Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: eIBXer1Q+A34nydvJRgWZIgCjsPbsXTiEW7MJYBCI9c=
Subject key identifier: 0C:B7:8E:C4:33:5F:DE:A6:37:AD:6F:D0:EA:A4:A8:A4:05:BD:3C:DE
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 0199FD3421B464BEAF440A454B8C46DDB94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 076D
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: GHl61YIa1H113p88zI+s+4GDy/DdiqdXWgKVxZvToNg=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:b4:64:be:af:44:0a:45:4b:8c:46:dd:b9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=0cb78ec4335fdea637ad6fd0eaa4a8a405bd3cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:2a:e9:84:bb:34:24:6e:1c:dd:27:2f:a0:
92:b9:ed:46:87:65:ca:90:33:49:62:d4:64:0e:90:
5b:20:c8:f7:eb:0b:0f:7b:81:e6:bc:16:f2:7d:41:
2d:c2:b8:05:57:45:ef:4f:7f:d4:9b:a2:de:d8:dc:
97:04:9e:5a:49:9f:aa:2e:18:55:60:db:7f:a5:5e:
b4:24:3e:4e:b8:41:dc:14:1d:1a:75:ff:7d:4c:a0:
dc:ae:d2:30:e6:3d:02:e4:69:44:14:22:94:72:f5:
bc:71:84:37:63:34:f6:6e:ef:da:18:5f:98:6d:00:
09:ce:f0:d2:2d:7f:46:51:d2:86:87:b9:aa:8e:4b:
4e:dd:95:af:26:f6:cc:cd:bb:91:c7:d6:24:90:34:
67:e3:91:b5:4c:0b:8e:41:1b:de:39:2f:37:85:35:
96:7c:54:ed:bd:99:79:b7:e1:ec:27:b7:92:eb:b3:
15:c3:e1:54:58:1c:b9:a6:60:7d:73:dd:a4:8a:11:
ef:f9:9e:49:01:2a:5a:9e:31:01:22:13:3c:93:9a:
73:c3:c0:aa:dc:3e:89:05:b8:b3:9f:0e:60:35:60:
27:8a:7a:30:b1:7a:6d:f7:fa:fb:70:a8:62:8b:a0:
1d:76:6f:d9:91:40:4b:89:4e:56:02:23:ba:03:20:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:8E:C4:33:5F:DE:A6:37:AD:6F:D0:EA:A4:A8:A4:05:BD:3C:DE
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c0:77:b9:ef:ec:9c:ac:d3:8b:bc:85:0f:1e:cb:3f:6f:d8:
80:9e:4f:65:27:98:a0:0d:68:ec:69:33:79:57:42:e3:97:d7:
af:35:1f:0e:b6:c9:f6:89:17:cb:d2:1f:5d:2a:c6:4c:b2:06:
7e:a0:9e:98:84:5a:a6:95:13:a0:cc:6b:30:51:02:85:c9:0e:
8e:95:3d:a3:00:7a:bf:9a:02:10:53:0a:d5:90:4a:83:72:0e:
37:ac:83:d2:ce:7c:33:43:79:a3:a8:41:89:f9:66:69:d7:cf:
b4:b4:d1:8c:40:8b:45:19:8a:73:77:45:cb:68:b2:a7:f1:0c:
cb:33:e7:72:59:9e:91:5c:2b:f5:51:82:e8:a5:7a:a1:2d:dc:
aa:cf:e6:82:30:a5:37:3c:99:69:d4:7e:2d:e6:bd:dd:56:da:
28:b2:04:21:62:7e:ec:60:9c:d0:7c:0a:91:43:59:13:b3:b4:
15:70:24:ba:83:1d:8a:a2:a3:60:0c:22:d0:e1:4f:5d:71:a2:
83:e9:f1:f9:c6:13:4d:b6:da:66:80:d7:32:37:62:c0:14:89:
81:56:de:2d:4b:3f:eb:56:57:51:1b:01:d4:4b:9f:73:61:94:
93:42:7c:e7:30:4d:6f:c4:8f:fa:22:88:86:2b:c6:5b:02:d5:
b0:f7:24:83
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn9NCG0ZL6vRApFS4xG3blOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk
ZWNjMTEwHhcNMjUxMDE5MTYwMTE2WhcNMjUxMDIwMTYwMTE2WjAzMTEwLwYDVQQD
EygwY2I3OGVjNDMzNWZkZWE2MzdhZDZmZDBlYWE0YThhNDA1YmQzY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGcq6YS7NCRuHN0nL6CSue1Gh2XK
kDNJYtRkDpBbIMj36wsPe4HmvBbyfUEtwrgFV0XvT3/Um6Le2NyXBJ5aSZ+qLhhV
YNt/pV60JD5OuEHcFB0adf99TKDcrtIw5j0C5GlEFCKUcvW8cYQ3YzT2bu/aGF+Y
bQAJzvDSLX9GUdKGh7mqjktO3ZWvJvbMzbuRx9YkkDRn45G1TAuOQRveOS83hTWW
fFTtvZl5t+HsJ7eS67MVw+FUWBy5pmB9c92kihHv+Z5JASpanjEBIhM8k5pzw8Cq
3D6JBbiznw5gNWAninowsXpt9/r7cKhii6Addm/ZkUBLiU5WAiO6AyA/zQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAy3jsQzX96mN61v0OqkqKQFvTzeMB8GA1UdIwQY
MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy
LTUwZjNkMWFlOTQ0Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRiLzY0MzhjMC01NGU1LTRiMzMtOTUwMi01MGYzZDFhZTk0
NDIvMS8xLTlXMWNfc05KcG1TcDVxZWEwWE4xaURlekJFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcB3
ue/snKzTi7yFDx7LP2/YgJ5PZSeYoA1o7GkzeVdC45fXrzUfDrbJ9okXy9IfXSrG
TLIGfqCemIRappUToMxrMFEChckOjpU9owB6v5oCEFMK1ZBKg3ION6yD0s58M0N5
o6hBiflmadfPtLTRjECLRRmKc3dFy2iyp/EMyzPnclmekVwr9VGC6KV6oS3cqs/m
gjClNzyZadR+Lea93VbaKLIEIWJ+7GCc0HwKkUNZE7O0FXAkuoMdiqKjYAwi0OFP
XXGig+nx+cYTTbbaZoDXMjdiwBSJgVbeLUs/61ZXURsB1Eufc2GUk0J85zBNb8SP
+iKIhivGWwLVsPckgw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:32 2025 by rpki-client