Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: w+ItvW7QviPc2EXVrLgImq5ACz7HARrKPb814nfGTew=
Subject key identifier: AA:AB:11:EA:2B:7E:16:EB:56:1C:E7:89:0B:34:0B:09:86:BF:EF:BB
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 0199FE7DC9CBED984209E58F11CAB04FEAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 052C
Signing time: Sun 19 Oct 2025 22:01:20 +0000
Manifest this update: Sun 19 Oct 2025 22:01:20 +0000
Manifest next update: Mon 20 Oct 2025 22:01:20 +0000
Files and hashes: 1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: uw5NfiNzAu2iRiiu3U3Kt/cV5OiAH8e0aglnItCNDQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c9:cb:ed:98:42:09:e5:8f:11:ca:b0:4f:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Oct 19 22:01:20 2025 GMT
Not After : Oct 20 22:01:20 2025 GMT
Subject: CN=aaab11ea2b7e16eb561ce7890b340b0986bfefbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:dd:b5:62:07:d7:55:b1:d7:3e:8e:68:cf:
b1:e8:42:06:92:f8:a1:2d:48:9d:a2:a9:5b:31:38:
96:21:04:91:07:60:26:1c:75:36:08:62:ac:bb:10:
9b:98:31:e0:0f:16:35:90:f1:76:28:68:43:9a:3c:
60:b9:21:07:62:c6:43:30:59:e9:b0:14:7a:76:b5:
1e:87:19:02:fb:9a:e6:4a:74:34:ae:8a:56:c1:7f:
a8:65:75:9b:f1:a7:39:b1:b5:ef:28:bd:84:63:a3:
37:c9:85:fb:f4:af:16:0a:5c:03:3f:5d:16:c4:91:
75:9f:2f:a7:86:95:f1:44:ee:5f:fe:04:21:97:ed:
a4:09:ca:bb:da:4e:2f:f7:08:e9:4f:b0:2c:43:bb:
1a:5a:b8:91:d6:d0:31:f4:d0:78:7f:95:de:e7:55:
1b:94:74:16:46:31:5f:ee:c2:e9:f5:04:17:1a:b8:
58:14:10:e0:f1:41:bb:14:ae:c5:c5:a2:19:02:33:
14:91:e0:11:bb:72:e9:d5:c7:b5:4a:75:41:85:a9:
9f:9c:a5:de:ab:be:6e:61:00:85:c3:f7:7e:e9:14:
d6:3c:fd:c7:34:6b:ad:7f:3e:8d:19:4b:a0:27:bb:
b8:f1:c9:dd:17:9d:4b:c5:51:0c:a5:ef:e5:d5:4d:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:11:EA:2B:7E:16:EB:56:1C:E7:89:0B:34:0B:09:86:BF:EF:BB
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5f:cb:ec:39:62:74:4a:42:5d:30:88:e9:67:66:18:ba:7d:
2e:bb:d7:e1:48:a8:c8:c6:4a:19:53:72:52:fb:e2:90:bf:28:
b7:97:7c:bd:50:2a:d2:b3:7d:fe:c9:50:29:4b:7d:19:a3:6b:
c2:aa:2d:99:89:f2:6b:85:dc:de:41:95:bc:37:c7:83:d4:44:
2b:5e:39:87:c6:83:01:e8:81:ff:32:78:16:3d:a7:57:a1:0e:
a2:28:6b:b6:94:56:11:45:52:9f:5b:fb:45:4a:69:5a:f2:cd:
38:af:96:ff:35:00:b2:d7:96:91:25:2f:13:d6:78:aa:fd:10:
53:34:7f:85:53:24:3e:58:c6:01:47:10:30:df:c1:4b:4c:fb:
2a:7d:60:61:fb:fa:f3:69:ba:91:9d:f9:77:64:92:89:19:3d:
54:0d:35:20:12:2e:3c:32:6e:9b:35:ab:0d:4d:a6:a2:d7:2b:
4b:84:10:27:c4:73:c6:e6:d5:a4:7a:80:67:d0:70:4f:37:5e:
22:06:51:49:6d:5d:dd:91:57:81:68:66:91:97:08:41:22:f1:
19:5c:2d:50:43:2f:57:fe:05:ed:74:57:69:8e:e9:cc:ec:a5:
a9:73:f0:da:3b:ce:6d:bc:cd:bf:ef:7c:67:46:bb:7c:36:da:
db:af:f6:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fcnL7ZhCCeWPEcqwT+rIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3
ZGIzNmMwHhcNMjUxMDE5MjIwMTIwWhcNMjUxMDIwMjIwMTIwWjAzMTEwLwYDVQQD
EyhhYWFiMTFlYTJiN2UxNmViNTYxY2U3ODkwYjM0MGIwOTg2YmZlZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm53dtWIH11Wx1z6OaM+x6EIGkvih
LUidoqlbMTiWIQSRB2AmHHU2CGKsuxCbmDHgDxY1kPF2KGhDmjxguSEHYsZDMFnp
sBR6drUehxkC+5rmSnQ0ropWwX+oZXWb8ac5sbXvKL2EY6M3yYX79K8WClwDP10W
xJF1ny+nhpXxRO5f/gQhl+2kCcq72k4v9wjpT7AsQ7saWriR1tAx9NB4f5Xe51Ub
lHQWRjFf7sLp9QQXGrhYFBDg8UG7FK7FxaIZAjMUkeARu3Lp1ce1SnVBhamfnKXe
q75uYQCFw/d+6RTWPP3HNGutfz6NGUugJ7u48cndF51LxVEMpe/l1U35SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqrEeorfhbrVhzniQs0CwmGv++7MB8GA1UdIwQY
MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt
M2M3Mzg1NDQ0ODJlLzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl
LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1/L7Dli
dEpCXTCI6WdmGLp9LrvX4UioyMZKGVNyUvvikL8ot5d8vVAq0rN9/slQKUt9GaNr
wqotmYnya4Xc3kGVvDfHg9REK145h8aDAeiB/zJ4Fj2nV6EOoihrtpRWEUVSn1v7
RUppWvLNOK+W/zUAsteWkSUvE9Z4qv0QUzR/hVMkPljGAUcQMN/BS0z7Kn1gYfv6
82m6kZ35d2SSiRk9VA01IBIuPDJumzWrDU2motcrS4QQJ8RzxubVpHqAZ9BwTzde
IgZRSW1d3ZFXgWhmkZcIQSLxGVwtUEMvV/4F7XRXaY7pzOylqXPw2jvObbzNv+98
Z0a7fDba26/2dA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:31 2025 by rpki-client