Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: VXPklqZX9U20RHXNiw1b1Ne+hvHpyXBhEd96OO+3JRk=
Subject key identifier: 62:FE:7E:94:A4:BE:07:D8:57:42:A3:9F:2A:E4:AF:11:9B:5C:AC:A0
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 0199FC5827A868C5462F150AFBA3189FAAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 10A0
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: TACqVPB34UA/KD0SGXJI/rIG6cdUHIeMokyZTMCSx08=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:27:a8:68:c5:46:2f:15:0a:fb:a3:18:9f:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=62fe7e94a4be07d85742a39f2ae4af119b5caca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:59:a4:cc:7b:9d:a6:8c:71:5a:92:3c:f5:
1e:7d:68:c1:12:1e:7c:d0:63:a8:a4:2b:08:cc:99:
6e:be:8d:ce:9c:b4:54:3a:57:5d:6a:0b:1f:31:c1:
f0:4f:67:c8:03:28:b3:2b:5d:95:7c:1b:49:20:13:
bd:47:ec:da:de:56:0f:54:e7:40:65:1c:8d:90:fc:
2c:d8:ec:31:11:cb:59:f8:94:1d:2c:14:a1:12:f8:
8c:8f:44:dd:92:69:e5:0c:10:99:e7:f1:b9:44:df:
61:c2:f9:5c:39:68:73:6b:aa:8f:60:25:9e:c4:35:
9f:15:24:17:95:c5:16:bf:c5:39:d9:16:aa:78:f7:
dc:38:83:1a:3a:f8:ff:cd:81:5a:f6:93:a8:6e:30:
80:d8:9c:6e:ba:b5:65:72:91:76:ff:c0:e8:88:0b:
d2:43:25:df:a9:f0:3e:d2:d3:ba:a6:3c:20:59:20:
b0:0e:c1:e8:99:c7:53:9e:cf:cb:68:e3:05:ce:2e:
5f:18:be:4a:d8:a4:be:b5:f5:e4:f3:5f:69:95:79:
96:d8:30:61:30:2a:9d:16:ef:ef:22:6c:0a:8b:b4:
31:b3:23:ea:07:de:e0:9a:10:2b:01:39:2d:1b:2e:
f6:43:cd:03:5e:bd:ad:96:1b:0d:3a:bd:7b:07:aa:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:7E:94:A4:BE:07:D8:57:42:A3:9F:2A:E4:AF:11:9B:5C:AC:A0
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:47:fa:fd:a7:1d:9c:c6:63:9a:0c:ec:c5:e9:26:82:4a:37:
29:a7:85:d4:2f:32:6e:cb:94:87:7b:24:27:46:c9:2f:b2:96:
db:98:ef:67:c2:b8:69:3d:45:c4:2a:92:af:b1:16:4f:1e:02:
e3:78:d9:dc:79:85:52:09:fb:e8:40:15:1e:d1:f2:68:c2:8b:
9f:18:9f:29:70:71:24:93:72:a9:56:8f:f5:bc:75:f0:31:56:
38:0c:f8:ed:9e:46:82:81:f3:a2:de:c4:d1:e8:1c:9b:16:41:
34:22:91:da:70:5c:a8:bc:71:67:6f:65:c2:41:72:19:75:77:
94:1c:06:18:60:15:a4:bf:e7:85:5e:d5:bb:fc:17:a6:d2:9c:
47:b9:e2:c1:e8:16:8c:59:77:fa:5f:da:6d:28:5b:97:6d:a8:
51:98:41:56:08:10:16:4f:ee:6a:bc:8d:bf:0f:4b:d3:c3:02:
8a:be:e2:d3:21:f8:66:c5:73:f5:b4:19:d8:a3:18:06:0c:b0:
75:ba:97:23:9c:ce:2c:ee:c8:92:af:c0:a4:46:4c:0c:35:5a:
7e:25:c0:b5:14:c7:7b:f6:92:d9:7b:1c:07:89:7b:af:4c:99:
14:93:a7:c6:c5:f5:f5:94:bf:e5:af:96:d8:f4:a8:76:f8:a8:
a3:13:e1:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WCeoaMVGLxUK+6MYn6rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1
NTdiYjkwHhcNMjUxMDE5MTIwMDU5WhcNMjUxMDIwMTIwMDU5WjAzMTEwLwYDVQQD
Eyg2MmZlN2U5NGE0YmUwN2Q4NTc0MmEzOWYyYWU0YWYxMTliNWNhY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcNZpMx7naaMcVqSPPUefWjBEh58
0GOopCsIzJluvo3OnLRUOlddagsfMcHwT2fIAyizK12VfBtJIBO9R+za3lYPVOdA
ZRyNkPws2OwxEctZ+JQdLBShEviMj0TdkmnlDBCZ5/G5RN9hwvlcOWhza6qPYCWe
xDWfFSQXlcUWv8U52RaqePfcOIMaOvj/zYFa9pOobjCA2JxuurVlcpF2/8DoiAvS
QyXfqfA+0tO6pjwgWSCwDsHomcdTns/LaOMFzi5fGL5K2KS+tfXk819plXmW2DBh
MCqdFu/vImwKi7QxsyPqB97gmhArATktGy72Q80DXr2tlhsNOr17B6qs4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGL+fpSkvgfYV0KjnyrkrxGbXKygMB8GA1UdIwQY
MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2
LTY4NmEwMTg4OGQyOS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk2LzY4ZmJhZi00NWYxLTQ5NDYtYTM0Ni02ODZhMDE4ODhk
MjkvMS8xLXp1enRLdHZfMWlOMjB6eXItYlZyRVpWZTdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkf6
/acdnMZjmgzsxekmgko3KaeF1C8ybsuUh3skJ0bJL7KW25jvZ8K4aT1FxCqSr7EW
Tx4C43jZ3HmFUgn76EAVHtHyaMKLnxifKXBxJJNyqVaP9bx18DFWOAz47Z5GgoHz
ot7E0egcmxZBNCKR2nBcqLxxZ29lwkFyGXV3lBwGGGAVpL/nhV7Vu/wXptKcR7ni
wegWjFl3+l/abShbl22oUZhBVggQFk/uaryNvw9L08MCir7i0yH4ZsVz9bQZ2KMY
BgywdbqXI5zOLO7Ikq/ApEZMDDVafiXAtRTHe/aS2XscB4l7r0yZFJOnxsX19ZS/
5a+W2PSodviooxPh9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:47 2025 by rpki-client