Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: Uas6HXsmSnmVsGY1ftP1uMDYkOraKB3oHJY6COjvWWg=
Subject key identifier: 28:1C:9C:9E:E8:16:F7:42:E8:E2:BD:7D:39:85:FE:EB:D3:31:E0:27
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 0199FD6AD3B51E35A4A33BD362D8C106E2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 053C
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: dtXTd48KFHmvnDlHQjK51HX3aXCWg6q1QpP0R7IZrho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d3:b5:1e:35:a4:a3:3b:d3:62:d8:c1:06:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=281c9c9ee816f742e8e2bd7d3985feebd331e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:9e:ab:47:ef:30:37:f2:c0:cd:35:ef:29:
c7:f7:2c:c0:e0:a3:fa:98:5b:b5:17:20:fc:ae:a4:
d1:40:91:76:db:36:0e:38:c6:41:56:f2:37:24:f6:
92:72:61:ea:9b:4a:77:42:4d:50:bd:2c:87:6f:3c:
22:8e:9d:ad:cc:90:35:35:be:c9:79:b6:ef:e8:d6:
47:c5:85:49:be:17:3c:59:c7:1d:5b:ee:60:67:38:
b0:84:1b:39:22:ec:bb:ca:4f:3a:c1:50:75:22:f0:
ad:70:8f:ce:90:5f:38:1e:7b:ab:2b:81:85:56:07:
58:6c:73:d6:9d:31:ef:6d:d2:f3:87:36:c4:fb:da:
72:d9:d7:7c:bd:91:6f:31:b2:48:cc:9c:a3:95:9d:
13:a1:f4:93:d1:9c:a0:a9:9b:7c:cf:a3:42:94:e6:
0f:df:f8:52:0a:f2:46:f2:dd:ef:c4:61:98:e7:f3:
7a:bc:80:0c:34:2a:59:3d:a8:bd:2a:d6:dc:91:e5:
b4:10:b5:9d:b4:b5:52:9d:39:41:92:50:b9:db:8a:
33:8c:24:3f:21:50:82:6f:18:40:ba:78:84:57:e7:
3e:3d:6d:bb:90:f9:d3:f7:9d:c9:84:c5:14:da:42:
6b:71:29:67:6f:7a:42:d8:b7:80:1f:ca:f7:82:e0:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:9C:9E:E8:16:F7:42:E8:E2:BD:7D:39:85:FE:EB:D3:31:E0:27
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:97:c1:ba:e5:7a:81:29:ee:76:08:93:45:5a:40:ae:00:e2:
8a:65:13:79:a6:e4:46:7d:bf:ca:56:7b:c6:f7:c9:77:08:a4:
93:c4:82:bf:f6:88:31:66:72:04:a1:70:4c:72:fd:97:e5:2f:
12:6e:2a:7e:cc:7a:f5:d6:05:1c:08:1b:46:4b:1a:b6:a9:06:
b0:6e:57:08:3f:df:61:b3:0e:68:58:bb:9a:ac:24:13:94:a5:
f4:fd:43:f0:ea:36:62:a1:f9:7b:3d:10:78:ee:23:6d:7f:2f:
7c:d0:a8:3d:c2:24:f4:03:f7:27:77:60:7a:34:0d:ff:2f:64:
bc:31:49:27:bd:33:e2:ce:09:ff:de:7e:ac:fa:2d:0c:96:be:
96:04:6b:b4:2a:be:03:0a:a7:25:14:3b:d4:e3:1c:9c:d0:44:
34:c7:0c:6d:b2:9b:4a:91:b7:b5:04:0e:2c:2f:d5:99:cb:e9:
a7:a5:07:e8:ea:ca:97:67:eb:31:b0:f6:f0:2b:5c:7a:83:5a:
fb:15:fa:eb:5e:89:fe:52:25:06:f3:78:91:49:4d:bd:17:73:
26:fc:df:f8:4f:83:57:bb:50:f2:e1:94:cd:f8:81:84:69:9a:
ad:b8:23:26:0b:b8:00:c7:06:78:e4:9c:fa:35:16:74:f2:a7:
ac:61:10:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9atO1HjWkozvTYtjBBuK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl
OTU5NmMwHhcNMjUxMDE5MTcwMTAwWhcNMjUxMDIwMTcwMTAwWjAzMTEwLwYDVQQD
EygyODFjOWM5ZWU4MTZmNzQyZThlMmJkN2QzOTg1ZmVlYmQzMzFlMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoaeq0fvMDfywM017ynH9yzA4KP6
mFu1FyD8rqTRQJF22zYOOMZBVvI3JPaScmHqm0p3Qk1QvSyHbzwijp2tzJA1Nb7J
ebbv6NZHxYVJvhc8WccdW+5gZziwhBs5Iuy7yk86wVB1IvCtcI/OkF84HnurK4GF
VgdYbHPWnTHvbdLzhzbE+9py2dd8vZFvMbJIzJyjlZ0TofST0ZygqZt8z6NClOYP
3/hSCvJG8t3vxGGY5/N6vIAMNCpZPai9KtbckeW0ELWdtLVSnTlBklC524ozjCQ/
IVCCbxhAuniEV+c+PW27kPnT953JhMUU2kJrcSlnb3pC2LeAH8r3guBv8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgcnJ7oFvdC6OK9fTmF/uvTMeAnMB8GA1UdIwQY
MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt
ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1
LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZfBuuV6
gSnudgiTRVpArgDiimUTeabkRn2/ylZ7xvfJdwikk8SCv/aIMWZyBKFwTHL9l+Uv
Em4qfsx69dYFHAgbRksatqkGsG5XCD/fYbMOaFi7mqwkE5Sl9P1D8Oo2YqH5ez0Q
eO4jbX8vfNCoPcIk9AP3J3dgejQN/y9kvDFJJ70z4s4J/95+rPotDJa+lgRrtCq+
AwqnJRQ71OMcnNBENMcMbbKbSpG3tQQOLC/Vmcvpp6UH6OrKl2frMbD28CtceoNa
+xX6616J/lIlBvN4kUlNvRdzJvzf+E+DV7tQ8uGUzfiBhGmarbgjJgu4AMcGeOSc
+jUWdPKnrGEQ2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:14 2025 by rpki-client