Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: okN87PCR/+9tkcxHi7EtVIb7WXkqDNEfvkvcl2q2Xno=
Subject key identifier: D1:F2:55:E6:2B:51:17:B8:EB:20:AF:26:4F:D7:BD:56:D0:22:41:0D
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0199FE102E67D0897792D5BAAC20FC0C0F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0748
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: 6azTGwnQoWEliFGGKVS6EAlJQ7YySD0l8C77CwAHQNc=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2e:67:d0:89:77:92:d5:ba:ac:20:fc:0c:0f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=d1f255e62b5117b8eb20af264fd7bd56d022410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:34:6f:38:ff:a3:d7:dd:7a:46:57:e2:23:
0f:17:fc:77:3f:4b:0b:16:79:e4:b2:53:8b:ec:a7:
94:e1:89:1f:ca:7b:0c:83:2a:f5:5a:39:2f:6c:07:
25:3a:8a:b5:69:7b:ae:42:1e:82:a0:6e:14:81:0b:
57:f0:23:66:de:cf:b9:59:a1:b1:17:78:83:27:a3:
81:87:26:ac:8c:ed:ae:4b:02:96:b4:00:19:93:a0:
09:2c:bf:88:90:97:a8:80:22:93:77:78:57:cc:d0:
7e:0f:27:8d:5f:75:74:88:e5:26:2a:13:4d:51:b8:
1e:59:8a:27:cc:0e:b7:b3:94:7b:93:73:f2:38:46:
d2:89:64:26:19:11:69:36:b6:4f:3a:3d:a7:44:88:
67:62:2d:c9:06:3e:2c:69:9a:e2:08:82:77:27:0d:
ee:bc:b9:53:6e:6e:33:28:a9:19:85:d2:42:68:36:
d5:7d:a9:d4:16:04:1e:ce:67:b7:6e:ef:5b:b1:8a:
76:06:02:82:59:b8:3b:94:d5:1a:83:52:c9:f2:96:
b7:60:4b:9e:47:1c:62:47:e6:bf:e4:06:9e:f9:25:
c7:20:c3:2c:87:49:16:26:c7:43:2a:b2:1f:ab:35:
2f:08:38:b6:24:55:15:26:53:26:ee:3c:91:2e:91:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:55:E6:2B:51:17:B8:EB:20:AF:26:4F:D7:BD:56:D0:22:41:0D
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:96:69:a5:f7:29:5c:3f:00:d2:e7:21:4c:51:63:67:57:
a1:cf:87:f0:3f:91:44:e8:85:27:19:fd:ee:e6:63:39:71:36:
38:39:66:76:65:29:17:e5:14:ea:08:05:b5:24:48:18:35:11:
6c:b1:cc:a9:19:4f:a6:20:90:71:9c:22:c7:17:de:73:cf:fa:
b4:0a:6b:32:8b:cd:73:79:83:e3:ff:7d:5d:7d:27:35:2a:79:
27:b1:09:8c:e5:34:f6:16:2f:76:db:59:39:d8:ec:fd:31:b0:
ac:59:04:24:4b:da:e0:44:3a:e5:1f:c9:4f:8c:5e:c5:1d:bc:
c5:32:ed:19:85:fb:47:18:4f:4c:c1:e5:e5:52:92:1d:a4:b2:
d1:16:68:32:db:26:3b:2f:7e:90:16:eb:e0:20:d2:dc:8c:0a:
ab:cf:d1:65:28:ba:6a:e9:ae:e2:09:fb:dc:5f:af:54:b6:4c:
0d:57:17:a6:c6:08:6b:5f:68:35:19:6a:19:e0:dc:4e:ab:da:
d6:80:72:12:cf:fc:d1:0e:af:b1:c5:ad:d1:b2:96:89:92:a3:
5a:2a:3a:95:ef:6d:1a:64:f5:13:50:22:bf:6c:bc:10:47:df:
56:af:b3:c7:d8:8d:11:83:73:a8:c7:79:bc:eb:6e:a4:b5:0f:
b8:79:2f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EC5n0Il3ktW6rCD8DA9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjUxMDE5MjAwMTM3WhcNMjUxMDIwMjAwMTM3WjAzMTEwLwYDVQQD
EyhkMWYyNTVlNjJiNTExN2I4ZWIyMGFmMjY0ZmQ3YmQ1NmQwMjI0MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmww0bzj/o9fdekZX4iMPF/x3P0sL
FnnkslOL7KeU4YkfynsMgyr1WjkvbAclOoq1aXuuQh6CoG4UgQtX8CNm3s+5WaGx
F3iDJ6OBhyasjO2uSwKWtAAZk6AJLL+IkJeogCKTd3hXzNB+DyeNX3V0iOUmKhNN
UbgeWYonzA63s5R7k3PyOEbSiWQmGRFpNrZPOj2nRIhnYi3JBj4saZriCIJ3Jw3u
vLlTbm4zKKkZhdJCaDbVfanUFgQezme3bu9bsYp2BgKCWbg7lNUag1LJ8pa3YEue
RxxiR+a/5Aae+SXHIMMsh0kWJsdDKrIfqzUvCDi2JFUVJlMm7jyRLpHUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHyVeYrURe46yCvJk/XvVbQIkENMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKeWaaX3
KVw/ANLnIUxRY2dXoc+H8D+RROiFJxn97uZjOXE2ODlmdmUpF+UU6ggFtSRIGDUR
bLHMqRlPpiCQcZwixxfec8/6tAprMovNc3mD4/99XX0nNSp5J7EJjOU09hYvdttZ
Odjs/TGwrFkEJEva4EQ65R/JT4xexR28xTLtGYX7RxhPTMHl5VKSHaSy0RZoMtsm
Oy9+kBbr4CDS3IwKq8/RZSi6aumu4gn73F+vVLZMDVcXpsYIa19oNRlqGeDcTqva
1oByEs/80Q6vscWt0bKWiZKjWio6le9tGmT1E1Aiv2y8EEffVq+zx9iNEYNzqMd5
vOtupLUPuHkvvw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:47 2025 by rpki-client