Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: oQkfz31MOvdLdboXr6Bn5kMa6j7jd8oI3DXoNG5l820=
Subject key identifier: 9F:78:58:C2:C3:EC:5A:59:D8:A0:F4:DA:E8:BA:29:FA:0B:1D:A8:73
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 0199FEB4EA975856AA13AE1DCA4093E262CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 02DC
Signing time: Sun 19 Oct 2025 23:01:33 +0000
Manifest this update: Sun 19 Oct 2025 23:01:33 +0000
Manifest next update: Mon 20 Oct 2025 23:01:33 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: SGNBPjLYvktZX7D/avhO9+ISQ97nIqGtdubdPnMemKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ea:97:58:56:aa:13:ae:1d:ca:40:93:e2:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Oct 19 23:01:33 2025 GMT
Not After : Oct 20 23:01:33 2025 GMT
Subject: CN=9f7858c2c3ec5a59d8a0f4dae8ba29fa0b1da873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:5b:bf:b8:31:0e:d7:06:2e:58:fb:87:6b:
4b:bb:9c:ed:a6:bd:f9:c1:12:89:2e:af:e2:72:fa:
d1:c5:86:70:1e:93:35:ec:ab:5e:54:20:53:dc:b0:
d5:ba:7b:11:e8:dd:49:64:99:b9:ad:56:af:75:d3:
20:88:dd:ed:0d:e6:b0:b0:0b:7e:b2:45:20:bb:37:
49:8c:af:87:f4:b6:9c:c0:95:07:87:82:d5:1b:12:
6b:e2:56:20:7c:5c:b8:11:1b:a6:31:1d:83:55:be:
39:8a:fe:3c:48:9c:c6:0b:2c:4f:b0:39:cc:9e:ba:
d3:a7:52:24:d4:56:bb:5f:cd:85:11:a0:4f:6a:86:
21:91:31:8d:c9:ad:e4:b1:d7:a2:f8:5e:ab:dd:86:
f3:97:60:3a:dc:3c:7a:8a:3b:80:e5:62:8c:d9:07:
8a:b6:c2:7a:11:74:ae:9e:dc:bd:9c:0e:3f:7c:99:
26:fc:ea:68:4d:cc:ea:24:02:78:5c:41:e1:85:54:
92:0f:b5:f4:9b:cc:e8:af:1c:d4:27:b0:7f:25:7c:
31:27:c4:33:e5:c4:65:3b:96:85:c8:2d:1f:11:41:
6a:58:ef:92:cf:5d:4f:b9:2c:eb:5e:0e:be:48:91:
49:83:3d:e7:97:e7:37:bc:b6:28:79:e6:22:b0:78:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:58:C2:C3:EC:5A:59:D8:A0:F4:DA:E8:BA:29:FA:0B:1D:A8:73
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:cb:fd:b8:10:86:45:bb:21:d3:25:39:a4:32:cf:54:62:
14:ca:ef:4a:45:d7:81:d6:d9:a9:20:c2:3c:ef:bd:c6:a3:ca:
f3:5c:41:17:79:9e:20:37:ac:d5:ea:0b:98:ce:55:07:3f:d4:
93:81:fe:cf:50:2b:70:b0:c3:a2:3f:ed:9e:48:54:61:46:be:
b2:21:59:d3:57:19:54:98:44:49:05:d3:9d:18:01:c6:b8:98:
4d:0f:57:17:cc:59:b7:d1:cb:f6:82:8c:ef:96:29:60:91:4b:
5e:9d:ed:2a:c5:fd:d6:72:01:24:4e:d6:5f:89:42:48:fd:ce:
d9:85:ce:b9:c8:01:23:13:85:4b:c8:8a:70:fc:24:b5:c5:4f:
b6:99:b2:9e:5c:11:46:06:1e:fd:c1:c8:61:3d:f3:db:df:2d:
1a:08:fa:69:fa:b6:ca:91:a6:d7:2d:2d:6c:00:ea:c0:53:7a:
b8:ea:e7:c5:b9:dd:03:40:ed:0b:19:37:93:ae:68:75:2b:2c:
c2:d6:a9:96:56:95:88:84:84:3c:7d:21:b9:c2:f5:92:c0:0e:
1a:8b:14:66:ad:8e:9b:29:58:3d:38:21:3c:53:33:69:25:0a:
c3:86:e2:99:70:9a:12:05:10:d5:93:83:fe:4e:75:ff:4d:78:
f7:23:b2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tOqXWFaqE64dykCT4mLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjJlY2U1NDc1NzJhZGVjYTFhOWZmMDU3ZTBiYThlYWU4
YzVkNWUwHhcNMjUxMDE5MjMwMTMzWhcNMjUxMDIwMjMwMTMzWjAzMTEwLwYDVQQD
Eyg5Zjc4NThjMmMzZWM1YTU5ZDhhMGY0ZGFlOGJhMjlmYTBiMWRhODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxNbv7gxDtcGLlj7h2tLu5ztpr35
wRKJLq/icvrRxYZwHpM17KteVCBT3LDVunsR6N1JZJm5rVavddMgiN3tDeawsAt+
skUguzdJjK+H9LacwJUHh4LVGxJr4lYgfFy4ERumMR2DVb45iv48SJzGCyxPsDnM
nrrTp1Ik1Fa7X82FEaBPaoYhkTGNya3ksdei+F6r3Ybzl2A63Dx6ijuA5WKM2QeK
tsJ6EXSunty9nA4/fJkm/OpoTczqJAJ4XEHhhVSSD7X0m8zorxzUJ7B/JXwxJ8Qz
5cRlO5aFyC0fEUFqWO+Sz11PuSzrXg6+SJFJgz3nl+c3vLYoeeYisHj9RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ94WMLD7FpZ2KD02ui6KfoLHahzMB8GA1UdIwQY
MBaAFNRi7OVHVyreyhqf8Ffguo6ujF1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYt
YTQwOGJiYTczNWVlLzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYtYTQwOGJiYTczNWVl
LzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcbL/bgQ
hkW7IdMlOaQyz1RiFMrvSkXXgdbZqSDCPO+9xqPK81xBF3meIDes1eoLmM5VBz/U
k4H+z1ArcLDDoj/tnkhUYUa+siFZ01cZVJhESQXTnRgBxriYTQ9XF8xZt9HL9oKM
75YpYJFLXp3tKsX91nIBJE7WX4lCSP3O2YXOucgBIxOFS8iKcPwktcVPtpmynlwR
RgYe/cHIYT3z298tGgj6afq2ypGm1y0tbADqwFN6uOrnxbndA0DtCxk3k65odSss
wtapllaViISEPH0hucL1ksAOGosUZq2OmylYPTghPFMzaSUKw4bimXCaEgUQ1ZOD
/k51/0149yOy0w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:49 2025 by rpki-client