Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File: fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier: evdzQg06YDd9uJVIRa+iRQqtl5QqSgL6g9lyBfgU1As=
Subject key identifier: 62:2A:08:72:36:59:35:CA:1F:23:C5:07:16:A2:4E:27:89:28:A9:A4
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial: 0199FB7C75F2D73AE9C4116588F431DAC6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number: 1143
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: rggwPpACdcyMGunJ4FqUUxvrNCoJfFIBhkSF7gsNinI=)
4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:75:f2:d7:3a:e9:c4:11:65:88:f4:31:da:c6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=622a0872365935ca1f23c50716a24e278928a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:9c:98:82:5d:16:84:8c:90:5a:97:cf:17:
1c:5e:d5:e0:22:1c:4a:c3:b8:29:a5:46:95:60:e3:
d9:d5:3d:d2:f3:94:48:32:aa:40:af:91:48:2a:4a:
3b:bb:ec:9c:15:81:d9:39:83:17:32:ff:ad:71:a1:
85:6f:b7:93:82:5b:5f:2a:90:13:db:e5:86:fe:54:
8b:91:f0:63:24:49:38:89:c4:53:34:59:9a:87:d0:
c3:23:07:18:ab:82:89:98:a5:90:8e:20:d4:15:e5:
39:dd:5f:a9:3c:15:ac:ad:9d:ac:75:78:d0:7e:33:
7d:a8:7c:86:30:22:74:3c:c4:0d:d0:26:e8:63:b1:
d8:c3:05:78:79:89:e8:3e:0b:5f:74:fd:0a:f8:ba:
0b:75:1c:0b:4d:54:98:d0:76:73:78:ad:ab:4d:bf:
d7:bb:cd:ba:07:be:13:de:d6:c3:66:b2:bd:2e:4c:
81:35:ef:87:d5:11:ce:63:de:cb:e3:7f:fb:c4:30:
45:f2:6a:0b:8c:d9:9d:1c:40:55:b9:09:96:86:2d:
a1:a0:c3:2e:63:f6:01:0b:85:b9:04:54:9a:4f:dc:
3c:66:4f:03:57:85:44:14:7d:65:b0:e5:28:17:83:
85:a2:a3:be:93:4e:f9:b0:b1:7c:fd:cc:71:bd:10:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:08:72:36:59:35:CA:1F:23:C5:07:16:A2:4E:27:89:28:A9:A4
X509v3 Authority Key Identifier:
keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c7:f6:8f:b5:bc:0a:ae:11:59:ab:68:b8:75:45:a3:0b:26:
3d:45:21:4d:59:99:ac:2a:09:5a:8f:32:96:c6:ed:9b:bc:f5:
10:40:3a:c3:79:e7:0d:7d:06:3d:21:c2:6a:5a:a6:6a:e8:11:
eb:50:63:05:c7:55:3f:ae:e4:fa:36:73:f7:71:47:5a:38:9c:
71:a4:10:f7:a5:aa:d5:8d:d1:32:55:9c:c5:09:ed:e4:d0:22:
4d:c5:d0:52:da:53:fb:ac:a5:fb:f1:c8:5d:f9:9a:ab:75:6d:
b3:bf:79:3e:c7:2e:dc:3d:57:55:8b:88:b8:15:e6:02:3d:e7:
dc:52:7b:dd:64:2e:97:34:a7:50:86:2d:c6:31:f9:f1:32:c7:
35:26:d9:fa:ff:83:e6:7e:4c:49:87:b1:79:3e:a1:4e:e3:8f:
4e:b9:9b:62:4a:4a:ca:a4:d5:95:0a:38:db:93:37:de:2f:a6:
d6:0a:c5:21:d4:f2:80:7b:45:b8:5f:5b:fd:90:4c:db:26:c3:
9b:c0:3d:e0:1f:d1:9d:2f:90:36:7b:68:40:d8:50:ae:a2:cb:
96:1a:a3:2d:f4:96:2f:6a:7e:22:7c:cb:af:9c:a0:e1:50:e7:
d0:55:bc:fb:43:13:4a:77:93:b3:8d:e4:44:00:c4:cf:fe:7d:
bd:63:cd:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHXy1zrpxBFliPQx2sb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjczZGFhZDZkOTMxN2YwMTAxZDQxYTA0MmE2MWU1NzY4
OTQ1M2EwHhcNMjUxMDE5MDgwMTAxWhcNMjUxMDIwMDgwMTAxWjAzMTEwLwYDVQQD
Eyg2MjJhMDg3MjM2NTkzNWNhMWYyM2M1MDcxNmEyNGUyNzg5MjhhOWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CycmIJdFoSMkFqXzxccXtXgIhxK
w7gppUaVYOPZ1T3S85RIMqpAr5FIKko7u+ycFYHZOYMXMv+tcaGFb7eTgltfKpAT
2+WG/lSLkfBjJEk4icRTNFmah9DDIwcYq4KJmKWQjiDUFeU53V+pPBWsrZ2sdXjQ
fjN9qHyGMCJ0PMQN0CboY7HYwwV4eYnoPgtfdP0K+LoLdRwLTVSY0HZzeK2rTb/X
u826B74T3tbDZrK9LkyBNe+H1RHOY97L43/7xDBF8moLjNmdHEBVuQmWhi2hoMMu
Y/YBC4W5BFSaT9w8Zk8DV4VEFH1lsOUoF4OFoqO+k075sLF8/cxxvRD58QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIqCHI2WTXKHyPFBxaiTieJKKmkMB8GA1UdIwQY
MBaAFHxnParW2TF/AQHUGgQqYeV2iUU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEt
MDRlNDZlZjBjZDIxLzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEtMDRlNDZlZjBjZDIx
LzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccf2j7W8
Cq4RWatouHVFowsmPUUhTVmZrCoJWo8ylsbtm7z1EEA6w3nnDX0GPSHCalqmaugR
61BjBcdVP67k+jZz93FHWjiccaQQ96Wq1Y3RMlWcxQnt5NAiTcXQUtpT+6yl+/HI
Xfmaq3Vts795Pscu3D1XVYuIuBXmAj3n3FJ73WQulzSnUIYtxjH58TLHNSbZ+v+D
5n5MSYexeT6hTuOPTrmbYkpKyqTVlQo425M33i+m1grFIdTygHtFuF9b/ZBM2ybD
m8A94B/RnS+QNntoQNhQrqLLlhqjLfSWL2p+InzLr5yg4VDn0FW8+0MTSneTs43k
RADEz/59vWPNTA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:54 2025 by rpki-client