Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: 3XBcNHzqg3FQ0BCy+JuvhUuUnQn0+1hzZzF8rT4BeTg=
Subject key identifier: 0A:F1:B3:40:28:74:8B:0D:21:71:E3:E4:5A:3F:A6:C6:FE:16:53:59
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 0199FB7CA698B5FDA60582FB129F205B1BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: 5fWczvyCeRLDhT+QgpqLgnXear5muTpfAG338v2cjAA=)
2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a6:98:b5:fd:a6:05:82:fb:12:9f:20:5b:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=0af1b34028748b0d2171e3e45a3fa6c6fe165359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:3c:03:92:18:0b:bd:b5:45:24:8c:1f:f6:
20:51:01:4d:4e:b6:b5:6b:4a:9e:5b:5a:7d:bd:a3:
28:c5:77:00:9d:80:e4:84:bb:eb:75:75:8b:b3:95:
08:76:58:4c:72:fa:61:3d:d5:2d:46:73:5c:d0:7d:
22:09:d2:d8:3e:ef:32:22:ee:6d:de:13:52:11:d1:
30:25:c2:90:de:55:d3:94:46:79:70:7b:7b:91:48:
9d:10:76:c2:b0:96:2c:d0:8a:d9:e8:ee:e2:2a:ca:
7d:1a:b8:0b:06:1a:c2:ad:db:ab:e7:b3:9a:22:4d:
a0:ff:c5:a1:df:b5:ca:3e:b6:4e:3a:ac:b2:9e:4a:
cb:a4:f3:e0:98:ac:52:ff:69:39:11:b3:9f:05:ac:
08:e5:ae:d8:04:0a:18:90:72:a4:c9:14:f4:54:28:
f9:46:c8:7f:47:c3:30:10:18:5e:dd:02:de:e9:93:
69:ad:37:f4:41:1d:aa:d1:47:37:7b:17:bb:a6:6b:
50:0f:af:54:0b:ee:70:d7:a4:39:1f:5e:5e:1c:23:
6f:03:92:92:39:2c:30:11:58:62:f7:86:c6:c0:1c:
46:ab:15:7e:47:98:70:73:4a:81:c8:4e:ef:ab:eb:
70:64:7b:a1:ce:ec:5a:53:7e:09:11:f8:a3:f3:ed:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:B3:40:28:74:8B:0D:21:71:E3:E4:5A:3F:A6:C6:FE:16:53:59
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:18:05:11:c1:73:9b:f2:a3:11:83:82:b4:de:9a:39:8b:
5f:b8:81:e5:39:75:3a:91:08:b3:00:d0:cc:12:25:8a:61:aa:
32:d7:97:a4:06:db:39:54:e8:9e:d4:ef:6b:ab:33:a7:04:97:
dc:2b:0c:54:5a:92:f8:69:bf:53:63:96:83:ec:17:0d:71:89:
69:cd:b5:5d:0e:6e:1e:bc:9e:4b:23:b9:4e:cd:a5:cd:ab:62:
b8:89:11:76:b3:34:e3:de:f5:46:aa:ef:02:ca:1e:81:87:c2:
4c:bf:d3:7b:7f:0b:18:58:de:50:9f:7e:18:25:62:d1:bc:a4:
c5:83:b8:d3:c1:fc:06:fd:27:dd:52:0e:d6:b8:bc:21:72:da:
95:61:94:61:cb:0f:74:e4:80:0b:e4:e7:ec:bb:71:13:9b:b6:
3b:88:28:b0:ea:a4:3e:c1:0b:04:4a:9d:d4:5b:52:a0:a4:fa:
2f:d7:3f:7f:b3:5a:ae:43:57:dc:a2:af:5f:e0:fc:0b:dc:0c:
70:09:79:e1:60:37:17:3e:4b:6b:e1:1b:0a:9e:39:77:9b:bb:
d5:0a:d0:78:ad:10:53:b7:60:f5:a6:ba:42:a7:42:ee:20:4a:
e6:44:52:7e:03:a0:91:f2:ff:f0:85:4f:81:97:02:64:e2:41:
f6:65:52:92
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7fKaYtf2mBYL7Ep8gWxvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQxMTBkMzllOTViNTQyZGY4ZDIwNzFkOTI0NTQ2OWEx
YjlmNDIwHhcNMjUxMDE5MDgwMTE0WhcNMjUxMDIwMDgwMTE0WjAzMTEwLwYDVQQD
EygwYWYxYjM0MDI4NzQ4YjBkMjE3MWUzZTQ1YTNmYTZjNmZlMTY1MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh48A5IYC721RSSMH/YgUQFNTra1
a0qeW1p9vaMoxXcAnYDkhLvrdXWLs5UIdlhMcvphPdUtRnNc0H0iCdLYPu8yIu5t
3hNSEdEwJcKQ3lXTlEZ5cHt7kUidEHbCsJYs0IrZ6O7iKsp9GrgLBhrCrdur57Oa
Ik2g/8Wh37XKPrZOOqyynkrLpPPgmKxS/2k5EbOfBawI5a7YBAoYkHKkyRT0VCj5
Rsh/R8MwEBhe3QLe6ZNprTf0QR2q0Uc3exe7pmtQD69UC+5w16Q5H15eHCNvA5KS
OSwwEVhi94bGwBxGqxV+R5hwc0qByE7vq+twZHuhzuxaU34JEfij8+0SzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFArxs0AodIsNIXHj5Fo/psb+FlNZMB8GA1UdIwQY
MBaAFPitEQ056VtULfjSBx2SRUaaG59CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMFJEVG5wVzFRdC1OSUhIWkpGUnBvYm4wSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNjBlNjNjLWU2M2ItNGUxNi1hNWVi
LTc5YTViMzk3OGZmMi8xLzEtSzBSRFRucFcxUXQtTklISFpKRlJwb2JuMEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzYwZTYzYy1lNjNiLTRlMTYtYTVlYi03OWE1YjM5Nzhm
ZjIvMS8xLUswUkRUbnBXMVF0LU5JSEhaSkZScG9ibjBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+gY
BRHBc5vyoxGDgrTemjmLX7iB5Tl1OpEIswDQzBIlimGqMteXpAbbOVTontTva6sz
pwSX3CsMVFqS+Gm/U2OWg+wXDXGJac21XQ5uHryeSyO5Ts2lzatiuIkRdrM04971
RqrvAsoegYfCTL/Te38LGFjeUJ9+GCVi0bykxYO408H8Bv0n3VIO1ri8IXLalWGU
YcsPdOSAC+Tn7LtxE5u2O4gosOqkPsELBEqd1FtSoKT6L9c/f7NarkNX3KKvX+D8
C9wMcAl54WA3Fz5La+EbCp45d5u71QrQeK0QU7dg9aa6QqdC7iBK5kRSfgOgkfL/
8IVPgZcCZOJB9mVSkg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:10 2025 by rpki-client