Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: Zo12R5dHkrbrwoHYYxuZZ8FOwylRRU0O0y7rGM9oTVo=
Subject key identifier: 7A:7C:5F:F6:B8:10:15:20:C6:74:CF:E3:CE:1E:4C:0C:E5:A8:71:E9
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0199FB7C9A71B1EB7369D5AD9D31EB5FCFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0EE6
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: R8W5GFI2Ocmop4VdmanOVqST0gEtA/yV7rCro8cbzdU=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:71:b1:eb:73:69:d5:ad:9d:31:eb:5f:cf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=7a7c5ff6b8101520c674cfe3ce1e4c0ce5a871e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:b7:b6:cd:ac:e2:a2:06:d0:dd:00:47:d3:
9f:88:c0:ad:dc:82:96:27:ba:86:c4:7c:d5:5d:f5:
1f:79:f2:12:68:fb:b1:82:ea:ad:c9:87:88:d2:ca:
52:91:91:fe:2b:b4:e7:70:ac:a3:00:6f:12:71:66:
77:ca:30:89:5c:56:d9:06:a2:b5:00:97:9c:9e:9a:
c7:8b:1f:f9:5f:a8:71:e8:c9:38:35:04:a4:3b:12:
36:27:79:98:08:1b:4f:f9:95:fc:45:42:a2:46:85:
a5:43:84:17:cb:ee:b3:f8:6c:c6:25:fb:12:25:69:
4c:d3:fe:8f:4c:6d:66:8b:b7:56:81:50:87:56:5a:
b2:7e:52:93:8d:b6:3d:ae:c3:00:56:3b:18:90:48:
04:79:03:e1:a8:4b:3e:d3:7a:20:23:52:79:3d:54:
cf:6b:58:bc:5d:ed:b9:ac:da:72:30:51:3a:bd:f7:
22:a6:7a:43:38:42:65:0c:92:be:62:81:97:a5:df:
46:89:a3:c9:49:8f:69:07:f8:97:35:8c:c3:ec:4a:
0f:4f:ea:b0:70:c9:50:80:91:83:a5:09:e4:b2:96:
4f:1f:e0:ad:03:42:a6:0d:2a:75:34:1a:9d:6e:9d:
f1:fb:f8:db:cf:d0:2f:0a:f3:de:db:ee:01:c3:58:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:5F:F6:B8:10:15:20:C6:74:CF:E3:CE:1E:4C:0C:E5:A8:71:E9
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:69:2e:79:b1:b8:9c:ab:3d:c3:3c:67:d1:49:1e:ad:45:dc:
f7:06:d4:d9:34:fe:e4:9f:ba:bb:a8:7d:60:fa:b7:f2:fc:57:
c1:34:01:85:bc:ed:28:b7:b2:7d:24:4d:ee:49:bf:85:73:fc:
27:c8:6d:7f:b4:cd:c0:95:bd:fa:36:5c:c5:ec:ea:6f:62:92:
70:5d:83:2c:58:75:cc:7e:47:2f:cb:b6:8f:8f:8e:6e:14:94:
9f:ba:1e:24:36:08:52:67:31:3b:3a:5d:92:3a:18:f7:59:45:
45:a0:cb:7c:25:e1:b7:56:fe:06:85:52:dc:ef:02:71:f8:9f:
fe:d6:f4:4e:41:df:b8:9a:11:75:04:bf:8d:30:f3:f1:f1:99:
76:79:5b:a0:19:d7:fe:26:6f:25:9d:42:af:cb:e9:fe:51:54:
06:7a:ec:f7:4d:e1:bc:a9:94:b2:7c:79:1c:d1:c1:bf:25:b5:
9a:01:ee:5c:fd:58:c3:33:39:c5:65:a7:6d:42:c8:f4:44:d3:
2b:b2:bd:27:00:28:c7:f4:90:d8:6a:90:c5:38:a9:7c:15:8b:
03:b5:2f:f0:b3:a8:90:26:02:30:02:8c:5e:58:95:3a:b1:8a:
2e:9a:c4:f0:12:08:c2:3d:7a:9e:f2:f5:a0:9b:99:c2:24:b0:
1b:03:e8:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJpxsetzadWtnTHrX8/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh
NWFhYTMwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
Eyg3YTdjNWZmNmI4MTAxNTIwYzY3NGNmZTNjZTFlNGMwY2U1YTg3MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqy3ts2s4qIG0N0AR9OfiMCt3IKW
J7qGxHzVXfUfefISaPuxguqtyYeI0spSkZH+K7TncKyjAG8ScWZ3yjCJXFbZBqK1
AJecnprHix/5X6hx6Mk4NQSkOxI2J3mYCBtP+ZX8RUKiRoWlQ4QXy+6z+GzGJfsS
JWlM0/6PTG1mi7dWgVCHVlqyflKTjbY9rsMAVjsYkEgEeQPhqEs+03ogI1J5PVTP
a1i8Xe25rNpyMFE6vfcipnpDOEJlDJK+YoGXpd9GiaPJSY9pB/iXNYzD7EoPT+qw
cMlQgJGDpQnkspZPH+CtA0KmDSp1NBqdbp3x+/jbz9AvCvPe2+4Bw1iwFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp8X/a4EBUgxnTP484eTAzlqHHpMB8GA1UdIwQY
MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt
OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw
LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGkuebG4
nKs9wzxn0UkerUXc9wbU2TT+5J+6u6h9YPq38vxXwTQBhbztKLeyfSRN7km/hXP8
J8htf7TNwJW9+jZcxezqb2KScF2DLFh1zH5HL8u2j4+ObhSUn7oeJDYIUmcxOzpd
kjoY91lFRaDLfCXht1b+BoVS3O8Ccfif/tb0TkHfuJoRdQS/jTDz8fGZdnlboBnX
/iZvJZ1Cr8vp/lFUBnrs903hvKmUsnx5HNHBvyW1mgHuXP1YwzM5xWWnbULI9ETT
K7K9JwAox/SQ2GqQxTipfBWLA7Uv8LOokCYCMAKMXliVOrGKLprE8BIIwj16nvL1
oJuZwiSwGwPobA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:20 2025 by rpki-client