
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: ERBNpYWwvsDRpZSIqX9MtxtI9/rSmvn9y+Keph+NydM=
Subject key identifier: 90:2A:FB:B0:74:EC:84:2B:28:37:EE:49:7A:3A:6B:04:3D:90:90:F7
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 0199FC58CE900372EFB9ACB1E29552153AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 1287
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: JfWOxkvPLue6LROuXLDjVcR9oWjvaSC2e2468jVRV5M=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ce:90:03:72:ef:b9:ac:b1:e2:95:52:15:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=902afbb074ec842b2837ee497a3a6b043d9090f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:f1:9d:f0:b7:03:4a:13:d4:1f:78:6d:44:
8b:ec:cc:51:ae:ac:e3:3c:5b:2b:61:34:a9:5d:0a:
3f:ba:44:91:ce:0a:0c:68:3d:6d:cb:0d:87:59:5d:
90:0d:56:eb:6a:b1:d5:6c:88:19:66:2e:f0:7d:1f:
9b:d8:bf:0c:8f:05:a4:58:0e:7d:6e:d1:3b:7b:08:
2c:c9:2b:a1:41:bb:c2:78:f4:95:bf:b7:81:12:e5:
59:ae:60:26:3d:7b:6e:45:85:c0:bb:35:83:8b:e2:
2e:f4:bb:5c:42:ed:c2:d2:e3:3b:06:69:55:e6:84:
19:b0:32:1f:e6:66:8d:ef:4d:0d:af:5b:99:dc:82:
8a:d0:17:9a:35:bd:2f:ae:70:a3:70:56:d7:e3:7b:
a9:16:0d:d5:cb:16:52:48:b9:65:00:ff:cf:4e:3f:
5b:e3:6a:28:34:28:45:a9:12:9a:f9:95:7e:cc:90:
77:e4:fb:1b:79:b9:07:be:7a:6b:1b:2c:6a:0b:8a:
ba:49:d4:59:a8:68:e8:55:26:cf:25:59:0d:28:1f:
e0:70:44:67:67:a9:27:f2:d3:0a:df:c4:ec:98:d0:
af:e8:69:eb:fa:8b:03:49:36:bc:e5:b0:e6:e9:1b:
27:a6:1f:25:28:cf:a7:05:b0:14:37:d1:15:df:ef:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:FB:B0:74:EC:84:2B:28:37:EE:49:7A:3A:6B:04:3D:90:90:F7
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:cc:1a:d8:4b:6a:05:b7:54:3d:c3:c0:65:da:48:26:02:9f:
33:65:0a:a9:30:32:7a:a0:22:9f:e4:91:05:3c:70:46:5f:1c:
73:c0:00:8b:7b:e7:12:e1:cd:ea:44:93:58:8c:25:08:8d:d7:
ae:13:40:dd:2b:b5:a0:a7:41:4b:3d:eb:bd:c3:28:e6:4c:17:
9f:00:71:fc:b1:8f:c7:6b:09:da:56:e2:5a:82:48:87:02:15:
e4:1b:19:da:cd:f2:37:66:e2:bd:ca:f3:b2:a7:ca:40:18:89:
b0:64:1e:d6:37:ec:38:ac:b9:72:5f:dc:41:85:cc:05:fa:39:
17:39:68:74:ed:4b:5e:61:e7:27:54:85:35:75:1e:e4:ef:25:
56:af:30:02:1e:94:cd:55:95:3f:a7:24:6e:25:15:fb:39:4c:
83:30:4b:1f:89:5b:00:49:5f:6d:51:a8:f9:9e:ef:66:bb:af:
67:e4:cf:35:e9:a6:16:7f:c8:63:bd:b5:dc:d2:94:dd:86:d5:
9a:fd:21:9d:b9:0d:d0:44:c0:5b:0c:0b:4a:11:de:72:6f:74:
74:73:e1:87:4d:10:8c:3c:67:1e:0c:a2:6b:51:42:62:40:d5:
37:35:66:0f:00:dd:97:12:cd:68:c5:6d:02:48:fd:98:55:73:
7d:fe:94:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WM6QA3Lvuayx4pVSFTqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDBmYjM5ZDZiMTFmZDE1ZmNiYjQxNjM0MDMxNTVkMWQ0
NTVjMDUwHhcNMjUxMDE5MTIwMTQyWhcNMjUxMDIwMTIwMTQyWjAzMTEwLwYDVQQD
Eyg5MDJhZmJiMDc0ZWM4NDJiMjgzN2VlNDk3YTNhNmIwNDNkOTA5MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhbxnfC3A0oT1B94bUSL7MxRrqzj
PFsrYTSpXQo/ukSRzgoMaD1tyw2HWV2QDVbrarHVbIgZZi7wfR+b2L8MjwWkWA59
btE7ewgsySuhQbvCePSVv7eBEuVZrmAmPXtuRYXAuzWDi+Iu9LtcQu3C0uM7BmlV
5oQZsDIf5maN700Nr1uZ3IKK0BeaNb0vrnCjcFbX43upFg3VyxZSSLllAP/PTj9b
42ooNChFqRKa+ZV+zJB35PsbebkHvnprGyxqC4q6SdRZqGjoVSbPJVkNKB/gcERn
Z6kn8tMK38TsmNCv6Gnr+osDSTa85bDm6Rsnph8lKM+nBbAUN9EV3+9v0wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJAq+7B07IQrKDfuSXo6awQ9kJD3MB8GA1UdIwQY
MBaAFPrQ+znWsR/RX8u0FjQDFV0dRVwFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10RDdPZGF4SDlGZnk3UVdOQU1WWFIxRlhBVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMzA0ZTNkLTFmMGUtNDRlYi1iMmMx
LWU3OTJmODljYmNlMi8xLzEtdEQ3T2RheEg5RmZ5N1FXTkFNVlhSMUZYQVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzMwNGUzZC0xZjBlLTQ0ZWItYjJjMS1lNzkyZjg5Y2Jj
ZTIvMS8xLXREN09kYXhIOUZmeTdRV05BTVZYUjFGWEFVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxswa
2EtqBbdUPcPAZdpIJgKfM2UKqTAyeqAin+SRBTxwRl8cc8AAi3vnEuHN6kSTWIwl
CI3XrhNA3Su1oKdBSz3rvcMo5kwXnwBx/LGPx2sJ2lbiWoJIhwIV5BsZ2s3yN2bi
vcrzsqfKQBiJsGQe1jfsOKy5cl/cQYXMBfo5FzlodO1LXmHnJ1SFNXUe5O8lVq8w
Ah6UzVWVP6ckbiUV+zlMgzBLH4lbAElfbVGo+Z7vZruvZ+TPNemmFn/IY7213NKU
3YbVmv0hnbkN0ETAWwwLShHecm90dHPhh00QjDxnHgyia1FCYkDVNzVmDwDdlxLN
aMVtAkj9mFVzff6UdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:39 2025 by rpki-client