
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier: zGq37nMV1NPGeU2ka5yk8+D4VDRZp5J8FW3gMSz/Fnk=
Subject key identifier: 40:3B:A4:61:B2:EB:B9:F1:2D:22:7F:41:11:F8:DE:1B:E0:BF:94:AC
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial: 0199FE470B2738AD7AE669A4F8A892119CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number: 063F
Signing time: Sun 19 Oct 2025 21:01:32 +0000
Manifest this update: Sun 19 Oct 2025 21:01:32 +0000
Manifest next update: Mon 20 Oct 2025 21:01:32 +0000
Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: bD2qCzoUI4gacQMD/t4vVxzRmZ68Jl3zjSk9IgDpESU=)
2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0b:27:38:ad:7a:e6:69:a4:f8:a8:92:11:9c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
Validity
Not Before: Oct 19 21:01:32 2025 GMT
Not After : Oct 20 21:01:32 2025 GMT
Subject: CN=403ba461b2ebb9f12d227f4111f8de1be0bf94ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:a3:34:aa:ff:79:bb:7b:b9:36:4a:b3:5d:
c3:3f:27:5d:f8:bf:61:eb:11:ce:12:22:c0:4a:87:
8b:4d:e3:d7:36:6e:bc:77:89:f9:cd:3d:9f:b3:29:
4c:fa:22:4f:f5:91:87:1f:41:df:de:db:a2:fa:89:
f9:5d:63:88:bd:7c:96:e3:68:51:dd:3c:a0:45:dc:
3b:7b:4a:8b:fa:d5:50:6c:d4:13:ae:72:d8:3f:46:
2c:f0:e4:8a:c0:b4:ae:48:71:77:bd:2d:09:99:93:
90:19:d3:32:57:06:4a:b4:ca:2e:3a:e0:28:f3:dd:
a3:71:8c:df:a4:d9:57:a5:5a:42:0f:4a:4a:aa:df:
8d:82:b9:d6:f9:ff:0a:22:43:08:0c:c6:70:56:de:
4e:13:ae:99:14:82:3c:19:94:0c:f2:8c:02:af:1d:
35:12:7c:09:60:c1:be:cb:c6:72:f2:99:b4:c5:bd:
73:64:e3:bd:0b:1c:ae:c7:a3:7c:84:57:ab:e9:4c:
db:16:20:20:04:a9:fb:ba:b4:d7:64:3b:5b:f2:63:
85:58:9f:e6:0f:0d:c4:9e:b7:84:4c:e1:b7:a9:b2:
f7:25:ab:23:62:76:55:17:8c:81:65:7e:8d:c3:a5:
28:41:96:8b:36:24:cf:45:5b:ac:74:74:5f:b8:6c:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:A4:61:B2:EB:B9:F1:2D:22:7F:41:11:F8:DE:1B:E0:BF:94:AC
X509v3 Authority Key Identifier:
keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c9:ec:f5:3d:ce:07:f2:e9:fc:50:3e:70:ea:93:5f:17:5a:
c8:52:bb:9c:44:34:b2:2b:29:46:92:c4:27:80:5a:0d:6e:93:
3b:97:80:d8:f9:fb:ca:b5:b0:b8:d5:05:cb:1a:6d:34:5a:3e:
03:e2:82:d9:38:4a:4f:17:19:96:fe:14:82:ca:9b:02:6c:6e:
16:32:b0:19:53:87:f4:81:d4:3a:84:fd:88:5c:b9:3e:45:6f:
0c:fb:a3:67:9a:0d:88:8a:e0:72:a0:48:ba:db:5a:a2:c8:37:
b8:3b:62:d4:39:3d:03:ee:27:2f:30:e0:1e:4d:e8:f3:85:b6:
99:e4:44:9c:d7:95:a8:7a:38:6c:32:98:60:8e:ab:eb:9e:a4:
a7:8f:c2:17:6a:d8:33:f2:7f:26:89:f2:7b:44:7c:92:82:47:
d9:69:55:14:e7:38:b4:3a:eb:8d:b6:4a:f3:4f:0d:48:21:6d:
73:d1:df:c4:7f:4e:a3:f6:20:9f:52:6b:43:90:b5:34:01:93:
0f:f6:a1:f9:cd:f0:78:75:d0:bc:79:63:04:eb:cc:fc:d2:a5:
f6:2c:52:6a:fe:ab:cc:07:52:43:99:5e:dc:12:31:fc:3a:43:
9b:fe:8c:4d:15:fc:d1:c7:8c:be:9e:08:38:e7:40:34:b2:73:
26:76:6f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RwsnOK165mmk+KiSEZz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk
ZDUxOTIwHhcNMjUxMDE5MjEwMTMyWhcNMjUxMDIwMjEwMTMyWjAzMTEwLwYDVQQD
Eyg0MDNiYTQ2MWIyZWJiOWYxMmQyMjdmNDExMWY4ZGUxYmUwYmY5NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI+jNKr/ebt7uTZKs13DPydd+L9h
6xHOEiLASoeLTePXNm68d4n5zT2fsylM+iJP9ZGHH0Hf3tui+on5XWOIvXyW42hR
3TygRdw7e0qL+tVQbNQTrnLYP0Ys8OSKwLSuSHF3vS0JmZOQGdMyVwZKtMouOuAo
892jcYzfpNlXpVpCD0pKqt+NgrnW+f8KIkMIDMZwVt5OE66ZFII8GZQM8owCrx01
EnwJYMG+y8Zy8pm0xb1zZOO9Cxyux6N8hFer6UzbFiAgBKn7urTXZDtb8mOFWJ/m
Dw3EnreETOG3qbL3JasjYnZVF4yBZX6Nw6UoQZaLNiTPRVusdHRfuGySLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA7pGGy67nxLSJ/QRH43hvgv5SsMB8GA1UdIwQY
MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt
OTBmNjcxOWU2N2I5LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5
LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsns9T3O
B/Lp/FA+cOqTXxdayFK7nEQ0sispRpLEJ4BaDW6TO5eA2Pn7yrWwuNUFyxptNFo+
A+KC2ThKTxcZlv4UgsqbAmxuFjKwGVOH9IHUOoT9iFy5PkVvDPujZ5oNiIrgcqBI
uttaosg3uDti1Dk9A+4nLzDgHk3o84W2meREnNeVqHo4bDKYYI6r656kp4/CF2rY
M/J/Jonye0R8koJH2WlVFOc4tDrrjbZK808NSCFtc9HfxH9Oo/Ygn1JrQ5C1NAGT
D/ah+c3weHXQvHljBOvM/NKl9ixSav6rzAdSQ5le3BIx/DpDm/6MTRX80ceMvp4I
OOdANLJzJnZvXQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:59 2025 by rpki-client