Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: VeLZpZ3rcpL+/WLdukOKPQ3VCcZ3uwGXZLhsUgMWidg=
Subject key identifier: 4E:9E:9C:16:09:6A:DC:E4:2F:41:CA:B3:88:9C:A9:AA:7E:26:42:DA
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 0199FB0F578747BD64010D634CB3577F10A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:50 +0000
Manifest this update: Sun 19 Oct 2025 06:01:50 +0000
Manifest next update: Mon 20 Oct 2025 06:01:50 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: rMrS+58xc1xZV6bxkxUUdoRH5Cog0bF8AgWn8kQ+Ag8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:57:87:47:bd:64:01:0d:63:4c:b3:57:7f:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Oct 19 06:01:50 2025 GMT
Not After : Oct 20 06:01:50 2025 GMT
Subject: CN=4e9e9c16096adce42f41cab3889ca9aa7e2642da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:0e:11:ec:b4:9b:a0:66:a4:90:8b:05:5d:
18:38:2a:91:f0:9f:77:3c:73:e1:bf:87:de:3a:c2:
fa:2b:09:80:e4:dd:ed:6c:1a:b5:0e:24:56:77:7d:
4d:cd:07:39:3b:b9:95:03:cc:9e:91:2d:23:87:e3:
72:b7:98:6d:06:c4:f0:71:5f:08:43:60:2a:31:76:
2f:49:7a:58:b7:51:ee:e5:38:9f:7d:e4:ed:9a:ed:
3a:ff:63:d3:57:ab:3a:e3:75:73:bd:c4:0c:cc:f7:
02:1b:f6:82:6e:b3:82:28:9b:1e:53:a0:6a:45:67:
ed:40:43:aa:d2:38:4c:52:18:8b:83:1f:2e:2f:d2:
7f:78:d3:2e:82:51:e2:68:8c:ad:53:d2:3f:0e:6c:
53:d9:45:82:87:ec:8a:e1:dc:9d:6d:6f:3e:74:fd:
bf:7d:d3:0c:39:9d:40:bf:34:2e:5c:2f:5f:b9:fe:
0f:5c:62:ac:48:b7:d5:3d:cf:42:fa:7f:6b:2d:08:
aa:cf:1a:26:33:ce:f6:53:ad:44:e2:bc:aa:4b:46:
d0:b1:47:a9:63:b7:0b:a4:9d:56:31:61:f2:fb:88:
4b:5f:48:94:50:06:34:62:8a:30:56:63:55:ea:2d:
dc:38:31:5b:a3:f2:32:ce:f3:32:b5:6c:d9:c8:18:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:9C:16:09:6A:DC:E4:2F:41:CA:B3:88:9C:A9:AA:7E:26:42:DA
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f1:af:11:27:b9:c8:41:94:54:3a:a2:7d:49:0f:dc:bc:28:
a5:1b:5b:b7:25:84:9e:46:0e:18:72:81:b9:75:3a:85:c7:8c:
df:d1:9d:90:3e:ca:e1:36:89:09:80:e9:2d:7e:54:eb:c9:ab:
51:06:bb:eb:8c:92:8c:73:89:e9:cc:37:93:5c:b1:8a:0a:1e:
97:2d:02:c2:fd:c2:29:b7:37:75:84:75:f6:1c:1a:97:b8:28:
16:8b:43:e0:37:e3:ca:ad:af:dc:e2:d6:f6:c0:eb:2f:e1:d4:
fb:4a:45:93:0f:af:b5:75:1c:bb:75:e1:f3:af:ad:9a:29:51:
ee:3b:ab:55:47:15:81:ef:1a:3b:1d:cb:38:8f:ca:dc:9b:95:
f1:59:71:97:a1:b1:f8:0f:5f:a6:59:3c:5a:87:29:d2:9b:6a:
8c:8c:30:20:21:aa:ef:c6:85:3c:d6:39:f3:4b:7a:27:17:20:
21:89:ba:fd:c7:7b:44:41:66:aa:47:39:94:41:51:bb:42:00:
70:4f:b5:1c:cd:84:35:ab:ed:02:f5:25:78:2f:b7:6d:47:65:
ac:8c:93:82:70:82:e7:f1:ac:6c:5f:8b:37:d7:e0:e3:43:34:
b8:20:90:0b:01:56:e5:92:62:44:0b:54:55:77:67:0f:23:87:
74:12:c2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D1eHR71kAQ1jTLNXfxCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjUxMDE5MDYwMTUwWhcNMjUxMDIwMDYwMTUwWjAzMTEwLwYDVQQD
Eyg0ZTllOWMxNjA5NmFkY2U0MmY0MWNhYjM4ODljYTlhYTdlMjY0MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8OEey0m6BmpJCLBV0YOCqR8J93
PHPhv4feOsL6KwmA5N3tbBq1DiRWd31NzQc5O7mVA8yekS0jh+Nyt5htBsTwcV8I
Q2AqMXYvSXpYt1Hu5TiffeTtmu06/2PTV6s643VzvcQMzPcCG/aCbrOCKJseU6Bq
RWftQEOq0jhMUhiLgx8uL9J/eNMuglHiaIytU9I/DmxT2UWCh+yK4dydbW8+dP2/
fdMMOZ1AvzQuXC9fuf4PXGKsSLfVPc9C+n9rLQiqzxomM872U61E4ryqS0bQsUep
Y7cLpJ1WMWHy+4hLX0iUUAY0YoowVmNV6i3cODFbo/IyzvMytWzZyBhCEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6enBYJatzkL0HKs4icqap+JkLaMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvGvESe5
yEGUVDqifUkP3LwopRtbtyWEnkYOGHKBuXU6hceM39GdkD7K4TaJCYDpLX5U68mr
UQa764ySjHOJ6cw3k1yxigoely0Cwv3CKbc3dYR19hwal7goFotD4Dfjyq2v3OLW
9sDrL+HU+0pFkw+vtXUcu3Xh86+tmilR7jurVUcVge8aOx3LOI/K3JuV8Vlxl6Gx
+A9fplk8Wocp0ptqjIwwICGq78aFPNY580t6JxcgIYm6/cd7REFmqkc5lEFRu0IA
cE+1HM2ENavtAvUleC+3bUdlrIyTgnCC5/GsbF+LN9fg40M0uCCQCwFW5ZJiRAtU
VXdnDyOHdBLCbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:55 2025 by rpki-client