Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: Bn7VHvpEd/lGhDiR41d//C9D05EICd1wZeJ0dPmafdE=
Subject key identifier: 85:AB:5C:0C:03:AE:9C:73:9D:9F:36:1C:62:08:24:8E:4F:45:56:61
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019A011121C3AC78BF73A8A996CF7129B5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:31 +0000
Manifest this update: Mon 20 Oct 2025 10:01:31 +0000
Manifest next update: Tue 21 Oct 2025 10:01:31 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: ccoZkIXpcdEYLdnoiXU/U1ZMbdjMn06c8TamtNa87FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:21:c3:ac:78:bf:73:a8:a9:96:cf:71:29:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Oct 20 10:01:31 2025 GMT
Not After : Oct 21 10:01:31 2025 GMT
Subject: CN=85ab5c0c03ae9c739d9f361c6208248e4f455661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:b1:22:a3:f8:ac:c8:c1:60:89:cc:4d:0b:
5e:f8:b0:66:cd:9f:4d:3b:94:59:82:42:f9:4e:3b:
40:31:6e:22:c0:a0:e6:53:4d:41:ed:71:c9:f4:c3:
bf:6a:d5:aa:21:7f:49:d7:92:c3:c8:4e:c6:a2:01:
1d:ff:6e:70:9d:e6:ad:ca:88:81:8b:3d:4c:d9:76:
4c:87:bd:34:3e:0e:6e:ce:02:0f:cc:70:12:69:13:
a7:09:f8:3b:b7:9d:61:2b:7d:12:05:e6:77:95:51:
55:48:16:aa:40:76:3c:53:3d:16:d6:17:29:46:2f:
24:3f:4a:63:29:3e:37:be:c8:46:a0:1b:c4:78:d8:
1c:2f:4f:4f:6a:b9:82:af:8f:ba:76:44:28:ac:49:
d6:5a:36:f9:91:52:a7:b3:ba:dd:c4:9b:d9:dc:1e:
06:1a:cc:21:d8:87:24:55:fc:64:c1:f5:68:33:5c:
03:30:f1:39:18:32:d3:cb:ee:fb:9e:47:01:aa:40:
a7:f3:12:d7:fc:b0:2e:60:f1:a0:e4:6d:f4:25:e6:
a8:1a:2d:c2:7d:a0:ad:ff:41:c1:ed:75:1f:70:c3:
1e:bf:b9:10:4f:72:ef:75:63:b9:7c:0b:f9:b4:c1:
6f:6c:fc:35:33:38:63:b0:3c:52:8e:1f:7d:15:ee:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:5C:0C:03:AE:9C:73:9D:9F:36:1C:62:08:24:8E:4F:45:56:61
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cf:82:8c:19:ab:4a:72:2c:6d:b4:88:40:3b:4c:95:40:99:
53:08:63:bc:10:6e:a8:d1:5f:63:3e:d3:c8:0e:49:ba:c5:69:
08:d5:67:b0:72:94:98:82:41:32:4e:0a:5c:77:3c:88:72:d5:
fb:af:89:47:b7:17:3d:58:a7:01:08:07:81:aa:12:d6:a3:f6:
bf:73:cc:23:b1:bc:e7:b4:5c:d1:16:b8:04:c5:3b:4d:da:8e:
ae:d8:e5:7c:9e:ad:be:3e:4a:a0:73:7a:66:f4:7b:ee:0b:2b:
93:e4:21:d6:a1:95:e6:61:85:04:85:68:8b:18:f8:90:c4:fa:
27:76:9d:30:51:c2:7b:47:1f:10:ed:b5:ca:71:5d:35:0a:8e:
ba:12:b0:5f:bd:46:48:f0:96:cc:24:83:88:bd:47:04:ae:a0:
43:93:e4:4c:8f:44:be:bf:2b:fe:29:26:b6:8b:44:e1:e9:3f:
8d:a7:dc:59:a8:e6:97:cf:86:b4:17:af:cc:15:c5:ae:3c:4d:
5a:e1:33:24:db:ef:f5:c0:cd:fe:34:74:21:d1:75:ca:7d:9a:
16:b0:e6:59:85:9d:7c:a3:4f:0b:00:ef:ad:08:88:55:8e:fd:
10:0a:a9:f9:ea:73:c5:f0:d2:a8:81:a7:a1:b8:8a:ed:d5:a7:
1d:4b:91:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBESHDrHi/c6ipls9xKbXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTZlZTdlNDg0YWUyZWYwOTIwZDA5NWJjYWUyNjhmYWZk
Njk2MTkwHhcNMjUxMDIwMTAwMTMxWhcNMjUxMDIxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg4NWFiNWMwYzAzYWU5YzczOWQ5ZjM2MWM2MjA4MjQ4ZTRmNDU1NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4SxIqP4rMjBYInMTQte+LBmzZ9N
O5RZgkL5TjtAMW4iwKDmU01B7XHJ9MO/atWqIX9J15LDyE7GogEd/25wneatyoiB
iz1M2XZMh700Pg5uzgIPzHASaROnCfg7t51hK30SBeZ3lVFVSBaqQHY8Uz0W1hcp
Ri8kP0pjKT43vshGoBvEeNgcL09ParmCr4+6dkQorEnWWjb5kVKns7rdxJvZ3B4G
Gswh2IckVfxkwfVoM1wDMPE5GDLTy+77nkcBqkCn8xLX/LAuYPGg5G30JeaoGi3C
faCt/0HB7XUfcMMev7kQT3LvdWO5fAv5tMFvbPw1MzhjsDxSjh99Fe6UqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWrXAwDrpxznZ82HGIIJI5PRVZhMB8GA1UdIwQY
MBaAFNRW7n5ISuLvCSDQlbyuJo+v1pYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUt
NTRlOWZmZDNiYmUwLzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUtNTRlOWZmZDNiYmUw
LzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuM+CjBmr
SnIsbbSIQDtMlUCZUwhjvBBuqNFfYz7TyA5JusVpCNVnsHKUmIJBMk4KXHc8iHLV
+6+JR7cXPVinAQgHgaoS1qP2v3PMI7G857Rc0Ra4BMU7TdqOrtjlfJ6tvj5KoHN6
ZvR77gsrk+Qh1qGV5mGFBIVoixj4kMT6J3adMFHCe0cfEO21ynFdNQqOuhKwX71G
SPCWzCSDiL1HBK6gQ5PkTI9Evr8r/ikmtotE4ek/jafcWajml8+GtBevzBXFrjxN
WuEzJNvv9cDN/jR0IdF1yn2aFrDmWYWdfKNPCwDvrQiIVY79EAqp+epzxfDSqIGn
obiK7dWnHUuRAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:56 2025 by rpki-client