Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: Y3ud8z6oWuG7XI+D7MzjMYVJ1xQt9R1THTOaQHhN+9k=
Subject key identifier: C6:4B:81:F6:31:19:80:A4:2B:C3:BB:E6:D9:70:84:14:FA:AA:39:79
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 0199FC585D9D4E6111FDE9779DEEC1E5F719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: 1H8sO2WYVzO3VT17ozq5Wt0FIGHtjoOHMM1o25mVQRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5d:9d:4e:61:11:fd:e9:77:9d:ee:c1:e5:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=c64b81f6311980a42bc3bbe6d9708414faaa3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:f4:39:23:ad:86:e3:03:80:ab:cf:f6:10:
b3:d3:4b:2a:72:88:4f:f1:ca:83:0b:2b:19:3c:45:
50:3b:10:d3:8b:f5:91:77:69:18:a2:6b:86:d5:07:
79:b2:f5:5f:24:7e:7e:b8:bb:1d:e9:d4:ee:60:4c:
58:14:9a:09:24:22:d1:8a:db:9a:5f:f7:ad:e7:3a:
3c:f1:af:12:6e:0a:97:84:8d:60:a2:8a:8d:6b:a2:
b0:f3:a3:0a:4d:de:7b:8c:0b:8e:66:c9:17:9e:61:
10:d5:7b:50:03:87:45:bc:72:21:5a:ed:99:bd:4f:
3e:c9:4b:e4:b2:7d:e2:d2:0f:10:88:c9:90:6a:43:
e7:cc:ff:a2:5f:24:26:f2:b9:d2:80:0b:29:e4:29:
ad:7a:9a:44:02:fb:21:71:d8:42:0f:9f:41:ea:40:
59:10:9e:be:c0:73:eb:20:fc:e3:d4:c4:40:a4:9c:
f6:23:29:47:e7:9b:36:c3:88:f5:20:fe:da:8b:a1:
0c:72:97:c2:14:b0:45:ac:2f:52:70:23:bd:b6:d0:
3b:d0:47:0d:1c:da:92:7b:41:f4:bb:d2:d7:94:76:
19:58:68:e2:c2:fb:c5:24:0b:cb:ea:99:32:39:03:
e7:6f:db:fc:2b:7d:ec:ef:2f:94:c2:c8:9b:fc:9d:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:81:F6:31:19:80:A4:2B:C3:BB:E6:D9:70:84:14:FA:AA:39:79
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:95:b9:d4:0d:a4:40:83:38:61:92:6c:ad:95:76:74:7d:
9a:a2:87:0b:0d:cb:56:bf:46:c1:b4:46:f0:cd:aa:ba:14:a7:
c2:d7:2a:75:5d:6f:36:e2:b5:be:9d:a1:79:78:61:1f:a4:99:
be:39:a4:ff:51:07:04:91:f2:a8:f6:77:b2:c1:a6:80:96:0d:
e3:b8:6f:d8:6b:d3:e0:3a:fe:31:02:69:34:3f:0e:a1:da:2d:
b5:3d:48:83:bc:ca:41:de:82:37:95:ca:74:6e:e9:65:9d:6e:
d4:e4:68:3c:17:cb:0b:f9:54:cc:e9:59:23:5a:fd:64:a8:e9:
6f:be:42:e2:5d:ed:c8:d3:5a:f4:6d:0f:84:8a:11:d0:05:d9:
9d:67:97:45:e8:04:98:e7:d6:73:d3:2e:b4:eb:1d:8c:19:ff:
64:c2:8c:57:c4:7b:28:b3:31:6e:f0:f3:ac:a7:8b:a4:df:d2:
03:e6:fa:b5:06:bb:9e:9b:2c:65:c5:c4:ab:52:9b:c2:33:70:
a1:b6:f8:1a:10:e5:88:f7:a1:c1:39:65:53:9d:ff:f5:18:3a:
de:e3:76:4e:f5:ab:6b:1a:46:c4:1e:2a:54:c5:d3:fa:c8:86:
e2:e3:fa:a1:e7:25:ff:77:92:90:22:68:34:17:b0:07:d4:36:
13:cf:06:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WF2dTmER/el3ne7B5fcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTAzZDI0NTBkY2U1ODdkNTM3NTVhOWY2YjRhNDY1NmEy
ODBiNGIwHhcNMjUxMDE5MTIwMTEzWhcNMjUxMDIwMTIwMTEzWjAzMTEwLwYDVQQD
EyhjNjRiODFmNjMxMTk4MGE0MmJjM2JiZTZkOTcwODQxNGZhYWEzOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qH0OSOthuMDgKvP9hCz00sqcohP
8cqDCysZPEVQOxDTi/WRd2kYomuG1Qd5svVfJH5+uLsd6dTuYExYFJoJJCLRitua
X/et5zo88a8SbgqXhI1gooqNa6Kw86MKTd57jAuOZskXnmEQ1XtQA4dFvHIhWu2Z
vU8+yUvksn3i0g8QiMmQakPnzP+iXyQm8rnSgAsp5CmteppEAvshcdhCD59B6kBZ
EJ6+wHPrIPzj1MRApJz2IylH55s2w4j1IP7ai6EMcpfCFLBFrC9ScCO9ttA70EcN
HNqSe0H0u9LXlHYZWGjiwvvFJAvL6pkyOQPnb9v8K33s7y+Uwsib/J39jwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMZLgfYxGYCkK8O75tlwhBT6qjl5MB8GA1UdIwQY
MBaAFPmgPSRQ3OWH1TdVqfa0pGVqKAtLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hQTlKRkRjNVlmVk4xV3A5clNrWldvb0Mwcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTZmOTI0LTE5ZjQtNDUxMi1iZGU0
LWUwNmM4YjMwMzQ3OC8xLzEtYUE5SkZEYzVZZlZOMVdwOXJTa1pXb29DMHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzk2ZjkyNC0xOWY0LTQ1MTItYmRlNC1lMDZjOGIzMDM0
NzgvMS8xLWFBOUpGRGM1WWZWTjFXcDlyU2taV29vQzBzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkqV
udQNpECDOGGSbK2VdnR9mqKHCw3LVr9GwbRG8M2quhSnwtcqdV1vNuK1vp2heXhh
H6SZvjmk/1EHBJHyqPZ3ssGmgJYN47hv2GvT4Dr+MQJpND8OodottT1Ig7zKQd6C
N5XKdG7pZZ1u1ORoPBfLC/lUzOlZI1r9ZKjpb75C4l3tyNNa9G0PhIoR0AXZnWeX
RegEmOfWc9MutOsdjBn/ZMKMV8R7KLMxbvDzrKeLpN/SA+b6tQa7npssZcXEq1Kb
wjNwobb4GhDliPehwTllU53/9Rg63uN2TvWraxpGxB4qVMXT+siG4uP6oecl/3eS
kCJoNBewB9Q2E88GXA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:24 2025 by rpki-client