Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: 2d4+4vv5CTuFCpneqNNps9Wy9yikMtLion93RwH/ZTc=
Subject key identifier: EE:43:F6:63:B4:09:0B:CB:13:E3:CB:55:D7:87:B5:93:DA:EF:B5:68
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0199FC214A0F77EB3CA0E8C19E0C6A045AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0CD1
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: GySrDWZpcW43Z7gxsEMuoetk+PWMk5sr82AImnBe4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4a:0f:77:eb:3c:a0:e8:c1:9e:0c:6a:04:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=ee43f663b4090bcb13e3cb55d787b593daefb568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:1c:9a:ea:c6:7b:6b:02:c0:b6:de:29:19:
ea:4b:34:e5:f9:76:5b:e3:e7:94:4d:bf:13:97:aa:
d1:47:67:38:69:c8:27:43:27:d8:fe:48:cf:79:b4:
62:b9:fa:2c:b0:e1:4f:f1:c9:a3:01:45:52:6a:3b:
52:ed:c9:67:8c:69:4c:68:89:a9:f6:9d:3c:2e:3a:
e2:41:8f:4f:f3:09:d0:8d:b6:f3:01:76:71:04:8f:
43:81:ef:5c:75:e4:de:63:02:f4:68:68:0c:c1:80:
ff:1e:cb:3e:c3:d8:62:49:f8:41:a7:f0:66:10:13:
fe:41:e5:88:7f:4c:4d:82:82:37:92:6b:d3:ea:26:
71:81:4d:a4:d1:33:7e:bb:ac:c4:37:5c:aa:ef:a0:
4e:dd:19:74:fa:05:87:05:c2:f9:4d:81:af:1a:c2:
e5:e2:61:7b:f7:f2:61:8d:ae:22:55:7b:e8:3e:99:
e4:9d:46:4a:ed:56:9d:86:3a:61:57:88:23:22:a8:
bf:fd:4e:ec:b5:7d:79:a8:69:e7:b7:26:64:a3:3a:
4b:b6:bb:7d:e1:d5:6c:1b:6e:12:dc:f9:0e:48:ce:
d3:5d:02:f1:0b:76:fa:d7:1c:88:8f:8a:4c:f4:bb:
40:cf:7b:a7:2d:00:e8:6d:5c:22:2b:c3:2e:79:64:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:F6:63:B4:09:0B:CB:13:E3:CB:55:D7:87:B5:93:DA:EF:B5:68
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:72:43:8d:51:50:ed:c9:2d:6a:62:73:91:28:35:56:67:cb:
4a:87:c3:c8:c8:3d:6b:fd:42:36:81:e4:b3:5a:f4:d4:c7:21:
9b:72:81:63:50:16:1d:bf:f0:b8:86:c1:a1:f8:4a:38:61:ee:
d2:b9:e6:86:c6:47:19:18:e5:31:b4:e5:31:2e:5a:dd:9c:71:
ad:40:be:da:bd:e9:21:d6:44:59:bd:82:8d:18:9a:e8:77:ac:
74:7c:60:af:d2:a1:93:0e:ee:f6:17:23:9e:3f:ca:08:9a:e0:
f4:6d:11:57:98:92:ca:90:18:f2:f9:d1:63:73:86:16:2a:20:
fc:95:9d:b1:6d:85:04:ea:20:52:77:6a:34:8c:84:f5:4d:90:
d3:a9:10:4b:fd:f2:d6:a6:c5:42:6e:68:ae:30:82:bc:d2:31:
5e:ca:32:51:e4:d9:28:dd:d6:79:4f:98:f2:7d:e0:98:69:c0:
b3:28:c2:7e:05:c5:7c:5c:99:94:ec:a2:68:31:ae:b4:0f:f5:
fa:82:e2:2c:23:65:47:ba:d8:e2:aa:99:69:3d:bf:0a:ae:6e:
c2:61:b3:17:9c:2b:29:fb:b1:9d:55:2a:f3:db:11:8c:fa:6c:
26:9e:86:3e:86:a4:69:09:cf:57:ad:cd:12:f2:46:d6:e8:e5:
7d:86:06:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUoPd+s8oOjBngxqBFr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMzUzMmU1MmVhYWZlZjk0OGM0MmM4YjFkNTExNDVjYWM5
ZDRjOTYwHhcNMjUxMDE5MTEwMTA0WhcNMjUxMDIwMTEwMTA0WjAzMTEwLwYDVQQD
EyhlZTQzZjY2M2I0MDkwYmNiMTNlM2NiNTVkNzg3YjU5M2RhZWZiNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0cmurGe2sCwLbeKRnqSzTl+XZb
4+eUTb8Tl6rRR2c4acgnQyfY/kjPebRiufossOFP8cmjAUVSajtS7clnjGlMaImp
9p08LjriQY9P8wnQjbbzAXZxBI9Dge9cdeTeYwL0aGgMwYD/Hss+w9hiSfhBp/Bm
EBP+QeWIf0xNgoI3kmvT6iZxgU2k0TN+u6zEN1yq76BO3Rl0+gWHBcL5TYGvGsLl
4mF79/Jhja4iVXvoPpnknUZK7VadhjphV4gjIqi//U7stX15qGnntyZkozpLtrt9
4dVsG24S3PkOSM7TXQLxC3b61xyIj4pM9LtAz3unLQDobVwiK8MueWQCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5D9mO0CQvLE+PLVdeHtZPa77VoMB8GA1UdIwQY
MBaAFHw1MuUuqv75SMQsix1RFFysnUyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUt
NTY0ZWJkY2YzZjk2LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUtNTY0ZWJkY2YzZjk2
LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnJDjVFQ
7cktamJzkSg1VmfLSofDyMg9a/1CNoHks1r01Mchm3KBY1AWHb/wuIbBofhKOGHu
0rnmhsZHGRjlMbTlMS5a3ZxxrUC+2r3pIdZEWb2CjRia6HesdHxgr9Khkw7u9hcj
nj/KCJrg9G0RV5iSypAY8vnRY3OGFiog/JWdsW2FBOogUndqNIyE9U2Q06kQS/3y
1qbFQm5orjCCvNIxXsoyUeTZKN3WeU+Y8n3gmGnAsyjCfgXFfFyZlOyiaDGutA/1
+oLiLCNlR7rY4qqZaT2/Cq5uwmGzF5wrKfuxnVUq89sRjPpsJp6GPoakaQnPV63N
EvJG1ujlfYYGVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:35 2025 by rpki-client