Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: wYUnEfGvvKvmmfAj98Dca3Q0XET5q0bxsnvmCHbmoC0=
Subject key identifier: A0:E1:7E:5D:63:98:36:2A:9F:5C:55:FD:2F:5F:07:19:D1:D5:0D:D8
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0199FC219F98B5CD141C763FB61D869D18E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 076E
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: UvlYBB1useOXSWAbfkUk74ncYyWaWuKq08tF3w/yU8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9f:98:b5:cd:14:1c:76:3f:b6:1d:86:9d:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=a0e17e5d6398362a9f5c55fd2f5f0719d1d50dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:be:68:a2:52:a5:3d:18:2f:16:58:d4:da:
d3:01:f8:4e:a3:dd:21:c1:e3:eb:06:05:e1:e2:18:
ba:7f:fd:2e:5e:8e:e8:ec:9f:67:a0:ad:e8:ed:be:
0f:37:68:a3:9e:51:cb:f4:f8:3b:db:0d:c0:f1:4d:
18:19:cf:ef:9a:cf:69:9c:d9:ee:36:8d:e9:13:5c:
31:a7:ca:b3:d9:8a:a0:f0:b3:9e:1f:96:43:5e:7e:
39:f2:2a:80:21:38:a7:44:87:3d:c9:b3:25:e8:c6:
2c:cd:c6:4a:86:d6:1e:9d:4f:93:68:59:29:3b:3c:
58:cb:6d:3d:e4:74:55:df:fb:c3:90:9b:d5:00:3f:
fe:25:31:c1:a3:af:96:48:2a:82:5f:51:0e:7b:2a:
a9:05:74:e0:3f:de:a0:a9:56:d8:20:8b:d3:58:af:
e8:92:5b:d0:41:49:55:72:f4:32:65:06:bf:45:bc:
42:8d:ed:c1:03:b4:1e:61:0a:0f:0b:3e:2b:d9:9d:
5f:0f:c3:e3:b9:d4:3b:34:f5:3c:94:00:66:0d:ef:
5e:53:0c:b4:55:af:09:93:e8:83:b7:cc:4e:b7:85:
d4:59:cf:a8:d3:83:eb:d8:21:75:2b:8b:9b:f9:62:
4d:88:f4:2e:31:a4:8e:98:d4:d9:86:cd:4d:77:c7:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E1:7E:5D:63:98:36:2A:9F:5C:55:FD:2F:5F:07:19:D1:D5:0D:D8
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9a:30:ab:81:24:bd:a3:fc:28:d8:73:76:d9:44:da:1e:f1:
c6:ae:c1:e5:23:04:4d:46:40:98:3e:2d:14:ac:02:3e:47:89:
84:74:98:bd:98:94:5f:1e:81:32:d6:66:5e:c8:8b:12:7f:ff:
dd:7c:d3:78:2a:28:0f:6d:6e:3c:9c:75:da:91:ce:36:1a:1b:
42:c3:b4:08:5b:e4:5b:8c:d4:58:b7:8f:ea:12:33:dc:b6:0f:
f3:d6:0c:4b:bd:e2:ac:d6:91:68:0d:f6:cb:db:8a:50:d2:75:
3a:35:57:75:70:6c:8d:13:d3:4e:21:9a:91:6d:63:0a:03:3a:
af:0b:0a:d0:fa:bf:7b:65:54:53:0c:ae:d7:63:2a:88:b2:92:
2e:0e:f5:c5:e8:aa:bb:84:e7:6d:45:fc:85:4d:fb:02:25:f9:
fb:00:fa:9f:0f:9a:b0:db:b8:90:3f:26:93:dd:23:0d:74:3b:
09:54:c1:2f:e2:99:a2:b2:4b:2e:c8:bc:24:04:11:14:e8:63:
2d:c5:c4:e2:cb:cb:e5:79:7e:90:95:eb:26:0c:10:22:8f:4e:
78:13:79:7f:bd:19:99:85:3a:6f:12:40:c8:ce:93:e4:52:5a:
dd:29:c2:ab:e9:a6:67:a7:f3:7a:22:87:3e:65:54:12:b7:2d:
4b:04:b1:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZ+Ytc0UHHY/th2GnRjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODZmMTNhOWI3MjFjZDE4NjlmYmI5NzRlZTUzZDkwMDIy
ZWFhMmMwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
EyhhMGUxN2U1ZDYzOTgzNjJhOWY1YzU1ZmQyZjVmMDcxOWQxZDUwZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZW+aKJSpT0YLxZY1NrTAfhOo90h
wePrBgXh4hi6f/0uXo7o7J9noK3o7b4PN2ijnlHL9Pg72w3A8U0YGc/vms9pnNnu
No3pE1wxp8qz2Yqg8LOeH5ZDXn458iqAITinRIc9ybMl6MYszcZKhtYenU+TaFkp
OzxYy2095HRV3/vDkJvVAD/+JTHBo6+WSCqCX1EOeyqpBXTgP96gqVbYIIvTWK/o
klvQQUlVcvQyZQa/RbxCje3BA7QeYQoPCz4r2Z1fD8PjudQ7NPU8lABmDe9eUwy0
Va8Jk+iDt8xOt4XUWc+o04Pr2CF1K4ub+WJNiPQuMaSOmNTZhs1Nd8euYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDhfl1jmDYqn1xV/S9fBxnR1Q3YMB8GA1UdIwQY
MBaAFHyG8TqbchzRhp+7l07lPZACLqosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUt
NmZhODQ0MDJkNmEwLzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUtNmZhODQ0MDJkNmEw
LzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJowq4Ek
vaP8KNhzdtlE2h7xxq7B5SMETUZAmD4tFKwCPkeJhHSYvZiUXx6BMtZmXsiLEn//
3XzTeCooD21uPJx12pHONhobQsO0CFvkW4zUWLeP6hIz3LYP89YMS73irNaRaA32
y9uKUNJ1OjVXdXBsjRPTTiGakW1jCgM6rwsK0Pq/e2VUUwyu12MqiLKSLg71xeiq
u4TnbUX8hU37AiX5+wD6nw+asNu4kD8mk90jDXQ7CVTBL+KZorJLLsi8JAQRFOhj
LcXE4svL5Xl+kJXrJgwQIo9OeBN5f70ZmYU6bxJAyM6T5FJa3SnCq+mmZ6fzeiKH
PmVUErctSwSxGw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:45 2025 by rpki-client