Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: 4/CCJB+oVMd01vfCWkOJTLcSPtSRvgyttDE3mRTfaLs=
Subject key identifier: 71:9F:60:CA:01:6F:FC:AC:7F:E1:75:9E:1F:0F:85:DC:2A:DE:7C:F2
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0199FFC84F2245DD91E6B74B0DB26EAB2D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0B10
Signing time: Mon 20 Oct 2025 04:02:21 +0000
Manifest this update: Mon 20 Oct 2025 04:02:21 +0000
Manifest next update: Tue 21 Oct 2025 04:02:21 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: 0+Jo5bUKI/n5roxfUYGhyuqoP/pvfTF7zeU/9e2T1xM=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:4f:22:45:dd:91:e6:b7:4b:0d:b2:6e:ab:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Oct 20 04:02:21 2025 GMT
Not After : Oct 21 04:02:21 2025 GMT
Subject: CN=719f60ca016ffcac7fe1759e1f0f85dc2ade7cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:a6:a3:38:63:4a:2b:93:23:cb:ac:3b:4d:
c0:ea:df:01:2a:95:42:b6:0f:33:b8:6d:09:60:1a:
58:4a:82:6c:99:fe:27:ec:24:8f:28:74:f2:d3:df:
ca:b5:99:64:3a:29:e2:18:73:63:98:00:1c:ae:60:
53:3f:20:ab:51:ca:eb:ea:d1:f8:3c:fa:bb:f6:e6:
c7:1c:ab:30:b1:ff:4c:a6:c4:a2:c8:1e:16:e5:d7:
34:ea:e1:c3:59:8e:23:b3:2e:c5:b8:4f:a7:ed:29:
66:ea:43:e2:bf:06:16:1f:ea:2b:12:d4:55:1a:22:
c1:80:70:7f:e3:da:2e:a6:41:d7:88:20:d0:3b:4d:
4d:dd:59:45:0c:ed:42:07:f7:8b:5e:84:99:f0:09:
a1:5d:b0:f2:ab:7e:8e:9b:54:58:b9:b6:76:fe:c9:
4f:f9:b6:ee:c4:96:37:9a:87:ce:7f:8b:a6:af:99:
a1:a7:ad:2a:23:c6:f5:bf:5c:3d:82:e2:08:6a:1a:
4e:12:c2:cb:16:5f:c5:cf:ca:84:a7:67:42:7d:43:
e8:03:c8:30:b6:0f:69:3d:67:20:8d:11:11:34:7c:
28:96:6a:14:cc:f6:59:85:2c:3c:e7:3c:60:eb:0f:
47:c7:26:26:a4:71:47:e2:a4:f0:3a:db:5b:df:a3:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:60:CA:01:6F:FC:AC:7F:E1:75:9E:1F:0F:85:DC:2A:DE:7C:F2
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:cc:4b:8c:41:13:28:86:fc:ee:35:2f:07:8c:80:d2:d6:
03:90:13:74:26:4a:88:0a:90:20:04:a6:ab:65:28:05:21:2a:
10:9e:d1:82:b1:2f:47:da:60:2d:d9:92:11:2a:11:05:cb:ae:
db:b3:b4:b8:4f:ae:70:39:90:d3:e4:35:79:f9:ba:7f:56:57:
24:fb:9c:88:8a:a6:2c:b8:c1:43:1c:f4:db:0c:cc:0d:e0:39:
73:66:5b:0b:88:91:17:41:19:8c:96:8e:f5:ad:de:25:a4:45:
08:b8:fe:55:46:9d:4c:0f:32:bf:02:49:56:1b:cb:fe:10:21:
24:b4:e7:ce:71:91:5d:19:bd:7c:dd:64:d8:05:6c:4e:f8:4f:
97:6f:e7:09:90:b8:5c:70:01:6c:51:f8:f5:a4:6c:a2:4f:c5:
53:92:9e:b5:92:38:84:7b:1c:cd:4a:a7:a5:a0:20:76:93:04:
90:b3:40:2d:97:4e:da:61:8b:af:4c:11:16:c4:e0:d7:0f:89:
b0:52:8a:f5:a8:67:56:a0:89:61:fc:2b:48:1a:41:7a:1c:3f:
2d:2f:da:eb:4c:00:ad:ba:15:bd:e2:a8:56:de:7c:24:27:fd:
b4:0f:70:50:a1:be:8e:ef:26:50:3d:59:e4:c8:63:3e:d4:23:
8c:80:c7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yE8iRd2R5rdLDbJuqy0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWU0MGY0NTg5ZDZhMTFiMjRmN2JiY2MyOWFiOWY5YWU2
ODk3MTkwHhcNMjUxMDIwMDQwMjIxWhcNMjUxMDIxMDQwMjIxWjAzMTEwLwYDVQQD
Eyg3MTlmNjBjYTAxNmZmY2FjN2ZlMTc1OWUxZjBmODVkYzJhZGU3Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0OmozhjSiuTI8usO03A6t8BKpVC
tg8zuG0JYBpYSoJsmf4n7CSPKHTy09/KtZlkOiniGHNjmAAcrmBTPyCrUcrr6tH4
PPq79ubHHKswsf9MpsSiyB4W5dc06uHDWY4jsy7FuE+n7Slm6kPivwYWH+orEtRV
GiLBgHB/49oupkHXiCDQO01N3VlFDO1CB/eLXoSZ8AmhXbDyq36Om1RYubZ2/slP
+bbuxJY3mofOf4umr5mhp60qI8b1v1w9guIIahpOEsLLFl/Fz8qEp2dCfUPoA8gw
tg9pPWcgjRERNHwolmoUzPZZhSw85zxg6w9HxyYmpHFH4qTwOttb36MedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGfYMoBb/ysf+F1nh8Phdwq3nzyMB8GA1UdIwQY
MBaAFNXuQPRYnWoRsk97vMKaufmuaJcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMt
OWVhMmE2ZmI2YTgxLzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMtOWVhMmE2ZmI2YTgx
LzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq3MS4xB
EyiG/O41LweMgNLWA5ATdCZKiAqQIASmq2UoBSEqEJ7RgrEvR9pgLdmSESoRBcuu
27O0uE+ucDmQ0+Q1efm6f1ZXJPuciIqmLLjBQxz02wzMDeA5c2ZbC4iRF0EZjJaO
9a3eJaRFCLj+VUadTA8yvwJJVhvL/hAhJLTnznGRXRm9fN1k2AVsTvhPl2/nCZC4
XHABbFH49aRsok/FU5KetZI4hHsczUqnpaAgdpMEkLNALZdO2mGLr0wRFsTg1w+J
sFKK9ahnVqCJYfwrSBpBehw/LS/a60wArboVveKoVt58JCf9tA9wUKG+ju8mUD1Z
5MhjPtQjjIDHKg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:18 2025 by rpki-client