Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: rbe0S9P1jEnhWGtLB3BKEapL5Xu8XinhszKzxVopBfc=
Subject key identifier: CB:0A:47:6A:EA:4C:1E:37:3B:14:5F:20:04:4A:23:67:EB:B0:85:B7
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 0199FDD9BCD9808CFBE0BAC7D0EA9854A09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0D0F
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: VjdctbgtZf/2i2NrKgHXrSpz7mH2F85nCU00wVGCKwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bc:d9:80:8c:fb:e0:ba:c7:d0:ea:98:54:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=cb0a476aea4c1e373b145f20044a2367ebb085b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:bb:9d:63:bc:84:4a:04:59:18:cf:aa:74:
a3:b0:1f:50:f3:6f:1a:d8:8d:b0:77:e7:cb:2e:a0:
6a:4a:08:a5:9f:2e:f1:20:06:27:cb:44:8f:3c:23:
f3:12:5f:eb:a7:82:fb:75:8c:c7:96:6d:1c:6b:c4:
cf:1f:fc:3f:d4:b1:c7:78:7b:3a:ad:a0:f3:f6:88:
31:fa:10:9a:1c:a6:9f:bd:db:b2:c2:1f:8a:38:27:
6d:c8:43:72:ae:e6:72:4c:82:ee:0c:2c:93:7e:d7:
c5:d0:46:ce:63:07:34:10:4d:55:8f:ef:4a:46:bf:
00:38:9d:bb:6c:95:0d:f9:69:be:a2:d6:f8:af:8f:
34:6d:6d:ea:0d:69:8e:1a:fc:48:52:5b:5b:3c:4e:
e5:51:e8:ec:2c:bf:aa:3e:6d:27:ae:b6:b9:b7:17:
4e:2b:4d:b0:82:ed:6e:5b:46:87:1d:51:d4:f3:24:
2d:1f:15:03:0d:80:6b:19:0c:50:c2:a5:88:ed:ad:
42:31:01:c5:06:f3:15:bc:59:0b:7e:d1:fe:7f:8d:
d3:31:9a:aa:34:3e:27:9b:f2:78:32:f0:7a:45:b9:
c0:39:63:bd:6a:6e:5c:54:81:73:2e:6b:6a:16:e0:
64:7b:bd:4f:56:64:61:e9:3a:1e:f8:f5:61:f1:2d:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:47:6A:EA:4C:1E:37:3B:14:5F:20:04:4A:23:67:EB:B0:85:B7
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:3b:98:8f:5a:dd:1b:b4:18:7e:b9:5e:31:a2:89:a2:fb:
ce:bc:18:f6:82:a0:02:fe:d8:43:08:76:e2:37:be:8a:f4:99:
40:31:70:a2:68:61:66:43:89:05:a9:5c:2c:c0:ad:0f:43:dc:
d8:9d:07:82:12:7e:3e:74:78:d7:b3:6f:bc:0a:b2:b8:10:4a:
29:2f:14:57:53:c2:0f:37:bd:89:9f:1b:6a:b5:3d:57:b3:e5:
3f:e0:34:27:7e:71:69:af:24:00:69:21:59:45:b7:ab:21:80:
60:fc:68:22:2d:40:0e:6a:eb:38:47:cd:20:37:94:7b:01:4a:
5d:71:5d:5f:30:91:57:da:5a:29:25:4b:8c:6f:cb:ac:23:81:
b5:40:23:f7:e2:20:42:79:c3:17:b8:c6:eb:91:d4:44:1d:3b:
3b:2c:ee:bb:cb:07:cc:d9:39:1b:6c:12:ff:e8:9a:8f:2d:69:
62:6b:f8:0b:33:99:9d:15:85:da:a0:01:ce:a6:aa:44:5c:d7:
c4:bc:50:61:2e:01:3b:36:aa:10:4d:1e:48:7f:99:5d:65:f9:
5a:2d:89:05:be:11:9f:a8:6b:78:7b:b7:13:c5:13:7a:4f:e1:
84:bc:1e:c4:22:ce:d4:de:19:e2:10:aa:87:6c:79:b0:00:5d:
c8:a0:1f:2c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn92bzZgIz74LrH0OqYVKCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOGU2MGU1NjM5OWZmOTM0NjBiMzQyN2NkNTUyNzRiNWE4
M2U3MjYwHhcNMjUxMDE5MTkwMjA5WhcNMjUxMDIwMTkwMjA5WjAzMTEwLwYDVQQD
EyhjYjBhNDc2YWVhNGMxZTM3M2IxNDVmMjAwNDRhMjM2N2ViYjA4NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx27nWO8hEoEWRjPqnSjsB9Q828a
2I2wd+fLLqBqSgilny7xIAYny0SPPCPzEl/rp4L7dYzHlm0ca8TPH/w/1LHHeHs6
raDz9ogx+hCaHKafvduywh+KOCdtyENyruZyTILuDCyTftfF0EbOYwc0EE1Vj+9K
Rr8AOJ27bJUN+Wm+otb4r480bW3qDWmOGvxIUltbPE7lUejsLL+qPm0nrra5txdO
K02wgu1uW0aHHVHU8yQtHxUDDYBrGQxQwqWI7a1CMQHFBvMVvFkLftH+f43TMZqq
ND4nm/J4MvB6RbnAOWO9am5cVIFzLmtqFuBke71PVmRh6Toe+PVh8S20ZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMsKR2rqTB43OxRfIARKI2frsIW3MB8GA1UdIwQY
MBaAFPuOYOVjmf+TRgs0J81VJ0tag+cmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS00NWc1V09aXzVOR0N6UW56VlVuUzFxRDV5WS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2ViLTg2MTAtNDBlOS04MmFm
LWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFuelZVblMxcUQ1eVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FlL2M2NGNlYi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZj
ZmYvMS8xLTQ1ZzVXT1pfNU5HQ3pRbnpWVW5TMXFENXlZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3g7
mI9a3Ru0GH65XjGiiaL7zrwY9oKgAv7YQwh24je+ivSZQDFwomhhZkOJBalcLMCt
D0Pc2J0HghJ+PnR417NvvAqyuBBKKS8UV1PCDze9iZ8barU9V7PlP+A0J35xaa8k
AGkhWUW3qyGAYPxoIi1ADmrrOEfNIDeUewFKXXFdXzCRV9paKSVLjG/LrCOBtUAj
9+IgQnnDF7jG65HURB07Oyzuu8sHzNk5G2wS/+iajy1pYmv4CzOZnRWF2qABzqaq
RFzXxLxQYS4BOzaqEE0eSH+ZXWX5Wi2JBb4Rn6hreHu3E8UTek/hhLwexCLO1N4Z
4hCqh2x5sABdyKAfLA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:59 2025 by rpki-client