Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: TktFN5WEFS1h0VtlbRY0TmBbjXqi0mJKOKjzS+teYsQ=
Subject key identifier: 1B:90:1A:13:4F:E1:70:93:EC:0D:46:56:C1:39:2D:AF:1B:77:61:1A
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0199FCFD65AE798161F3ACE3E2C71461B990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 14A1
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: V86UJA1O-8HYQT54CIctp1oCO8c.roa (hash: J5EsS3YJMQEhACG+1Y3yRobs5dYSCmigi0dhNvrKc7I=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: mFr2NKYYVJx/aMJlkKdWEhooVfJLPFA4OVTF81WdMXs=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:65:ae:79:81:61:f3:ac:e3:e2:c7:14:61:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=1b901a134fe17093ec0d4656c1392daf1b77611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:db:64:8b:e4:40:82:0a:97:5a:ea:2e:d5:
a9:03:19:1a:a9:4a:ff:1c:af:ee:ea:c8:60:5a:d9:
18:a4:c6:fc:14:94:ed:0c:06:73:b0:a6:5f:41:6b:
20:4c:32:a9:07:ad:6b:98:77:b0:41:23:43:18:2f:
bc:b8:94:a4:66:77:95:bf:e7:b2:b8:42:f3:e9:6e:
e0:5f:af:4f:a2:2f:43:10:be:28:d2:84:24:63:1c:
d9:65:07:64:f0:6e:14:60:f0:53:80:7c:ef:4b:8d:
22:fd:e6:96:84:d4:5b:65:ff:8a:eb:99:5f:b3:ff:
f6:bf:91:50:eb:6c:68:27:2a:86:43:5a:c0:c9:5c:
7e:de:98:cc:0d:e6:b3:a1:43:6d:00:1b:f7:17:f4:
98:f3:0e:d6:13:5c:ed:d8:22:29:d2:ae:d5:6d:4f:
68:54:77:15:fc:22:1c:ca:5e:d5:b1:e2:0f:6c:b8:
08:de:59:3c:40:83:9f:d0:3d:fd:0b:56:7b:dc:99:
1b:22:e1:59:5e:d7:f8:ee:9f:a1:49:6c:98:72:46:
6d:7a:c2:1f:21:be:22:70:74:8c:0e:13:ed:87:2c:
6e:65:0a:35:cb:81:78:4a:6d:07:2e:9a:8f:02:f6:
20:e4:41:d6:7b:43:71:f0:80:73:9b:66:87:bf:c2:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:1A:13:4F:E1:70:93:EC:0D:46:56:C1:39:2D:AF:1B:77:61:1A
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ea:7c:d9:a9:0a:52:41:d1:fd:c8:57:e8:4c:a9:3e:34:01:
48:23:e8:cd:d1:6e:c2:7a:bf:fb:38:4a:85:f7:81:ed:ab:76:
6c:93:e2:dc:6b:31:da:fc:03:cc:68:ed:bc:7a:40:ab:72:45:
52:6e:3c:5b:ed:04:69:64:71:32:bb:04:aa:62:97:7f:f6:9b:
25:6b:1a:16:23:2d:02:64:2f:7b:63:55:5c:5e:fc:fa:8b:f0:
93:1a:f7:53:d4:f8:6d:0b:cf:fd:35:4b:e7:43:fa:42:d1:55:
97:6f:55:1c:54:97:57:2e:5c:14:22:95:3b:76:c8:76:7e:1e:
4a:05:80:32:45:b3:b8:57:42:fb:11:a9:3b:2e:68:10:de:90:
d0:b6:07:06:c6:2b:c1:23:dc:d5:22:84:06:37:04:c5:a6:4d:
bf:a0:93:d9:67:43:51:5a:80:51:cc:3a:8c:ea:29:c7:90:15:
2c:3e:3b:9c:0e:a9:4c:0a:c4:d0:a1:d8:d7:ae:dd:fc:b0:a1:
b7:14:6d:07:7d:28:dd:10:7c:f8:85:b5:7c:87:8b:32:a6:91:
6d:ae:89:b8:10:78:11:0e:ec:ca:2b:03:7a:82:bc:75:75:c2:
15:68:d4:07:3e:07:2a:96:04:03:0d:73:46:5c:20:3b:de:65:
56:b4:cc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/WWueYFh86zj4scUYbmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjUxMDE5MTUwMTI5WhcNMjUxMDIwMTUwMTI5WjAzMTEwLwYDVQQD
EygxYjkwMWExMzRmZTE3MDkzZWMwZDQ2NTZjMTM5MmRhZjFiNzc2MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUfbZIvkQIIKl1rqLtWpAxkaqUr/
HK/u6shgWtkYpMb8FJTtDAZzsKZfQWsgTDKpB61rmHewQSNDGC+8uJSkZneVv+ey
uELz6W7gX69Poi9DEL4o0oQkYxzZZQdk8G4UYPBTgHzvS40i/eaWhNRbZf+K65lf
s//2v5FQ62xoJyqGQ1rAyVx+3pjMDeazoUNtABv3F/SY8w7WE1zt2CIp0q7VbU9o
VHcV/CIcyl7VseIPbLgI3lk8QIOf0D39C1Z73JkbIuFZXtf47p+hSWyYckZtesIf
Ib4icHSMDhPthyxuZQo1y4F4Sm0HLpqPAvYg5EHWe0Nx8IBzm2aHv8KdnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuQGhNP4XCT7A1GVsE5La8bd2EaMB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOp82akK
UkHR/chX6EypPjQBSCPozdFuwnq/+zhKhfeB7at2bJPi3Gsx2vwDzGjtvHpAq3JF
Um48W+0EaWRxMrsEqmKXf/abJWsaFiMtAmQve2NVXF78+ovwkxr3U9T4bQvP/TVL
50P6QtFVl29VHFSXVy5cFCKVO3bIdn4eSgWAMkWzuFdC+xGpOy5oEN6Q0LYHBsYr
wSPc1SKEBjcExaZNv6CT2WdDUVqAUcw6jOopx5AVLD47nA6pTArE0KHY167d/LCh
txRtB30o3RB8+IW1fIeLMqaRba6JuBB4EQ7syisDeoK8dXXCFWjUBz4HKpYEAw1z
RlwgO95lVrTM9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:33 2025 by rpki-client