Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: aoKswWExlFamF4WOF6It0cV7n/OHaeuZm/HcTNcVmX0=
Subject key identifier: 9A:09:15:D1:4E:4F:5C:0D:DE:BE:BA:45:1F:F7:72:17:51:1B:BC:59
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 0199FAA118F868AF32B55A445E21462F7BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0420
Signing time: Sun 19 Oct 2025 04:01:25 +0000
Manifest this update: Sun 19 Oct 2025 04:01:25 +0000
Manifest next update: Mon 20 Oct 2025 04:01:25 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: IM3BhyKlfLzCgwA0eBXlN2IYlm6BMb7fzS3oIB3ai/U=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:18:f8:68:af:32:b5:5a:44:5e:21:46:2f:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Oct 19 04:01:25 2025 GMT
Not After : Oct 20 04:01:25 2025 GMT
Subject: CN=9a0915d14e4f5c0ddebeba451ff77217511bbc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:7f:ad:e3:80:67:46:ec:5c:47:17:4a:ea:
c4:f5:76:25:86:50:ff:4c:1e:0a:ba:e2:e9:ba:a1:
d4:9f:34:5d:fa:48:f6:4e:15:c0:fe:9f:56:81:c9:
e4:16:d1:15:41:91:6e:fe:de:9c:97:16:9f:49:0a:
2b:b6:8a:44:33:30:56:0d:39:9f:59:81:f6:31:e3:
04:0e:c3:3e:b2:8e:35:b7:70:a8:58:db:32:46:37:
f8:d9:85:d1:be:c4:82:0f:97:97:86:f5:c7:e1:33:
e6:dd:35:c7:f1:80:75:03:c9:ef:d5:05:2c:9b:cb:
2c:b5:f3:38:eb:91:84:e3:07:1a:78:25:7b:a7:ba:
69:71:32:57:6e:fe:6e:7d:60:46:76:35:d4:fd:ae:
6b:d1:76:8e:c3:64:ce:5d:c9:72:d2:59:33:08:14:
84:68:90:1a:38:53:c4:a2:cb:0d:52:96:ba:de:c1:
a8:f8:14:11:1b:34:9f:55:c0:ad:cd:ab:5e:e8:27:
ab:b4:04:42:34:83:90:cf:5d:71:1a:62:f0:56:e1:
ed:bf:fa:a6:13:19:a6:cb:b0:5a:79:cb:c6:da:e5:
fc:96:1a:2f:1b:74:99:9d:49:2b:f4:79:5e:bd:9e:
b3:e4:96:ef:5a:5b:19:a5:3c:7b:90:6e:42:52:34:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:15:D1:4E:4F:5C:0D:DE:BE:BA:45:1F:F7:72:17:51:1B:BC:59
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:20:b4:1e:ac:ac:ae:42:ba:13:25:1b:93:02:43:1d:cb:c1:
0d:c2:bf:90:2a:89:d1:dc:34:d9:ca:98:51:63:1a:97:e8:67:
1a:45:56:fb:2d:5d:5c:75:95:84:d3:1c:26:9d:64:30:d5:dc:
27:7c:7e:7d:d2:51:ee:80:5c:a2:1c:e8:99:44:9e:60:96:26:
fe:61:0d:08:99:c7:1d:75:a3:9f:f5:99:1a:70:7c:5a:e3:f1:
66:ea:6d:3e:b8:d0:f3:5c:4f:63:b4:93:87:27:4e:1e:db:6e:
dd:b8:67:38:4e:4a:33:bf:ec:48:5a:01:47:ca:61:be:f7:f0:
0e:fb:77:f1:9a:80:5e:d4:1e:e0:ac:4c:05:6a:6a:cd:e1:75:
95:4c:dd:4d:d0:44:6e:db:ef:a2:8f:c3:17:1f:47:c0:1e:68:
00:dd:9c:61:92:27:6f:20:46:b4:63:0a:c2:6a:34:06:4e:23:
8e:44:f4:13:39:23:d9:8f:09:d8:93:29:67:94:cd:09:9d:c6:
49:ff:e3:38:35:b4:12:1a:26:1b:8e:b1:38:64:9e:6f:75:46:
1a:56:e1:a5:ea:ed:9d:59:de:7a:e9:cf:2a:dd:9c:28:ff:45:
fc:fd:08:36:0e:62:c9:8c:68:5a:25:2a:3b:04:37:41:a7:11:
b4:65:30:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oRj4aK8ytVpEXiFGL3vNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1
MTFmMjgwHhcNMjUxMDE5MDQwMTI1WhcNMjUxMDIwMDQwMTI1WjAzMTEwLwYDVQQD
Eyg5YTA5MTVkMTRlNGY1YzBkZGViZWJhNDUxZmY3NzIxNzUxMWJiYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4p/reOAZ0bsXEcXSurE9XYlhlD/
TB4KuuLpuqHUnzRd+kj2ThXA/p9WgcnkFtEVQZFu/t6clxafSQortopEMzBWDTmf
WYH2MeMEDsM+so41t3CoWNsyRjf42YXRvsSCD5eXhvXH4TPm3TXH8YB1A8nv1QUs
m8sstfM465GE4wcaeCV7p7ppcTJXbv5ufWBGdjXU/a5r0XaOw2TOXcly0lkzCBSE
aJAaOFPEossNUpa63sGo+BQRGzSfVcCtzate6CertARCNIOQz11xGmLwVuHtv/qm
Exmmy7BaecvG2uX8lhovG3SZnUkr9HlevZ6z5JbvWlsZpTx7kG5CUjRvSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoJFdFOT1wN3r66RR/3chdRG7xZMB8GA1UdIwQY
MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt
MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw
LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiC0Hqys
rkK6EyUbkwJDHcvBDcK/kCqJ0dw02cqYUWMal+hnGkVW+y1dXHWVhNMcJp1kMNXc
J3x+fdJR7oBcohzomUSeYJYm/mENCJnHHXWjn/WZGnB8WuPxZuptPrjQ81xPY7ST
hydOHttu3bhnOE5KM7/sSFoBR8phvvfwDvt38ZqAXtQe4KxMBWpqzeF1lUzdTdBE
btvvoo/DFx9HwB5oAN2cYZInbyBGtGMKwmo0Bk4jjkT0Ezkj2Y8J2JMpZ5TNCZ3G
Sf/jODW0EhomG46xOGSeb3VGGlbhpertnVneeunPKt2cKP9F/P0INg5iyYxoWiUq
OwQ3QacRtGUwnA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:10 2025 by rpki-client