
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: gUM49UwaUggeR6sUKadeF5MluWNXrSWPxI1AgQSLseA=
Subject key identifier: A6:4A:E1:EC:9D:07:61:02:E2:F0:15:A6:FD:3E:0B:BD:25:F3:83:5D
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 0199FAA0E4EE209CD43A52C99AA96B674DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 10CC
Signing time: Sun 19 Oct 2025 04:01:12 +0000
Manifest this update: Sun 19 Oct 2025 04:01:12 +0000
Manifest next update: Mon 20 Oct 2025 04:01:12 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: wJhtQjhrQcXTJuYw24BodyFXihUkKr0qUvharM/yFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:e4:ee:20:9c:d4:3a:52:c9:9a:a9:6b:67:4d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Oct 19 04:01:12 2025 GMT
Not After : Oct 20 04:01:12 2025 GMT
Subject: CN=a64ae1ec9d076102e2f015a6fd3e0bbd25f3835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:d7:11:23:71:de:60:4b:6c:d2:f6:28:49:
7e:26:56:f3:cb:f6:5c:4b:27:b1:01:4c:ff:08:db:
29:90:ae:8d:dc:3c:c7:4e:af:d4:ee:3b:58:80:56:
ce:55:47:e2:0c:49:dd:5c:79:45:ad:ac:be:a1:dd:
e4:84:05:e8:2f:4b:52:2e:03:f1:a8:cc:e3:f2:f8:
3b:d6:d2:7b:c1:8f:2e:1c:5d:b6:60:ea:09:0a:f3:
17:7c:50:59:67:5d:16:ae:69:e0:ca:13:29:65:88:
7d:74:3d:90:25:b5:b0:6d:3e:eb:93:ae:a2:f4:aa:
62:6d:f3:d3:40:e7:07:61:98:f7:b8:a0:c7:68:ad:
90:76:4f:02:8c:4a:93:1a:03:fd:ef:39:cb:3c:a0:
6a:be:0f:d1:6a:6a:b4:b1:ff:69:a6:dd:36:33:b4:
03:01:e6:cf:e1:7e:b3:f2:55:16:e6:22:83:30:34:
02:cb:51:a1:e4:a8:58:60:01:0f:41:02:ed:99:35:
9e:11:13:64:1c:fd:79:84:12:ec:f6:a8:9a:93:30:
f4:11:75:47:91:d0:64:58:85:5f:dc:6c:fc:b1:cc:
2c:04:ce:13:fa:99:1e:09:c1:ad:f2:ce:85:e6:c9:
6e:93:0b:f4:5a:07:e7:1c:b8:09:b8:b4:a7:42:45:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:E1:EC:9D:07:61:02:E2:F0:15:A6:FD:3E:0B:BD:25:F3:83:5D
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:9e:db:c5:4b:07:78:fe:d9:42:fe:e7:d9:db:01:aa:4d:
66:12:73:38:d0:fb:d3:0c:ca:1c:4c:8d:6a:aa:79:b4:ed:4d:
8c:bb:a2:31:d6:80:13:84:4b:a7:67:a8:39:cc:cf:f6:32:bd:
a2:a1:8a:38:4e:c5:64:f8:c9:74:40:fb:36:f9:7b:27:bf:0d:
ba:69:eb:91:36:cd:fb:08:5f:19:18:c0:1b:b2:d7:12:b7:f2:
18:de:ee:d2:67:2d:5a:cb:6b:68:58:8f:b9:a8:b4:eb:18:a3:
bb:0f:a7:47:c6:39:ce:3c:07:8d:b1:32:fa:bd:cc:1f:ac:aa:
e7:75:3f:20:7a:fc:21:e7:ff:f2:c9:08:16:f7:9e:11:27:5f:
56:d9:bd:8b:09:94:2b:5f:f9:e2:54:ed:01:e1:e0:fd:2b:1b:
25:48:a8:27:97:94:2f:f9:ce:c1:27:e6:43:9c:40:b1:d5:58:
6b:57:72:cd:2c:99:25:65:3e:91:bc:37:35:27:b0:26:56:07:
3c:e5:0f:28:85:a0:79:79:4a:32:3a:92:23:9d:34:db:53:af:
4c:dc:df:67:02:6f:7d:0d:9a:89:d5:9d:ca:c8:6e:40:7f:7a:
97:13:1d:b0:4a:fd:bd:7a:7c:b2:33:34:d6:c3:fb:cb:59:f5:
a0:c6:4d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oOTuIJzUOlLJmqlrZ03LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0
MGY1ZDAwHhcNMjUxMDE5MDQwMTEyWhcNMjUxMDIwMDQwMTEyWjAzMTEwLwYDVQQD
EyhhNjRhZTFlYzlkMDc2MTAyZTJmMDE1YTZmZDNlMGJiZDI1ZjM4MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8bXESNx3mBLbNL2KEl+Jlbzy/Zc
SyexAUz/CNspkK6N3DzHTq/U7jtYgFbOVUfiDEndXHlFray+od3khAXoL0tSLgPx
qMzj8vg71tJ7wY8uHF22YOoJCvMXfFBZZ10WrmngyhMpZYh9dD2QJbWwbT7rk66i
9KpibfPTQOcHYZj3uKDHaK2Qdk8CjEqTGgP97znLPKBqvg/Ramq0sf9ppt02M7QD
AebP4X6z8lUW5iKDMDQCy1Gh5KhYYAEPQQLtmTWeERNkHP15hBLs9qiakzD0EXVH
kdBkWIVf3Gz8scwsBM4T+pkeCcGt8s6F5slukwv0WgfnHLgJuLSnQkVuAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZK4eydB2EC4vAVpv0+C70l84NdMB8GA1UdIwQY
MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt
YTcyYzQwNGYyNmZkLzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk
LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKye28VL
B3j+2UL+59nbAapNZhJzOND70wzKHEyNaqp5tO1NjLuiMdaAE4RLp2eoOczP9jK9
oqGKOE7FZPjJdED7Nvl7J78NumnrkTbN+whfGRjAG7LXErfyGN7u0mctWstraFiP
uai06xijuw+nR8Y5zjwHjbEy+r3MH6yq53U/IHr8Ief/8skIFveeESdfVtm9iwmU
K1/54lTtAeHg/SsbJUioJ5eUL/nOwSfmQ5xAsdVYa1dyzSyZJWU+kbw3NSewJlYH
POUPKIWgeXlKMjqSI50021OvTNzfZwJvfQ2aidWdyshuQH96lxMdsEr9vXp8sjM0
1sP7y1n1oMZNew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:43 2025 by rpki-client