Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: k4iJWGID7SYkJqQ0Dw/AdoW17glOkCw+Mji7Og2io9s=
Subject key identifier: EE:39:0E:51:03:E4:FB:48:99:80:72:3F:AC:E3:6A:C3:29:D7:A4:4E
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0199FB7C9B9F9A02624104A16C0BEFC52084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0BA8
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: G/kgXWng4TQqy9hWziskVP8ek+O1RjWlH7UYVFs43bE=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:9f:9a:02:62:41:04:a1:6c:0b:ef:c5:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=ee390e5103e4fb489980723face36ac329d7a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:d0:a6:09:03:c3:97:3e:dc:9a:07:80:05:
f9:af:48:28:68:d8:03:56:27:10:95:1a:61:89:29:
14:87:28:84:24:e9:f7:11:dd:67:9f:c5:e9:e9:cb:
4b:2c:bc:88:2a:64:4f:2f:ff:b7:cf:21:7d:cc:d0:
8d:18:1e:c7:a9:92:06:c9:ff:24:c2:2e:19:70:f2:
8f:c6:97:cc:d8:b2:d6:b5:75:94:cb:c8:bd:2d:8e:
6e:9f:e3:5f:e0:d4:da:ee:39:f6:ab:0c:52:d8:dc:
08:cf:63:06:32:4c:26:10:10:c0:5f:b7:9c:1a:69:
57:3e:be:c4:67:00:d3:0f:e5:8e:59:a3:b9:31:ba:
20:7f:78:0e:a7:b7:01:07:68:58:7d:cf:69:cd:c7:
63:fe:fb:46:4a:28:35:cf:6f:78:52:5e:52:ba:da:
d7:1d:1c:34:82:8e:c4:2e:53:6a:f8:cc:00:38:c9:
71:e8:ca:e7:8b:1d:ae:72:ab:d7:58:6f:f3:c1:89:
7e:7d:33:70:10:0a:f1:cd:ef:e8:7d:5b:38:51:4c:
e1:78:bc:ae:3f:81:ee:86:73:f1:f2:d7:9a:81:28:
dc:0d:a5:0d:c3:c0:86:7a:ec:7f:a4:b6:d3:eb:b4:
5f:03:0d:8f:4b:a3:48:47:1e:57:45:21:ba:55:f7:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:0E:51:03:E4:FB:48:99:80:72:3F:AC:E3:6A:C3:29:D7:A4:4E
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e5:89:77:1e:a9:4b:35:41:19:e1:ce:91:75:f8:31:0c:b8:
68:7e:75:61:07:c6:54:1e:60:ba:cd:48:0b:bd:53:d9:38:aa:
e6:b3:1f:34:c8:13:a9:ff:06:54:0f:2a:46:e7:48:9c:30:47:
a2:13:65:03:3f:0b:8f:00:77:a7:f3:98:93:29:e6:7b:ba:30:
2c:84:02:06:76:cf:bb:8e:46:37:4a:0f:f9:b9:07:b8:62:1e:
00:de:fb:6a:5e:95:f8:b1:9f:fb:c7:90:61:38:a4:21:c4:b2:
f7:1b:27:98:c1:ca:67:7a:fa:c5:4e:37:96:15:a7:e4:3c:42:
17:6a:9b:39:d2:ec:23:8d:65:62:05:8e:50:4b:89:4c:09:f7:
56:78:52:fa:e5:8f:50:1b:8b:51:59:b0:b1:f7:bf:6a:ed:78:
39:1f:1d:3d:5b:af:7f:fa:73:2f:a5:78:99:1d:e9:50:26:71:
a4:4d:44:af:5a:9f:7b:e6:e5:43:16:d0:cf:fb:a6:e5:90:41:
95:03:92:1d:16:43:32:06:fd:a8:e7:39:fa:2a:8d:39:83:02:
f5:c7:00:d2:14:b8:97:e5:dc:dc:d6:39:85:09:d3:78:9d:71:
72:aa:37:de:70:04:e3:be:93:4e:78:a4:54:e9:13:69:ed:a5:
df:51:74:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJufmgJiQQShbAvvxSCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
EyhlZTM5MGU1MTAzZTRmYjQ4OTk4MDcyM2ZhY2UzNmFjMzI5ZDdhNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl7QpgkDw5c+3JoHgAX5r0goaNgD
VicQlRphiSkUhyiEJOn3Ed1nn8Xp6ctLLLyIKmRPL/+3zyF9zNCNGB7HqZIGyf8k
wi4ZcPKPxpfM2LLWtXWUy8i9LY5un+Nf4NTa7jn2qwxS2NwIz2MGMkwmEBDAX7ec
GmlXPr7EZwDTD+WOWaO5Mbogf3gOp7cBB2hYfc9pzcdj/vtGSig1z294Ul5SutrX
HRw0go7ELlNq+MwAOMlx6Mrnix2ucqvXWG/zwYl+fTNwEArxze/ofVs4UUzheLyu
P4HuhnPx8teagSjcDaUNw8CGeux/pLbT67RfAw2PS6NIRx5XRSG6Vff7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO45DlED5PtImYByP6zjasMp16ROMB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeWJdx6p
SzVBGeHOkXX4MQy4aH51YQfGVB5gus1IC71T2Tiq5rMfNMgTqf8GVA8qRudInDBH
ohNlAz8LjwB3p/OYkynme7owLIQCBnbPu45GN0oP+bkHuGIeAN77al6V+LGf+8eQ
YTikIcSy9xsnmMHKZ3r6xU43lhWn5DxCF2qbOdLsI41lYgWOUEuJTAn3VnhS+uWP
UBuLUVmwsfe/au14OR8dPVuvf/pzL6V4mR3pUCZxpE1Er1qfe+blQxbQz/um5ZBB
lQOSHRZDMgb9qOc5+iqNOYMC9ccA0hS4l+Xc3NY5hQnTeJ1xcqo33nAE476TTnik
VOkTae2l31F0sA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:26 2025 by rpki-client