Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: SuLj37p/cdNnD8CqOaht6o5k7+E3JN/8GG48PgFK5Rk=
Subject key identifier: 2F:86:23:EA:78:A3:A6:DF:16:38:5B:BB:CA:76:E9:C9:6A:73:B7:AA
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0199FC58CE5203B5F24AE4C0A866723D9E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 052A
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: yeLViF/B01rT/a8JTNJ3OtLOVILZcYOfQzZqzBqETqY=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ce:52:03:b5:f2:4a:e4:c0:a8:66:72:3d:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=2f8623ea78a3a6df16385bbbca76e9c96a73b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:00:81:71:27:05:d7:c4:25:cb:c1:03:bc:
66:fd:7b:23:2f:f4:38:5d:d3:d3:6c:28:30:af:b1:
9e:5d:ed:03:42:4e:f2:48:d0:f9:9c:b9:1b:b2:59:
78:33:5f:67:05:f5:27:8a:15:84:c2:cc:ac:6a:16:
cc:14:96:97:bc:26:50:1a:67:f0:6f:0d:fb:f8:d0:
e9:ab:2a:f3:98:94:b8:cb:cb:80:fd:d0:41:9a:b8:
bf:70:43:eb:ad:f0:4e:45:c7:45:89:9a:37:82:53:
3c:16:3c:b3:6a:e0:89:3e:5a:28:70:07:a8:b2:fd:
4a:ef:97:d8:27:bb:30:c3:8a:5c:73:2c:c3:9f:e2:
88:66:f5:14:44:ab:f6:61:bf:02:09:b9:ce:eb:d5:
15:9f:0c:12:fc:39:84:c2:ab:92:93:80:b6:83:4c:
d8:35:e9:ad:95:7d:c2:c5:06:27:02:2e:21:d8:ef:
d7:64:21:83:99:d1:64:7e:79:12:b9:23:39:5a:da:
3f:70:8b:57:91:fd:da:cc:24:69:a5:05:9d:a6:3e:
29:d0:dd:ef:9d:75:36:51:55:8b:7c:ab:27:33:91:
d8:0f:b9:4e:e2:c8:17:79:05:40:6a:6f:ee:08:ea:
0f:6a:2f:08:74:aa:4a:62:19:45:4d:cd:7a:0a:79:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:23:EA:78:A3:A6:DF:16:38:5B:BB:CA:76:E9:C9:6A:73:B7:AA
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fd:dc:1a:9d:bd:57:35:75:97:dd:92:3b:68:1a:e0:80:2a:
2e:f7:dc:73:df:33:95:b7:ee:be:42:39:a7:64:7c:4a:97:63:
ac:35:50:db:1d:48:d1:7c:3e:38:60:92:9d:cf:40:07:e5:6e:
91:e1:c2:51:e2:34:dd:f0:27:d7:a3:fe:36:76:1e:2e:f3:88:
fb:93:4e:a5:a9:90:41:b5:1e:32:20:48:86:b6:81:e1:dd:ec:
35:ea:12:38:9e:07:0e:d2:31:87:17:58:93:89:87:1c:22:9a:
8b:02:a1:f0:41:04:e9:70:0b:9f:6b:e2:cb:1c:b4:eb:2a:b6:
9d:64:89:94:4b:52:eb:33:94:ec:75:4c:e2:27:67:6c:2a:0c:
33:3f:50:65:ab:d0:fc:83:8a:91:05:bd:c7:cf:e8:6a:c0:ce:
08:fe:cf:d5:15:38:79:6b:72:2c:59:19:9f:68:c4:dc:b9:a1:
dc:e6:1c:21:a3:98:c0:bc:83:6a:33:24:ac:77:22:98:14:25:
60:c5:4f:d5:13:ea:c0:2a:8f:09:8e:19:bf:62:f6:b1:a0:ba:
36:17:c0:23:b0:85:b3:54:d3:e8:ee:34:b4:96:76:b8:82:cb:
cf:45:bd:f2:93:1b:5b:ab:e5:47:1c:0b:89:69:61:f6:42:d8:
0d:fb:37:e9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WM5SA7XySuTAqGZyPZ4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy
MzFmZjIwHhcNMjUxMDE5MTIwMTQyWhcNMjUxMDIwMTIwMTQyWjAzMTEwLwYDVQQD
EygyZjg2MjNlYTc4YTNhNmRmMTYzODViYmJjYTc2ZTljOTZhNzNiN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtacAgXEnBdfEJcvBA7xm/XsjL/Q4
XdPTbCgwr7GeXe0DQk7ySND5nLkbsll4M19nBfUnihWEwsysahbMFJaXvCZQGmfw
bw37+NDpqyrzmJS4y8uA/dBBmri/cEPrrfBORcdFiZo3glM8FjyzauCJPloocAeo
sv1K75fYJ7sww4pccyzDn+KIZvUURKv2Yb8CCbnO69UVnwwS/DmEwquSk4C2g0zY
NemtlX3CxQYnAi4h2O/XZCGDmdFkfnkSuSM5Wto/cItXkf3azCRppQWdpj4p0N3v
nXU2UVWLfKsnM5HYD7lO4sgXeQVAam/uCOoPai8IdKpKYhlFTc16Cnm/rwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC+GI+p4o6bfFjhbu8p26clqc7eqMB8GA1UdIwQY
MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4
LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1
NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/3c
Gp29VzV1l92SO2ga4IAqLvfcc98zlbfuvkI5p2R8SpdjrDVQ2x1I0Xw+OGCSnc9A
B+VukeHCUeI03fAn16P+NnYeLvOI+5NOpamQQbUeMiBIhraB4d3sNeoSOJ4HDtIx
hxdYk4mHHCKaiwKh8EEE6XALn2viyxy06yq2nWSJlEtS6zOU7HVM4idnbCoMMz9Q
ZavQ/IOKkQW9x8/oasDOCP7P1RU4eWtyLFkZn2jE3Lmh3OYcIaOYwLyDajMkrHci
mBQlYMVP1RPqwCqPCY4Zv2L2saC6NhfAI7CFs1TT6O40tJZ2uILLz0W98pMbW6vl
RxwLiWlh9kLYDfs36Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:30 2025 by rpki-client