Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File: F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier: 4Vt9xWMnfkqJwuATKhrQQ6LmOOe0WPxQ70hPltv8a3c=
Subject key identifier: 36:AA:A7:A8:2B:8F:35:BA:F6:09:02:02:61:BD:A0:82:A1:E8:CA:C6
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial: 0199FD345353CFAAD1AA2AE45ABA5C4078CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number: 0160
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: WkVAyifNX9JTl3ssfWYYF6lduY2+UgIJK1TsDJrn7qA=)
2: KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa (hash: FzqITUktotdSEgzJPKi/MbN0jwrtNR+ishuw7Jc2ADw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:53:53:cf:aa:d1:aa:2a:e4:5a:ba:5c:40:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=36aaa7a82b8f35baf609020261bda082a1e8cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:0b:8f:4e:0f:44:c7:57:8e:0e:4c:a9:23:
ba:72:da:91:7d:f6:14:67:33:c6:9d:12:1e:3e:46:
42:a9:16:d0:30:8c:7a:5b:7c:ed:09:30:9b:ae:42:
46:b4:97:4c:89:49:74:29:f6:9f:3d:fc:ef:7f:7c:
eb:0a:88:d1:00:a2:25:34:36:95:a1:ab:d8:9c:be:
31:c9:60:19:92:f8:3d:e4:52:4e:9a:0f:f7:e1:c0:
e3:bb:33:58:48:2b:ef:15:37:47:61:a0:40:18:c6:
19:5e:ec:c8:1e:21:e5:b4:f4:10:74:22:69:0f:d8:
0a:7c:4e:c9:66:88:97:b5:3f:88:5d:17:2b:43:37:
db:7b:5d:bf:59:27:a6:b4:e6:a4:4c:cf:96:ce:c5:
9e:5d:f3:f8:9b:d5:04:45:c8:7b:57:ef:63:6f:a1:
0f:16:39:c0:aa:da:09:1e:cf:4a:a8:d1:39:4e:5e:
c6:24:4d:90:95:4b:72:59:5e:32:0a:d7:50:60:62:
fb:6c:ef:ed:6a:ec:e2:a2:40:54:97:9d:bb:ed:04:
5d:c1:b5:85:28:65:d4:7a:0e:51:b5:f2:d0:a5:31:
50:c6:b3:45:77:fc:26:ca:bc:10:05:ce:82:bc:ba:
3c:35:db:46:7f:60:d3:de:3e:c2:90:0e:99:e6:ed:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:A7:A8:2B:8F:35:BA:F6:09:02:02:61:BD:A0:82:A1:E8:CA:C6
X509v3 Authority Key Identifier:
keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:01:bd:91:1a:4e:35:20:b5:79:15:fb:ad:9e:b2:02:d0:
cc:05:d0:9a:af:3d:fc:7a:0a:75:8f:84:0d:8f:06:d5:db:53:
72:21:0c:21:4d:e0:3b:32:47:9b:92:0b:c6:9e:d9:7e:3b:7c:
bc:bd:f2:c5:a5:a9:e6:83:c1:6f:02:ef:f6:61:fd:00:69:de:
c8:af:0d:82:ce:7a:b7:0a:73:3f:82:c4:57:77:3c:34:9e:2f:
99:69:82:ea:c4:b3:d5:7b:ba:ae:8e:d2:4e:07:39:57:0b:09:
65:6c:27:86:b9:ed:b3:76:1d:84:e6:f9:15:04:92:4c:a9:53:
fd:2a:9c:26:39:41:71:0a:60:75:32:25:20:e8:3b:b8:c9:24:
e6:64:a0:e3:0c:f2:96:77:bd:21:33:5f:a3:5a:31:88:f1:07:
3e:15:4c:e4:26:d6:19:c6:e6:4f:98:9b:1e:ee:93:8e:a3:d7:
9b:89:02:66:f3:c9:d5:8f:d1:82:5c:cc:2a:09:4a:7d:92:49:
3f:45:b2:03:ea:c3:dc:8f:61:0c:a7:19:5f:4b:58:46:46:6e:
e8:c8:c4:92:29:57:1e:63:d3:c8:f7:6e:2b:81:90:45:fb:2e:
cf:6b:f5:40:98:ae:c7:02:eb:51:74:ab:93:b7:df:f0:77:d1:
2f:23:f2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFNTz6rRqirkWrpcQHjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YWNkZjZiMzcwY2YxMDRjODcyY2M0ZGJhZWI3MzcxYjJm
N2M2OGEwHhcNMjUxMDE5MTYwMTI4WhcNMjUxMDIwMTYwMTI4WjAzMTEwLwYDVQQD
EygzNmFhYTdhODJiOGYzNWJhZjYwOTAyMDI2MWJkYTA4MmExZThjYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMLj04PRMdXjg5MqSO6ctqRffYU
ZzPGnRIePkZCqRbQMIx6W3ztCTCbrkJGtJdMiUl0KfafPfzvf3zrCojRAKIlNDaV
oavYnL4xyWAZkvg95FJOmg/34cDjuzNYSCvvFTdHYaBAGMYZXuzIHiHltPQQdCJp
D9gKfE7JZoiXtT+IXRcrQzfbe12/WSemtOakTM+WzsWeXfP4m9UERch7V+9jb6EP
FjnAqtoJHs9KqNE5Tl7GJE2QlUtyWV4yCtdQYGL7bO/tauziokBUl5277QRdwbWF
KGXUeg5RtfLQpTFQxrNFd/wmyrwQBc6CvLo8NdtGf2DT3j7CkA6Z5u2zjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaqp6grjzW69gkCAmG9oIKh6MrGMB8GA1UdIwQY
MBaAFBes32s3DPEEyHLMTbrrc3Gy98aKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYt
ZGZjODVhZTM3OWQ0LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYtZGZjODVhZTM3OWQ0
LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih4BvZEa
TjUgtXkV+62esgLQzAXQmq89/HoKdY+EDY8G1dtTciEMIU3gOzJHm5ILxp7Zfjt8
vL3yxaWp5oPBbwLv9mH9AGneyK8Ngs56twpzP4LEV3c8NJ4vmWmC6sSz1Xu6ro7S
Tgc5VwsJZWwnhrnts3YdhOb5FQSSTKlT/SqcJjlBcQpgdTIlIOg7uMkk5mSg4wzy
lne9ITNfo1oxiPEHPhVM5CbWGcbmT5ibHu6TjqPXm4kCZvPJ1Y/RglzMKglKfZJJ
P0WyA+rD3I9hDKcZX0tYRkZu6MjEkilXHmPTyPduK4GQRfsuz2v1QJiuxwLrUXSr
k7ff8HfRLyPyIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:58 2025 by rpki-client