Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: tTksfBguWylIycBGJ7xG8T9KG5Y6kxMz8Yct5jgSK54=
Subject key identifier: FF:B0:0C:A9:FF:BF:26:58:7B:FF:FC:F2:50:47:16:6B:01:C0:11:B8
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019A0147A706C6081758D0F84DB95643C601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0944
Signing time: Mon 20 Oct 2025 11:01:04 +0000
Manifest this update: Mon 20 Oct 2025 11:01:04 +0000
Manifest next update: Tue 21 Oct 2025 11:01:04 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: nMeFUs9R81UcuLnhpNsmaCUq/mu6HiaD65BKK5QE0Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:a7:06:c6:08:17:58:d0:f8:4d:b9:56:43:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Oct 20 11:01:04 2025 GMT
Not After : Oct 21 11:01:04 2025 GMT
Subject: CN=ffb00ca9ffbf26587bfffcf25047166b01c011b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:15:9f:5b:55:7f:49:53:f3:e7:5b:d3:46:
d9:5a:c6:43:37:84:3e:02:8c:33:26:7a:29:b4:b9:
2a:7b:2b:4b:4e:9b:f9:5d:49:35:74:af:e1:04:da:
3c:fb:41:43:f6:83:13:7c:ef:05:6e:b7:11:c9:42:
b7:34:05:8b:9e:f5:64:84:7a:fc:37:17:57:a2:26:
d5:af:9f:3d:24:46:db:e9:ef:73:0e:3f:25:7b:90:
0b:a5:e0:24:48:44:63:44:f9:10:3d:29:a5:f4:d7:
fd:2f:7a:88:21:d0:5e:1f:02:56:a4:38:c8:55:df:
23:63:96:8b:6a:c9:fe:8a:0d:a1:9a:0b:40:c9:d3:
7f:d3:fb:7c:1b:04:ad:25:d1:e2:8b:d9:2d:28:ed:
a6:17:f5:24:ec:1d:09:40:64:8d:a0:08:42:4b:02:
3e:7a:88:b7:2c:6c:7a:ea:1e:aa:94:15:3e:da:6b:
01:c0:b3:e2:ed:1d:e4:bd:9a:16:8a:ea:b8:96:0d:
0f:af:b1:12:6c:fe:41:6d:d9:8d:6d:08:50:04:ee:
7e:25:a8:65:61:ef:a8:d7:d0:48:4e:00:0f:55:3e:
ce:b6:f3:dd:cb:59:77:bb:77:53:16:77:c5:c3:d1:
c9:0c:6c:c9:6b:31:35:b9:48:10:d6:9f:69:f1:fe:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:0C:A9:FF:BF:26:58:7B:FF:FC:F2:50:47:16:6B:01:C0:11:B8
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:a4:ad:2d:d8:08:0d:7c:26:94:90:20:ab:5a:d7:fd:70:
0d:f7:02:e5:59:89:38:2c:25:3b:81:d1:18:ee:08:1d:0b:5a:
42:4e:29:b6:f2:67:16:16:36:91:d3:52:f2:78:8f:b4:87:e6:
14:9d:a7:2c:8d:6a:dd:0a:fc:8f:6f:dc:f7:2c:02:18:07:14:
a6:2e:dd:e5:cd:97:ce:bb:41:c2:2f:56:90:a1:1e:21:83:9e:
90:e0:4f:a3:e8:97:c8:52:76:04:99:ce:fb:a5:1f:72:41:a8:
2a:ec:ae:ce:f7:34:91:01:e2:70:f1:ae:02:aa:ed:ca:38:f0:
4b:2c:89:04:42:d6:bb:02:23:81:dc:e8:ef:04:41:10:82:1f:
f3:1c:d8:bc:f5:68:43:a8:ca:27:18:6b:b2:23:51:97:c6:64:
30:89:5c:26:21:f8:f6:c3:47:00:49:a6:83:2d:bd:55:8c:7a:
e5:29:09:5b:86:25:a3:48:1c:fd:85:c4:b3:d4:85:2b:1d:57:
bd:01:87:ad:c6:15:e3:ce:83:cd:2a:01:7d:d4:c6:70:37:8f:
45:e3:0c:b4:f1:70:63:c6:7e:9f:3e:bf:01:75:b4:fc:c1:ad:
c9:ad:11:2f:94:51:42:8a:2b:bc:0e:56:68:65:7c:30:54:be:
d1:e9:09:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR6cGxggXWND4TblWQ8YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl
MGIxODMwHhcNMjUxMDIwMTEwMTA0WhcNMjUxMDIxMTEwMTA0WjAzMTEwLwYDVQQD
EyhmZmIwMGNhOWZmYmYyNjU4N2JmZmZjZjI1MDQ3MTY2YjAxYzAxMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC4Vn1tVf0lT8+db00bZWsZDN4Q+
AowzJnoptLkqeytLTpv5XUk1dK/hBNo8+0FD9oMTfO8FbrcRyUK3NAWLnvVkhHr8
NxdXoibVr589JEbb6e9zDj8le5ALpeAkSERjRPkQPSml9Nf9L3qIIdBeHwJWpDjI
Vd8jY5aLasn+ig2hmgtAydN/0/t8GwStJdHii9ktKO2mF/Uk7B0JQGSNoAhCSwI+
eoi3LGx66h6qlBU+2msBwLPi7R3kvZoWiuq4lg0Pr7ESbP5BbdmNbQhQBO5+Jahl
Ye+o19BITgAPVT7OtvPdy1l3u3dTFnfFw9HJDGzJazE1uUgQ1p9p8f7ZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+wDKn/vyZYe//88lBHFmsBwBG4MB8GA1UdIwQY
MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt
ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2
LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3ykrS3Y
CA18JpSQIKta1/1wDfcC5VmJOCwlO4HRGO4IHQtaQk4ptvJnFhY2kdNS8niPtIfm
FJ2nLI1q3Qr8j2/c9ywCGAcUpi7d5c2XzrtBwi9WkKEeIYOekOBPo+iXyFJ2BJnO
+6UfckGoKuyuzvc0kQHicPGuAqrtyjjwSyyJBELWuwIjgdzo7wRBEIIf8xzYvPVo
Q6jKJxhrsiNRl8ZkMIlcJiH49sNHAEmmgy29VYx65SkJW4Ylo0gc/YXEs9SFKx1X
vQGHrcYV486DzSoBfdTGcDePReMMtPFwY8Z+nz6/AXW0/MGtya0RL5RRQoorvA5W
aGV8MFS+0ekJFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:43 2025 by rpki-client