Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: u1LM1WRaqIMb++50qVyFamKc2Fw88rNLP8CMqdMDpEA=
Subject key identifier: 92:FF:5D:79:86:CD:05:B6:20:8B:F2:19:F3:CA:84:BD:05:F0:3A:19
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 0199FCFD3D083FBBD4FC30C262405A19614C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 15B5
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: A/aaxYCZDmrsdMd6c3OFs2uyP+QUCDalTHgIcvBv4Gk=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3d:08:3f:bb:d4:fc:30:c2:62:40:5a:19:61:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=92ff5d7986cd05b6208bf219f3ca84bd05f03a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:b2:12:d2:61:ba:84:eb:de:a7:0c:c0:aa:
70:19:86:8a:cd:18:b2:ac:46:a7:3d:3d:ac:c5:5f:
dc:22:ee:11:30:c6:41:33:f2:f6:b7:73:06:0a:1a:
41:5e:21:f9:f1:4e:a7:8b:2c:2a:43:df:b2:16:83:
e7:7d:29:7c:30:53:a4:62:0c:77:5c:52:2a:be:57:
92:7c:ec:41:d5:d8:7a:bb:4f:6c:4f:f6:02:09:a8:
22:7b:eb:dd:6a:9c:a3:58:d1:46:af:ac:fc:1d:7b:
16:00:3a:6c:63:de:36:f2:cc:16:8f:ca:f4:c8:1d:
31:e6:79:2c:72:ed:32:48:76:2e:07:1a:21:22:bf:
33:46:83:e4:05:59:08:0a:4e:bd:28:68:b6:51:5a:
1e:30:a2:b6:7a:1e:a6:9e:74:17:c3:51:6b:6a:75:
9d:98:56:52:13:e3:d2:a1:2d:d0:d5:58:ad:95:43:
d5:fd:00:f2:44:9f:5b:74:e1:ff:ed:1a:3e:8f:cf:
71:3e:89:05:1d:c4:12:40:1c:ce:dc:c8:8f:43:a3:
ae:18:9d:b6:f4:d5:40:a8:ec:23:3e:8b:ca:6a:22:
cf:6a:3b:f1:bb:24:34:6a:ea:fe:31:ea:0f:98:f8:
7b:a3:c3:44:4a:05:09:be:84:9a:6d:aa:3b:09:24:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:5D:79:86:CD:05:B6:20:8B:F2:19:F3:CA:84:BD:05:F0:3A:19
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cf:d3:fc:f6:c8:17:1a:77:87:98:fe:a7:2d:f5:f7:56:96:
0f:64:b1:c5:00:e2:f0:1a:55:98:61:bd:bc:11:f0:f6:79:9a:
82:be:0d:3f:37:b6:5a:8a:de:b2:dd:96:ed:42:ac:0e:0f:7e:
25:c3:81:f2:e2:88:37:15:0a:b1:cf:3e:9f:fd:a9:a6:91:26:
72:b6:8a:16:ad:30:5f:00:af:14:80:39:7a:5b:51:64:af:64:
5d:e0:83:4b:96:37:11:e1:15:00:ce:42:f1:c3:e5:7d:c7:b5:
ab:d0:21:46:de:62:7d:47:26:f9:78:c8:78:b2:81:2f:9e:17:
24:9a:67:41:44:f1:16:0d:10:eb:27:7e:96:97:87:f8:fd:31:
8b:cd:29:e2:92:64:a2:26:d4:8c:e3:f1:5f:af:45:74:8c:9f:
5c:f9:44:19:7e:73:59:be:bd:8f:b0:c3:4d:b9:05:6f:34:26:
2c:a9:78:d1:c1:1a:b1:58:8b:b7:56:84:51:3b:86:95:95:f2:
cd:bc:7a:c0:49:20:54:63:79:83:71:76:06:43:0b:2c:34:a8:
50:5a:1f:5c:80:82:4e:08:1b:55:c5:1c:b7:9c:1e:a6:9d:e2:
75:6c:5f:9c:b0:2f:fc:65:26:80:65:8c:4e:b1:97:c4:31:d3:
4b:21:06:59
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8/T0IP7vU/DDCYkBaGWFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy
YTdiZGUwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
Eyg5MmZmNWQ3OTg2Y2QwNWI2MjA4YmYyMTlmM2NhODRiZDA1ZjAzYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH+yEtJhuoTr3qcMwKpwGYaKzRiy
rEanPT2sxV/cIu4RMMZBM/L2t3MGChpBXiH58U6niywqQ9+yFoPnfSl8MFOkYgx3
XFIqvleSfOxB1dh6u09sT/YCCagie+vdapyjWNFGr6z8HXsWADpsY9428swWj8r0
yB0x5nkscu0ySHYuBxohIr8zRoPkBVkICk69KGi2UVoeMKK2eh6mnnQXw1FranWd
mFZSE+PSoS3Q1VitlUPV/QDyRJ9bdOH/7Ro+j89xPokFHcQSQBzO3MiPQ6OuGJ22
9NVAqOwjPovKaiLPajvxuyQ0aur+MeoPmPh7o8NESgUJvoSabao7CSSBuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJL/XXmGzQW2IIvyGfPKhL0F8DoZMB8GA1UdIwQY
MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw
LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm
YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus/T
/PbIFxp3h5j+py3191aWD2SxxQDi8BpVmGG9vBHw9nmagr4NPze2Worest2W7UKs
Dg9+JcOB8uKINxUKsc8+n/2pppEmcraKFq0wXwCvFIA5eltRZK9kXeCDS5Y3EeEV
AM5C8cPlfce1q9AhRt5ifUcm+XjIeLKBL54XJJpnQUTxFg0Q6yd+lpeH+P0xi80p
4pJkoibUjOPxX69FdIyfXPlEGX5zWb69j7DDTbkFbzQmLKl40cEasViLt1aEUTuG
lZXyzbx6wEkgVGN5g3F2BkMLLDSoUFofXICCTggbVcUct5wepp3idWxfnLAv/GUm
gGWMTrGXxDHTSyEGWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:34 2025 by rpki-client