Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: IyBxRQI8ZPaIX7UmLR9upcHOiVKAHJoT2ruvPF7l6jM=
Subject key identifier: 78:7B:3D:03:55:CC:B0:C4:F5:86:AB:1A:2B:08:1A:C4:B2:07:E2:2F
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0199FD33E2BE666C6A1F764C3CE6C467F548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 10E4
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=)
2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
3: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: CyaTbQWPKpdfflCbgOyL1XU47Smt3WvMe0fVeOeKEhg=)
4: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
5: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=)
6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=)
7: rz4N95CrmRgEO1zjysAon4yFKAA.roa (hash: saVZv6bcY+zwNzfOK+c09gEbL5ZQ6JMTaAgizPOYSxA=)
8: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e2:be:66:6c:6a:1f:76:4c:3c:e6:c4:67:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=787b3d0355ccb0c4f586ab1a2b081ac4b207e22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:66:9e:93:d8:4a:5b:c0:1b:ee:9e:01:80:
53:99:b6:9a:d5:3e:c7:fa:84:6d:31:fd:d3:4b:89:
68:d9:75:73:56:ea:9e:6e:37:57:5d:f3:2b:55:57:
d6:f5:81:32:2f:f7:b0:d8:f5:e1:9c:9f:d1:4f:4f:
b8:0c:09:17:16:b6:c2:84:96:9c:ad:d2:29:3b:74:
ba:c3:dc:70:50:40:65:8f:2d:5e:55:42:3d:86:7e:
ff:a5:5f:f8:16:74:b7:3b:66:6c:ae:c5:c5:12:f3:
a1:77:d4:0f:26:b8:8a:7f:c2:99:65:5a:8a:8a:be:
d9:b1:51:32:5a:21:08:89:c4:e6:d2:98:10:d6:2e:
e3:be:0a:6b:ae:82:6f:e6:98:8e:e3:ad:50:e6:86:
cf:73:0f:7c:de:76:94:4d:b8:e6:3f:e0:2a:4e:17:
e8:65:16:63:12:36:6e:de:4b:ea:c2:f3:76:86:ca:
dc:9c:19:11:90:cb:dd:f0:5a:fa:90:a4:76:a3:11:
f8:57:ab:a4:d8:1e:09:61:f9:c7:ff:df:98:4c:32:
8c:8c:69:46:18:ae:81:d3:9c:3e:9d:8c:c5:2e:af:
84:0c:92:24:5b:96:0b:46:e2:79:00:54:93:a4:50:
f2:f6:f5:33:6f:a7:de:82:37:80:49:30:10:a7:c8:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:3D:03:55:CC:B0:C4:F5:86:AB:1A:2B:08:1A:C4:B2:07:E2:2F
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:b1:c7:90:73:c4:c9:dd:fc:26:c2:31:7f:07:82:21:f1:
35:12:8d:b7:dc:8c:19:79:5f:5e:7c:da:0e:74:c0:61:3a:83:
49:18:19:27:56:cf:88:8d:fc:89:44:79:e9:88:be:49:c1:3e:
d3:28:75:18:b8:f3:a0:45:66:29:0c:1b:f4:ef:d0:10:03:b8:
dc:b4:96:b2:4b:7b:da:77:ef:dc:91:28:f2:29:ad:24:df:74:
14:eb:01:8f:33:51:0c:07:6a:ad:07:f5:86:9e:f1:41:b4:b2:
1a:44:35:cb:f8:b3:36:6a:a5:a3:a6:57:a2:e6:2f:37:0c:32:
24:3e:32:58:c1:32:91:82:19:91:87:68:a2:9b:0d:cb:14:6e:
48:1e:00:1d:9f:6a:54:49:4b:40:c0:1c:e5:0d:62:f7:9c:38:
bb:cc:02:74:49:dc:24:6e:04:0f:26:09:39:2a:d3:65:2e:7b:
9c:b5:e4:64:96:22:9d:5c:1c:04:be:b8:67:00:52:c2:c3:32:
24:af:1f:64:80:7c:e7:56:27:68:ec:1e:63:d6:02:d2:63:5c:
65:37:1f:7b:ed:16:9d:b8:7c:5d:4a:68:7b:db:00:e4:f7:2d:
19:15:c7:72:c6:f7:8d:93:4b:04:f2:fe:d1:31:77:51:8d:4b:
5b:76:c7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+K+ZmxqH3ZMPObEZ/VIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjUxMDE5MTYwMDU5WhcNMjUxMDIwMTYwMDU5WjAzMTEwLwYDVQQD
Eyg3ODdiM2QwMzU1Y2NiMGM0ZjU4NmFiMWEyYjA4MWFjNGIyMDdlMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ERmnpPYSlvAG+6eAYBTmbaa1T7H
+oRtMf3TS4lo2XVzVuqebjdXXfMrVVfW9YEyL/ew2PXhnJ/RT0+4DAkXFrbChJac
rdIpO3S6w9xwUEBljy1eVUI9hn7/pV/4FnS3O2ZsrsXFEvOhd9QPJriKf8KZZVqK
ir7ZsVEyWiEIicTm0pgQ1i7jvgprroJv5piO461Q5obPcw983naUTbjmP+AqThfo
ZRZjEjZu3kvqwvN2hsrcnBkRkMvd8Fr6kKR2oxH4V6uk2B4JYfnH/9+YTDKMjGlG
GK6B05w+nYzFLq+EDJIkW5YLRuJ5AFSTpFDy9vUzb6fegjeASTAQp8h/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh7PQNVzLDE9YarGisIGsSyB+IvMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYexx5Bz
xMnd/CbCMX8HgiHxNRKNt9yMGXlfXnzaDnTAYTqDSRgZJ1bPiI38iUR56Yi+ScE+
0yh1GLjzoEVmKQwb9O/QEAO43LSWskt72nfv3JEo8imtJN90FOsBjzNRDAdqrQf1
hp7xQbSyGkQ1y/izNmqlo6ZXouYvNwwyJD4yWMEykYIZkYdoopsNyxRuSB4AHZ9q
VElLQMAc5Q1i95w4u8wCdEncJG4EDyYJOSrTZS57nLXkZJYinVwcBL64ZwBSwsMy
JK8fZIB851YnaOweY9YC0mNcZTcfe+0Wnbh8XUpoe9sA5PctGRXHcsb3jZNLBPL+
0TF3UY1LW3bH/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client