Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: lEh0++yORcUQA72riWi2W089abKQSQqOUcIJvWtNOLY=
Subject key identifier: E5:AB:F7:07:E9:31:2A:F3:32:4B:E3:A4:04:C8:2D:38:70:5C:FD:BE
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0199FB7CF88F109B2D0792032420C5053BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 120F
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 9+Q0kNFYr/eKmDj8CsJjPFgY2q/mvM0k6sYKQ4dcAWk=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f8:8f:10:9b:2d:07:92:03:24:20:c5:05:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=e5abf707e9312af3324be3a404c82d38705cfdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:83:03:40:7a:eb:02:34:43:64:e0:1e:7f:
cf:10:f2:27:6f:d3:ef:2f:2e:52:fe:f1:81:3f:c2:
84:0e:e4:45:97:a8:03:3c:ff:c0:02:ba:94:27:84:
71:6d:26:47:d1:75:39:b2:1a:59:1e:dd:83:2b:67:
49:f5:f0:b2:75:1e:28:b9:08:02:03:7b:9f:c2:20:
da:77:fc:79:93:c3:ad:e9:f8:f5:51:95:24:80:a2:
5b:d6:8d:f4:cc:b9:7e:d6:e4:62:ef:51:a8:cb:2a:
93:85:2d:c6:5e:9f:46:14:24:6c:b6:9b:a0:57:e7:
a1:ad:67:15:4e:72:43:c8:4e:25:7c:63:59:91:e7:
25:a8:0f:66:f2:76:b8:f8:85:5f:b4:76:4d:58:34:
d2:72:5d:19:64:de:e2:00:43:2d:cf:6f:f4:d2:09:
b1:31:0b:d2:d8:8b:43:64:dc:55:e4:57:90:fd:8b:
13:00:52:b2:29:f6:d1:c9:b5:a8:89:cc:7b:45:86:
f0:88:61:5a:3d:18:88:cf:6d:e2:38:37:25:46:1c:
38:aa:d6:02:2b:82:ec:81:c4:58:54:ee:53:ae:fb:
e9:25:a5:88:f2:1a:8b:7a:03:c2:32:09:62:78:66:
9d:87:0e:b5:19:a1:67:87:26:70:32:8f:50:8b:91:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:F7:07:E9:31:2A:F3:32:4B:E3:A4:04:C8:2D:38:70:5C:FD:BE
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:07:d7:d8:01:cf:58:62:55:08:3d:f7:dc:ce:f0:0f:9a:
69:62:05:ae:5f:f9:8c:8d:06:4e:d1:a8:8d:eb:54:08:e9:4c:
70:e5:8f:76:fe:47:eb:4b:58:f3:00:cc:a8:f4:f1:bc:71:62:
e9:6c:61:73:3d:0a:57:da:77:18:c3:c7:5a:3e:bc:df:9d:e2:
d0:84:b8:83:d5:ad:9f:c1:8f:93:1f:92:63:83:98:8d:4a:a4:
3a:54:94:b6:49:b3:2a:41:aa:cc:d3:63:a7:6c:ff:40:fe:b1:
9d:60:48:1e:05:4d:6a:71:e3:f5:d6:bb:7f:e0:78:28:0c:62:
de:d8:73:1b:0b:58:4d:a7:d9:e5:13:0e:62:6b:aa:a1:30:0f:
89:ee:e5:9c:f6:85:7a:ff:a0:4f:68:93:64:81:55:de:23:93:
19:fb:27:70:b8:8f:fc:df:c1:3e:6a:0c:02:44:63:6d:b8:30:
62:5c:a4:d5:ed:a3:61:81:73:8e:25:b4:e6:7b:a4:78:27:9f:
5d:96:e3:24:17:d5:3c:5c:0a:17:a9:fb:2d:b4:94:f7:ef:dc:
d0:b5:07:1e:d1:c5:ed:07:4a:86:77:9d:c7:f7:0e:94:c6:25:
96:86:18:88:5e:5e:2c:b7:1e:b3:9d:a4:d1:73:be:51:5f:da:
16:7d:5c:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7fPiPEJstB5IDJCDFBTvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm
MWUxMzEwHhcNMjUxMDE5MDgwMTM1WhcNMjUxMDIwMDgwMTM1WjAzMTEwLwYDVQQD
EyhlNWFiZjcwN2U5MzEyYWYzMzI0YmUzYTQwNGM4MmQzODcwNWNmZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc6DA0B66wI0Q2TgHn/PEPInb9Pv
Ly5S/vGBP8KEDuRFl6gDPP/AArqUJ4RxbSZH0XU5shpZHt2DK2dJ9fCydR4ouQgC
A3ufwiDad/x5k8Ot6fj1UZUkgKJb1o30zLl+1uRi71GoyyqThS3GXp9GFCRstpug
V+ehrWcVTnJDyE4lfGNZkeclqA9m8na4+IVftHZNWDTScl0ZZN7iAEMtz2/00gmx
MQvS2ItDZNxV5FeQ/YsTAFKyKfbRybWoicx7RYbwiGFaPRiIz23iODclRhw4qtYC
K4LsgcRYVO5TrvvpJaWI8hqLegPCMglieGadhw61GaFnhyZwMo9Qi5HDWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOWr9wfpMSrzMkvjpATILThwXP2+MB8GA1UdIwQY
MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4
LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy
MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+YH
19gBz1hiVQg999zO8A+aaWIFrl/5jI0GTtGojetUCOlMcOWPdv5H60tY8wDMqPTx
vHFi6Wxhcz0KV9p3GMPHWj68353i0IS4g9Wtn8GPkx+SY4OYjUqkOlSUtkmzKkGq
zNNjp2z/QP6xnWBIHgVNanHj9da7f+B4KAxi3thzGwtYTafZ5RMOYmuqoTAPie7l
nPaFev+gT2iTZIFV3iOTGfsncLiP/N/BPmoMAkRjbbgwYlyk1e2jYYFzjiW05nuk
eCefXZbjJBfVPFwKF6n7LbSU9+/c0LUHHtHF7QdKhnedx/cOlMYlloYYiF5eLLce
s52k0XO+UV/aFn1cPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:39 2025 by rpki-client