:01:b6:63:da:40:92:3b:1f:ae:43:23:75:d1:49:56:
98:af:dd:b3:50:9d:c7:c7:33:08:b8:d5:d1:55:da:bb:a6:40:
a7:8d:e9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RtPOK5KH6PyRhcMQ4xt3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjUxMDE5MjEwMTE4WhcNMjUxMDIwMjEwMTE4WjAzMTEwLwYDVQQD
EygyZTExYWI3ODhjZTA0Nzc2MWIyMTEyYjI0MzAzMWNkMDU3YzdlMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2OoHeYZBchyo0kJOgMOp6w4T2f
jBJL+EWso30C47/+dWxD+ldNtVoQlQb3vV3rzvzdAkrZfE3W5LRHU86ufKMg3p8G
Xjc5lwgEMcE8mRKM3Eu71kDlvneRdFDWHzEyCPtAPTI0xZXE3ErfEIBQfpuBob/i
RbTR7hks06CoxzDWUUI/MmiG5GGcwhY3930K8hICO94F4sgrUkh7p/PkrYIvgW80
pjgZiSSWGmGuRcsl3RmS/T5w+NER/bKRsSOk4kBZtB7EwYQLvGffK0AmtG6y4V2u
79c1z/CNVYu7ED3c8cOgCLtRnpF9J36dM4w41zFmDpPeqKbabTN5eK5J9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Rq3iM4Ed2GyESskMDHNBXx+LYMB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWuU7SKR
O5MvGUDOhe1yBxk2jJL0NCVEfrDHNV2kyL64if2YjNUjZIjIprMZKIxWKLoSz3LL
U/sx8H+1mnTrFoBAabheF2mQSBhQxlFB3yXGj0edLmv0IXjK1LIbzD7EuRpy3s07
fm7OHNAJjuQJ/WbwPINXx45mSNGb4xfKb3Wi2B/8RBO/6kesrxCBk/Wz46knL6Bk
8mwa5Eve9AF4pv9nGmEjxryTs+KLgfuyG09maNTi8TN37jjc+ZNEcHCEqlXiNNgO
0d+l5tpyPBLSYVFPOdrWAiLjlPCsAbZj2kCSOx+uQyN10UlWmK/ds1Cdx8czCLjV
0VXau6ZAp43pmQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:17 2025 by rpki-client