Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: kB/5Wo09ZNNqYpKArLOsyM3jaTMPaoPl2YuQxsy/FPo=
Subject key identifier: 90:3D:50:A4:36:B5:C9:D7:5B:04:E0:11:34:EB:13:20:93:D1:AB:50
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 0199FF227070F0B987F1B1A6D7B74CD15C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: B4
Signing time: Mon 20 Oct 2025 01:01:10 +0000
Manifest this update: Mon 20 Oct 2025 01:01:10 +0000
Manifest next update: Tue 21 Oct 2025 01:01:10 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: DYDvHv8QDpRTcxryHUA0O2Rrtp49MXrJHUK3jvE7M1s=)
2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:70:70:f0:b9:87:f1:b1:a6:d7:b7:4c:d1:5c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Oct 20 01:01:10 2025 GMT
Not After : Oct 21 01:01:10 2025 GMT
Subject: CN=903d50a436b5c9d75b04e01134eb132093d1ab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:51:b1:0c:b7:7d:2f:84:91:0f:1f:d6:b6:
6f:70:62:28:aa:7c:9f:dd:24:31:fb:f3:b2:7f:21:
8a:34:36:62:e1:87:36:0e:aa:65:0b:d2:c5:12:de:
37:dd:af:96:da:fd:a8:b6:57:35:2b:6d:77:50:7e:
c4:db:ad:0b:0f:dc:24:9a:7f:e4:ea:d0:c1:c2:ac:
33:01:23:12:ea:9d:46:31:ec:c1:97:46:2f:28:c5:
86:25:b9:c1:06:56:84:ac:44:c6:2c:84:57:8a:3a:
5f:f4:33:74:01:d5:d0:ba:9f:cd:b3:bd:fc:44:d4:
35:8c:61:27:38:26:b7:28:77:77:49:2e:76:4c:4b:
f4:ba:7b:32:06:ff:37:b2:21:97:2a:51:d6:3a:c4:
e0:ef:9c:72:2a:36:b8:96:65:7b:07:96:e7:d7:ab:
28:05:e1:ba:26:f7:d8:d7:c4:ef:ac:fe:7b:eb:47:
1b:ac:3b:15:26:43:ab:ad:22:82:a3:cf:e0:7b:8f:
fd:94:09:e5:93:91:4b:dc:4f:50:65:67:fa:c4:3a:
67:34:39:66:f8:bf:6b:65:11:2c:79:e6:98:bf:c3:
04:2c:3d:82:ca:82:1c:01:55:5a:99:f5:27:35:a5:
5c:71:41:e1:17:0c:65:48:3c:a5:69:98:0b:6d:9a:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:50:A4:36:B5:C9:D7:5B:04:E0:11:34:EB:13:20:93:D1:AB:50
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:f0:84:ad:1c:18:d9:27:a8:21:e2:a5:f8:d3:f1:e7:c1:
d2:86:fb:db:ae:8e:a8:d5:ce:2c:58:0f:c6:5d:0d:60:02:28:
fc:e6:4b:cc:0c:d9:7f:c8:f0:a4:7d:ee:3b:08:4c:40:2a:08:
cb:ab:da:04:2e:ad:d1:25:5d:38:42:92:91:4b:9a:52:34:10:
10:35:20:82:dd:a2:ba:8d:ec:4b:c9:07:85:08:c9:cc:92:d7:
e5:f0:b6:0c:42:50:87:1e:bb:e8:fc:75:97:c9:50:c6:9b:52:
a0:c0:88:49:42:68:ed:d5:0f:74:0e:be:9d:ca:0f:23:63:9e:
6d:a3:53:a3:6d:10:f0:c1:f8:e7:a6:42:64:af:12:e3:09:24:
45:09:a4:1c:4f:19:e3:97:3e:44:13:bb:e4:44:ff:6e:c2:d1:
8b:b4:d9:ea:4c:f0:f7:18:31:21:0f:08:46:28:fd:82:f1:b3:
7f:5f:43:4f:83:da:52:2e:ab:d1:0f:70:75:1f:b7:10:fb:f2:
7b:60:64:96:52:fd:f3:93:1a:71:09:a3:5a:23:5d:54:15:e3:
62:ee:51:bd:41:fb:46:16:f8:30:51:80:9b:6f:bc:a6:b8:94:
6f:14:da:dc:fd:75:ab:b7:49:66:c8:ff:1f:5d:60:46:e9:da:
77:a6:a7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/InBw8LmH8bGm17dM0VxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx
ZmRlY2EwHhcNMjUxMDIwMDEwMTEwWhcNMjUxMDIxMDEwMTEwWjAzMTEwLwYDVQQD
Eyg5MDNkNTBhNDM2YjVjOWQ3NWIwNGUwMTEzNGViMTMyMDkzZDFhYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MNRsQy3fS+EkQ8f1rZvcGIoqnyf
3SQx+/OyfyGKNDZi4Yc2DqplC9LFEt433a+W2v2otlc1K213UH7E260LD9wkmn/k
6tDBwqwzASMS6p1GMezBl0YvKMWGJbnBBlaErETGLIRXijpf9DN0AdXQup/Ns738
RNQ1jGEnOCa3KHd3SS52TEv0unsyBv83siGXKlHWOsTg75xyKja4lmV7B5bn16so
BeG6JvfY18TvrP5760cbrDsVJkOrrSKCo8/ge4/9lAnlk5FL3E9QZWf6xDpnNDlm
+L9rZREseeaYv8MELD2CyoIcAVVamfUnNaVccUHhFwxlSDylaZgLbZoPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA9UKQ2tcnXWwTgETTrEyCT0atQMB8GA1UdIwQY
MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt
NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk
LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH7whK0c
GNknqCHipfjT8efB0ob7266OqNXOLFgPxl0NYAIo/OZLzAzZf8jwpH3uOwhMQCoI
y6vaBC6t0SVdOEKSkUuaUjQQEDUggt2iuo3sS8kHhQjJzJLX5fC2DEJQhx676Px1
l8lQxptSoMCISUJo7dUPdA6+ncoPI2OebaNTo20Q8MH456ZCZK8S4wkkRQmkHE8Z
45c+RBO75ET/bsLRi7TZ6kzw9xgxIQ8IRij9gvGzf19DT4PaUi6r0Q9wdR+3EPvy
e2BkllL985MacQmjWiNdVBXjYu5RvUH7Rhb4MFGAm2+8priUbxTa3P11q7dJZsj/
H11gRunad6ansA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:26 2025 by rpki-client