Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: UjQU8JrOnUPy0HVwEZnh9zRK8zN0Us2ag33vLnu3Td0=
Subject key identifier: F5:89:62:1D:96:E0:42:B3:3B:63:A3:1B:4E:FD:E6:41:A1:95:1A:57
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019A006C4097BA64164E9322A5B85BB6512C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 129A
Signing time: Mon 20 Oct 2025 07:01:25 +0000
Manifest this update: Mon 20 Oct 2025 07:01:25 +0000
Manifest next update: Tue 21 Oct 2025 07:01:25 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: XQ4f4PSAp5NRzi2O66y3iqvahRZUaTKlg9MaEmL4EoI=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:40:97:ba:64:16:4e:93:22:a5:b8:5b:b6:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Oct 20 07:01:25 2025 GMT
Not After : Oct 21 07:01:25 2025 GMT
Subject: CN=f589621d96e042b33b63a31b4efde641a1951a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:3f:65:4f:3d:29:31:53:e5:bf:f4:42:c3:
55:4e:17:0e:ab:b5:13:c9:20:76:f8:3b:62:ca:dd:
1a:bc:5c:4d:0e:70:f0:18:6a:9f:11:ee:d8:f2:52:
d4:37:06:09:c2:eb:39:72:43:d8:c2:f9:97:c4:ca:
86:fd:b3:bf:d7:1b:5d:ac:db:14:8f:d6:56:fc:0e:
fc:e9:c3:89:a1:ad:e6:86:6c:3a:f6:e5:5e:20:e4:
d0:7c:aa:e7:c0:6f:7a:7e:bd:69:4a:e1:22:ca:b9:
35:8f:b0:3a:6f:cb:00:4b:a2:6f:9f:12:e1:6a:28:
8b:57:29:ca:d1:5c:67:49:b5:4a:6c:46:d9:47:95:
24:f5:fd:fd:f0:c6:a2:fe:c0:d0:72:8d:86:4f:69:
63:dc:05:3f:a0:0e:af:79:8b:86:dc:2c:8f:d2:67:
82:28:e1:8d:fe:c3:66:a7:a8:c2:60:33:a0:ae:e3:
2f:74:5c:d2:57:0f:dc:c8:3c:44:17:d1:48:3e:cb:
e6:b4:70:01:05:f6:63:2c:50:78:59:13:fe:e7:44:
62:c2:e8:ae:fd:ce:8a:b7:05:48:23:df:43:6a:84:
87:7d:1c:6b:df:11:f6:e2:14:4a:76:53:79:4b:de:
89:0a:06:5a:a3:72:76:94:69:d2:23:32:04:70:ed:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:62:1D:96:E0:42:B3:3B:63:A3:1B:4E:FD:E6:41:A1:95:1A:57
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:19:44:b8:18:a3:af:75:06:9b:d6:59:da:c7:f2:8e:a8:
a2:10:e6:d4:43:61:7b:05:03:6f:0e:09:7f:2a:5a:4f:c4:1a:
25:08:9a:50:be:e3:ad:58:23:85:8e:fd:3f:0e:2d:bd:73:9f:
84:4b:f0:04:29:76:dd:da:63:bf:d2:85:45:66:fb:cb:aa:e5:
dc:2b:13:05:0f:8b:9b:62:89:ac:63:58:d8:63:60:61:b7:c6:
f2:d8:35:c6:19:c1:4f:8c:f3:f6:49:d6:77:7e:67:9e:9c:75:
82:b2:2e:17:d1:4c:86:c9:50:0c:65:1d:a3:e6:39:e9:09:d6:
6e:e4:89:f9:5d:39:bb:bc:2a:f2:a3:0b:c2:8a:60:5d:ac:5b:
bb:f7:01:0e:9b:d8:51:5f:54:a5:53:ff:a9:16:5c:2f:52:0e:
06:ea:2c:84:89:3d:c1:f8:bc:96:2d:e7:c5:ad:4c:e7:e4:70:
c7:80:11:26:62:29:b0:30:ba:08:5e:eb:d3:a9:f5:ed:26:06:
8f:86:5b:94:d6:8c:ed:45:cf:c9:1a:a6:56:e4:8e:c1:a5:e4:
3c:cd:3f:64:7d:dd:07:d0:1f:8c:51:ac:fe:92:1a:31:b2:d0:
4e:91:da:79:c8:5c:ce:09:e4:b6:1c:bb:37:8e:09:e0:4e:db:
78:2f:98:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbECXumQWTpMipbhbtlEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3
ZTViMmYwHhcNMjUxMDIwMDcwMTI1WhcNMjUxMDIxMDcwMTI1WjAzMTEwLwYDVQQD
EyhmNTg5NjIxZDk2ZTA0MmIzM2I2M2EzMWI0ZWZkZTY0MWExOTUxYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tI/ZU89KTFT5b/0QsNVThcOq7UT
ySB2+Dtiyt0avFxNDnDwGGqfEe7Y8lLUNwYJwus5ckPYwvmXxMqG/bO/1xtdrNsU
j9ZW/A786cOJoa3mhmw69uVeIOTQfKrnwG96fr1pSuEiyrk1j7A6b8sAS6JvnxLh
aiiLVynK0VxnSbVKbEbZR5Uk9f398Mai/sDQco2GT2lj3AU/oA6veYuG3CyP0meC
KOGN/sNmp6jCYDOgruMvdFzSVw/cyDxEF9FIPsvmtHABBfZjLFB4WRP+50Riwuiu
/c6KtwVII99DaoSHfRxr3xH24hRKdlN5S96JCgZao3J2lGnSIzIEcO2GdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWJYh2W4EKzO2OjG0795kGhlRpXMB8GA1UdIwQY
MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt
ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx
LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH8ZRLgY
o691BpvWWdrH8o6oohDm1ENhewUDbw4JfypaT8QaJQiaUL7jrVgjhY79Pw4tvXOf
hEvwBCl23dpjv9KFRWb7y6rl3CsTBQ+Lm2KJrGNY2GNgYbfG8tg1xhnBT4zz9knW
d35nnpx1grIuF9FMhslQDGUdo+Y56QnWbuSJ+V05u7wq8qMLwopgXaxbu/cBDpvY
UV9UpVP/qRZcL1IOBuoshIk9wfi8li3nxa1M5+Rwx4ARJmIpsDC6CF7r06n17SYG
j4ZblNaM7UXPyRqmVuSOwaXkPM0/ZH3dB9AfjFGs/pIaMbLQTpHaechczgnkthy7
N44J4E7beC+YYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:59 2025 by rpki-client