Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: YNpXOQvK2WZPp0uKErqDBw8Opb6fT1s0pdQJwDLIcYQ=
Subject key identifier: CB:B9:D8:3C:E2:C8:D0:C8:A9:DB:14:0C:8F:80:64:CC:CA:38:F3:01
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 0199FCC615617C263FFBFFF9A1DA4B083EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0E1B
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: 2ubFC3mVJXkHsZCqCPdcfC9XPGF85zikY1MgriUfW+0=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:15:61:7c:26:3f:fb:ff:f9:a1:da:4b:08:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=cbb9d83ce2c8d0c8a9db140c8f8064ccca38f301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:8a:b4:12:7a:f1:a1:06:ac:c5:98:27:5b:
27:6a:56:ba:45:66:25:f9:c2:5d:c5:d5:38:35:d3:
f1:7a:80:c0:63:ab:76:e0:a5:7c:f3:97:48:39:94:
b6:f3:ec:0a:0a:3c:9d:7c:e8:66:52:46:b9:01:93:
d5:1a:19:f0:cb:39:ef:10:0b:9f:d2:ee:f8:1e:9b:
07:a8:db:ad:89:57:3c:e0:fe:23:f5:a0:bb:03:42:
25:07:99:0e:72:50:7a:d4:c1:c4:2d:6a:2c:98:96:
c9:8e:bb:d8:b5:a4:e1:43:a9:14:1e:38:dc:81:8e:
7e:6d:78:6c:34:3b:90:8e:78:8a:ff:6d:b9:c7:28:
62:ea:bd:cf:2a:aa:06:25:a0:80:63:dc:3a:e1:ff:
e0:d1:7f:95:90:8c:1b:00:34:fa:f0:97:03:09:b2:
ef:c7:38:b7:c2:3d:76:70:8c:64:35:fe:f9:47:16:
0e:59:82:c2:6f:30:8d:ed:34:17:a4:6e:15:6c:6a:
ff:10:91:f7:71:c2:eb:f6:71:bb:d3:ef:32:0b:a0:
c9:4f:a9:32:95:e2:24:b5:48:83:d3:5f:ed:f3:9d:
46:3b:a8:af:bb:0d:fa:46:47:60:04:64:5e:06:41:
bb:d6:3e:18:a6:15:70:5f:82:9a:4f:81:c2:94:24:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:D8:3C:E2:C8:D0:C8:A9:DB:14:0C:8F:80:64:CC:CA:38:F3:01
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:0a:99:db:8b:fe:e6:0b:4d:0b:a8:07:30:b6:0b:bb:a6:
c0:11:07:c9:13:67:ed:63:93:a3:b0:73:b4:18:62:96:9d:17:
f4:9c:5a:41:9c:6d:3e:a6:2b:bb:22:cd:87:f4:60:48:bb:32:
4f:b3:e5:dc:6e:37:30:79:7f:44:e8:d6:bb:53:65:85:b2:ba:
28:02:3f:75:b4:56:55:5f:d2:b2:59:b3:fd:81:a4:13:88:07:
1b:7b:80:d2:4a:63:ca:41:47:5f:c2:b1:cb:ee:ed:16:94:f0:
44:70:4d:87:37:8e:9f:d4:34:46:f5:7b:76:f2:70:44:d3:f4:
00:d1:6b:01:a4:c1:d6:4a:2b:f3:9a:80:bb:4c:0c:bb:22:dc:
3b:17:8a:b8:45:a8:dd:6d:cf:39:05:30:1c:da:83:58:40:76:
44:66:66:6f:71:b8:1b:e3:2c:88:84:2b:b8:48:e0:2d:b2:f6:
ad:ac:8e:b7:21:5b:2c:72:2b:85:de:e2:29:9c:14:fa:ef:11:
1d:98:49:b2:66:34:94:da:17:b7:89:e3:8b:18:19:e4:01:86:
66:0f:c5:5a:68:6e:b2:e9:78:80:ee:b0:9e:30:ec:5f:3f:ec:
ab:c5:ce:32:27:23:79:04:f4:46:c8:1a:b0:20:6f:04:99:77:
75:c4:43:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhVhfCY/+//5odpLCD7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk
ZjEzOTcwHhcNMjUxMDE5MTQwMTAzWhcNMjUxMDIwMTQwMTAzWjAzMTEwLwYDVQQD
EyhjYmI5ZDgzY2UyYzhkMGM4YTlkYjE0MGM4ZjgwNjRjY2NhMzhmMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2eKtBJ68aEGrMWYJ1snala6RWYl
+cJdxdU4NdPxeoDAY6t24KV885dIOZS28+wKCjydfOhmUka5AZPVGhnwyznvEAuf
0u74HpsHqNutiVc84P4j9aC7A0IlB5kOclB61MHELWosmJbJjrvYtaThQ6kUHjjc
gY5+bXhsNDuQjniK/225xyhi6r3PKqoGJaCAY9w64f/g0X+VkIwbADT68JcDCbLv
xzi3wj12cIxkNf75RxYOWYLCbzCN7TQXpG4VbGr/EJH3ccLr9nG70+8yC6DJT6ky
leIktUiD01/t851GO6ivuw36RkdgBGReBkG71j4YphVwX4KaT4HClCTHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu52DziyNDIqdsUDI+AZMzKOPMBMB8GA1UdIwQY
MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt
ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk
LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV4KmduL
/uYLTQuoBzC2C7umwBEHyRNn7WOTo7BztBhilp0X9JxaQZxtPqYruyLNh/RgSLsy
T7Pl3G43MHl/ROjWu1NlhbK6KAI/dbRWVV/Sslmz/YGkE4gHG3uA0kpjykFHX8Kx
y+7tFpTwRHBNhzeOn9Q0RvV7dvJwRNP0ANFrAaTB1kor85qAu0wMuyLcOxeKuEWo
3W3POQUwHNqDWEB2RGZmb3G4G+MsiIQruEjgLbL2rayOtyFbLHIrhd7iKZwU+u8R
HZhJsmY0lNoXt4njixgZ5AGGZg/FWmhusul4gO6wnjDsXz/sq8XOMicjeQT0Rsga
sCBvBJl3dcRDgw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:40 2025 by rpki-client