Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: qln9JWQVXWJQ3Jeqg4v/9iUns0BOg7/mgpvnvERuK1g=
Subject key identifier: 20:A4:31:24:1A:EF:94:C9:A0:70:46:57:B4:DB:9F:C6:15:C5:EA:62
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0199FCC63E988F88FB6CF920E157FA06A60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 141E
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: oP7bZPxCsWxgz7/cGehAisJFDH+ToYD2zkqEtx1t9gc=)
2: 2ey3vHhd3-QInNXrg-NGMozvrhY.roa (hash: ovgLpC9Adt54hQhibAMsDZRZRFyhlOqmedeXSHCh2UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3e:98:8f:88:fb:6c:f9:20:e1:57:fa:06:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=20a431241aef94c9a0704657b4db9fc615c5ea62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:1a:f7:27:13:6d:02:ec:b4:61:29:7e:b8:
8f:b3:2f:33:bd:bd:ca:6e:b1:75:a2:26:43:76:b1:
a4:03:40:c5:ab:c3:cc:27:c8:0e:5a:0d:23:a4:74:
ca:fe:4d:f9:f1:c9:86:ab:c8:d0:e2:e6:5d:c5:ce:
eb:81:c6:02:09:26:a1:d8:4f:94:a3:89:65:43:89:
92:16:18:c2:0f:82:9a:d2:70:05:e6:a5:66:9c:27:
bb:68:06:f0:95:99:b5:00:d2:32:c8:af:08:32:52:
43:6a:f3:f6:12:66:68:83:f8:31:aa:ad:b1:43:b9:
58:db:bb:d2:b0:ce:a3:c9:09:5c:76:43:91:88:f4:
57:33:32:73:6a:60:c0:6c:53:d0:ca:ca:5c:f6:d3:
c4:9a:ef:88:63:07:6b:c7:5a:eb:61:51:62:d2:a8:
50:96:7d:52:a4:f0:41:d4:63:76:9e:ec:2d:35:13:
dd:eb:b1:25:e8:db:e3:9f:1b:b0:ae:4f:cd:c6:d0:
b3:1f:ee:a2:2f:8a:83:e7:1a:d2:d8:72:4d:aa:e6:
24:3d:c8:40:0c:a2:99:3f:36:ab:33:41:c2:42:9d:
ad:35:85:0a:d8:df:71:78:4a:39:56:c9:d0:77:5d:
d5:6d:f3:a6:6c:73:89:b8:18:42:b4:cb:07:5b:f3:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:31:24:1A:EF:94:C9:A0:70:46:57:B4:DB:9F:C6:15:C5:EA:62
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:e4:25:12:5b:65:99:66:a0:80:c9:13:24:3d:55:00:0a:
dc:89:05:b8:35:01:66:4e:3a:ca:35:e0:aa:07:4a:4a:f2:49:
2c:a4:91:c7:4b:3c:c0:67:a5:26:b2:d1:50:5b:6c:ac:b9:f0:
45:e1:4c:70:56:bd:c6:0e:cb:ab:f1:77:61:e6:47:40:b6:09:
be:78:47:69:62:dc:fb:33:be:92:99:a7:fe:54:b0:69:e7:60:
e1:75:7b:e0:e7:25:1d:79:c1:c2:67:6c:4e:51:dc:47:f4:8b:
b8:1a:20:1a:ac:44:a3:be:f7:60:c0:a7:02:97:ee:e5:ee:ae:
76:b3:00:9a:a2:64:98:a1:fe:90:0d:82:46:f3:ac:82:c3:55:
80:be:72:b7:30:e1:a9:20:3f:0e:19:3e:79:3c:51:b9:ca:59:
6e:de:2c:f8:b0:c1:8a:5a:75:0e:09:c8:e2:5a:c1:04:c5:19:
ea:2e:55:fd:60:fa:a3:8b:6a:c0:cf:f9:82:ba:fc:0f:ce:c7:
c4:99:5f:d1:7e:e5:de:73:65:67:18:8a:28:67:6a:40:ee:2c:
f6:41:29:37:52:99:ac:38:5a:b6:33:94:5c:64:83:96:0c:ed:
14:b0:b5:c4:98:0c:e3:74:6b:e4:2d:c4:04:17:f8:4e:04:15:
61:5c:e8:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xj6Yj4j7bPkg4Vf6BqYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjUxMDE5MTQwMTE0WhcNMjUxMDIwMTQwMTE0WjAzMTEwLwYDVQQD
EygyMGE0MzEyNDFhZWY5NGM5YTA3MDQ2NTdiNGRiOWZjNjE1YzVlYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaEa9ycTbQLstGEpfriPsy8zvb3K
brF1oiZDdrGkA0DFq8PMJ8gOWg0jpHTK/k358cmGq8jQ4uZdxc7rgcYCCSah2E+U
o4llQ4mSFhjCD4Ka0nAF5qVmnCe7aAbwlZm1ANIyyK8IMlJDavP2EmZog/gxqq2x
Q7lY27vSsM6jyQlcdkORiPRXMzJzamDAbFPQyspc9tPEmu+IYwdrx1rrYVFi0qhQ
ln1SpPBB1GN2nuwtNRPd67El6Nvjnxuwrk/NxtCzH+6iL4qD5xrS2HJNquYkPchA
DKKZPzarM0HCQp2tNYUK2N9xeEo5VsnQd13VbfOmbHOJuBhCtMsHW/OawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCkMSQa75TJoHBGV7Tbn8YVxepiMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf3kJRJb
ZZlmoIDJEyQ9VQAK3IkFuDUBZk46yjXgqgdKSvJJLKSRx0s8wGelJrLRUFtsrLnw
ReFMcFa9xg7Lq/F3YeZHQLYJvnhHaWLc+zO+kpmn/lSwaedg4XV74OclHXnBwmds
TlHcR/SLuBogGqxEo773YMCnApfu5e6udrMAmqJkmKH+kA2CRvOsgsNVgL5ytzDh
qSA/Dhk+eTxRucpZbt4s+LDBilp1DgnI4lrBBMUZ6i5V/WD6o4tqwM/5grr8D87H
xJlf0X7l3nNlZxiKKGdqQO4s9kEpN1KZrDhatjOUXGSDlgztFLC1xJgM43Rr5C3E
BBf4TgQVYVzogA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:12:29 2025 by rpki-client