Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: s8vLy8V4uq+kJ9GXbG87Zz1Cg3VF8VR2kO0QA3xb+E8=
Subject key identifier: 27:AD:A5:F8:3E:F2:75:93:45:47:00:C8:B9:60:3F:D2:F7:E0:F2:F1
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0199FFC8B9E7EACA68602F9B088A27B10C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 081B
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: LZ4InM3nXMouNN0ipVzVQYIbST7vaYJyXaZxRgEOk28=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b9:e7:ea:ca:68:60:2f:9b:08:8a:27:b1:0c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=27ada5f83ef27593454700c8b9603fd2f7e0f2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:be:a0:81:38:b9:35:91:b9:bc:d4:9d:ab:
28:e4:73:32:57:17:e4:39:48:ab:9e:00:e3:ae:ae:
02:3b:ad:a4:28:e9:ef:1a:b8:e1:24:4f:59:7e:4b:
44:9d:93:d7:b8:f6:2b:8f:c2:ee:8c:94:36:45:2d:
98:fd:3e:e2:3c:82:b3:a4:0a:28:08:63:db:f9:55:
8f:17:9d:51:fb:57:14:68:40:9f:78:60:32:d4:a1:
3e:53:b4:e2:04:f4:47:a3:5a:71:0c:80:0e:ec:33:
7f:71:5f:14:f6:85:c0:b6:e2:f6:36:0f:ed:84:6b:
5d:89:78:c7:e6:21:c3:3d:84:cb:26:ed:1b:e9:bf:
1f:ea:c3:da:77:cd:a9:29:55:43:4a:50:f5:9e:32:
ea:00:db:a8:e7:36:7a:5a:47:84:38:c7:30:c7:b6:
7c:46:57:57:89:82:7c:86:95:25:65:da:e9:73:88:
32:03:ba:43:1c:19:2a:55:d3:c8:76:89:04:1f:42:
a3:5a:46:cf:3e:9c:e2:9d:95:5c:08:f7:46:a6:ae:
80:5e:ab:a4:87:8f:d8:4a:a1:f7:0b:06:75:4a:2b:
5d:1b:43:4c:e8:1d:41:15:fd:a3:1b:2f:3e:dd:61:
60:b8:f3:d5:c6:65:f7:cc:ea:c8:fe:e8:ff:1e:f7:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:A5:F8:3E:F2:75:93:45:47:00:C8:B9:60:3F:D2:F7:E0:F2:F1
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:dc:3a:8b:33:58:81:42:48:71:c5:9d:45:23:4f:e4:e7:
60:6e:f2:6a:2f:96:9b:c6:56:fa:d0:d1:a5:ad:5b:04:69:74:
61:19:75:3b:fe:bc:28:3d:37:2e:73:e4:a0:f9:9f:60:db:6c:
86:2e:00:94:ec:dd:68:dc:42:c1:e6:44:be:7a:d9:82:dd:74:
ff:9c:96:ad:5e:12:59:d3:90:cd:ae:61:ad:1d:f7:a2:f1:32:
37:47:f2:1b:12:9d:55:cf:39:7c:f9:15:72:22:c7:91:4f:ec:
aa:6a:74:ad:34:46:0b:9a:c7:4e:13:47:fd:55:07:21:08:c3:
d2:70:30:d8:90:63:32:23:60:74:88:00:f6:88:eb:ba:cf:ff:
d8:bb:57:31:de:6e:9a:34:47:c7:3c:25:6d:af:ee:7f:a7:a8:
9f:9b:be:bd:45:0a:e4:b5:99:ab:0d:df:22:f0:4c:20:e6:4d:
03:1c:2c:c2:39:6c:d5:32:be:35:c5:43:74:2a:fc:ad:1b:34:
fd:68:21:e2:f6:d9:c8:08:b0:9d:a6:b3:a0:51:d9:a0:2f:4e:
fe:75:ad:35:44:e7:96:c8:2b:21:6a:67:e1:72:e2:b6:e8:74:
48:79:62:9f:65:25:98:6a:02:4e:53:62:55:2d:34:2c:e4:db:
1e:46:ca:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yLnn6spoYC+bCIonsQw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjUxMDIwMDQwMjQ4WhcNMjUxMDIxMDQwMjQ4WjAzMTEwLwYDVQQD
EygyN2FkYTVmODNlZjI3NTkzNDU0NzAwYzhiOTYwM2ZkMmY3ZTBmMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hq+oIE4uTWRubzUnaso5HMyVxfk
OUirngDjrq4CO62kKOnvGrjhJE9ZfktEnZPXuPYrj8LujJQ2RS2Y/T7iPIKzpAoo
CGPb+VWPF51R+1cUaECfeGAy1KE+U7TiBPRHo1pxDIAO7DN/cV8U9oXAtuL2Ng/t
hGtdiXjH5iHDPYTLJu0b6b8f6sPad82pKVVDSlD1njLqANuo5zZ6WkeEOMcwx7Z8
RldXiYJ8hpUlZdrpc4gyA7pDHBkqVdPIdokEH0KjWkbPPpzinZVcCPdGpq6AXquk
h4/YSqH3CwZ1SitdG0NM6B1BFf2jGy8+3WFguPPVxmX3zOrI/uj/HvfovQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCetpfg+8nWTRUcAyLlgP9L34PLxMB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJDcOosz
WIFCSHHFnUUjT+TnYG7yai+Wm8ZW+tDRpa1bBGl0YRl1O/68KD03LnPkoPmfYNts
hi4AlOzdaNxCweZEvnrZgt10/5yWrV4SWdOQza5hrR33ovEyN0fyGxKdVc85fPkV
ciLHkU/sqmp0rTRGC5rHThNH/VUHIQjD0nAw2JBjMiNgdIgA9ojrus//2LtXMd5u
mjRHxzwlba/uf6eon5u+vUUK5LWZqw3fIvBMIOZNAxwswjls1TK+NcVDdCr8rRs0
/Wgh4vbZyAiwnaazoFHZoC9O/nWtNUTnlsgrIWpn4XLituh0SHlin2UlmGoCTlNi
VS00LOTbHkbK7w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:27 2025 by rpki-client