
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: gLkq8+a1xzOUx1jkW10eP2i0RbQyxf9a7GyeE0SmHTQ=
Subject key identifier: 5A:72:E2:01:46:1D:27:7C:F2:16:5B:3A:6B:06:18:CF:B6:99:4E:7B
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 0199FB45AD95623B65B3BD2109651FF72B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: 0137
Signing time: Sun 19 Oct 2025 07:01:11 +0000
Manifest this update: Sun 19 Oct 2025 07:01:11 +0000
Manifest next update: Mon 20 Oct 2025 07:01:11 +0000
Files and hashes: 1: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: IwysMD5OjaoLntbIPPavR5e5k65vKvfNbb5JUZr97b8=)
2: jQYNkPm-7PL8fW0UL9FVZuPtO60.roa (hash: KBWJmS4cybTN+ONWvg4jGPD1GVeVDhS/4yiWvoMcO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ad:95:62:3b:65:b3:bd:21:09:65:1f:f7:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Oct 19 07:01:11 2025 GMT
Not After : Oct 20 07:01:11 2025 GMT
Subject: CN=5a72e201461d277cf2165b3a6b0618cfb6994e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:c3:9e:67:ac:62:1f:66:76:65:aa:97:10:
ff:78:c7:b7:5d:a5:f0:aa:2d:e4:65:1f:13:89:86:
4f:8d:79:e8:92:f5:58:58:5c:26:3a:8b:b3:0d:73:
bd:b9:74:0b:85:8c:ae:f8:e3:da:ae:a5:7c:ea:3b:
66:91:a1:e7:02:6c:57:9c:fd:a6:9e:32:ae:1b:d7:
a4:18:d0:3f:e8:07:6d:87:d7:f7:fd:a1:d6:c3:88:
3f:c3:cb:3c:2e:9c:54:e6:0f:0d:e8:ad:40:e2:7e:
b4:fc:76:c0:6f:60:a2:28:50:78:d6:02:2a:90:cc:
38:1b:f8:cb:c1:4d:84:00:90:d3:eb:bf:8e:43:50:
d1:b7:53:a2:8a:17:19:3a:76:80:14:67:33:b3:eb:
b0:74:2a:ff:3b:df:e7:1b:70:db:e4:f6:30:47:ee:
3a:03:22:10:3d:91:81:bb:ad:9e:88:58:3d:91:e9:
f4:5a:75:17:3a:ad:2c:a2:d6:38:25:0e:50:6a:21:
b8:fa:ff:3f:5b:23:3f:34:6f:87:c4:4a:ce:13:04:
13:7d:e2:74:d0:e9:6c:28:c0:aa:d1:d0:55:86:d5:
5c:fe:60:3f:c3:7f:09:8f:82:bf:4d:db:5d:8c:f3:
5a:44:df:63:8b:fb:25:00:4e:23:6c:ce:3b:49:3d:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:E2:01:46:1D:27:7C:F2:16:5B:3A:6B:06:18:CF:B6:99:4E:7B
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:de:78:f8:df:5c:78:f2:29:d6:73:af:31:ea:88:b6:bd:f2:
75:e2:f0:7e:ba:2c:ff:bf:0b:d4:7e:f3:07:e1:c8:25:07:ca:
c1:91:96:67:dd:aa:4e:e2:13:32:dd:3b:d6:47:bb:f8:16:b5:
48:b2:33:52:20:52:c6:c3:a8:c5:2f:d8:26:16:bc:ee:60:91:
75:7b:05:4f:f3:8a:09:51:02:0c:af:60:fe:65:9e:e8:51:77:
e5:dc:75:06:7f:d5:98:73:30:bb:66:17:68:63:e8:5c:6b:9c:
20:4f:f2:93:60:23:a9:8f:c2:d2:9a:ae:16:7d:13:16:40:15:
f4:8d:93:3e:ea:22:07:df:f3:10:98:7e:0e:84:e8:0a:12:fa:
e8:af:29:4b:c1:aa:b1:3b:f9:88:cb:06:0b:47:7e:d4:e0:4a:
17:47:5e:9f:79:d2:f3:66:1f:cf:91:c3:8a:ee:14:16:1d:e0:
3e:60:91:13:e0:c9:38:15:42:a2:a9:f2:79:83:cf:cb:f6:d0:
ba:4e:33:24:3c:1b:c6:46:ab:4c:6d:df:0b:be:f1:e2:ea:a4:
20:12:6d:3d:cf:53:fc:dd:fe:9a:58:47:ef:0c:c4:85:25:b2:
e7:5e:c3:45:07:15:84:e1:5d:01:e1:ab:33:b4:45:d6:26:51:
59:10:ba:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ra2VYjtls70hCWUf9ysNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZmM5MDFkNGEzMDdiZGEwZjNiMGJmNjVkMzEwNDY4MjIw
ZGM1ZTEwHhcNMjUxMDE5MDcwMTExWhcNMjUxMDIwMDcwMTExWjAzMTEwLwYDVQQD
Eyg1YTcyZTIwMTQ2MWQyNzdjZjIxNjViM2E2YjA2MThjZmI2OTk0ZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3bDnmesYh9mdmWqlxD/eMe3XaXw
qi3kZR8TiYZPjXnokvVYWFwmOouzDXO9uXQLhYyu+OParqV86jtmkaHnAmxXnP2m
njKuG9ekGNA/6Adth9f3/aHWw4g/w8s8LpxU5g8N6K1A4n60/HbAb2CiKFB41gIq
kMw4G/jLwU2EAJDT67+OQ1DRt1OiihcZOnaAFGczs+uwdCr/O9/nG3Db5PYwR+46
AyIQPZGBu62eiFg9ken0WnUXOq0sotY4JQ5QaiG4+v8/WyM/NG+HxErOEwQTfeJ0
0OlsKMCq0dBVhtVc/mA/w38Jj4K/TdtdjPNaRN9ji/slAE4jbM47ST2YlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpy4gFGHSd88hZbOmsGGM+2mU57MB8GA1UdIwQY
MBaAFH38kB1KMHvaDzsL9l0xBGgiDcXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hNDc3ZTktNWFkMC00NDNlLWE3NDIt
ODE5MGRkN2MyMWM0LzEvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hNDc3ZTktNWFkMC00NDNlLWE3NDItODE5MGRkN2MyMWM0
LzEvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd54+N9c
ePIp1nOvMeqItr3ydeLwfros/78L1H7zB+HIJQfKwZGWZ92qTuITMt071ke7+Ba1
SLIzUiBSxsOoxS/YJha87mCRdXsFT/OKCVECDK9g/mWe6FF35dx1Bn/VmHMwu2YX
aGPoXGucIE/yk2AjqY/C0pquFn0TFkAV9I2TPuoiB9/zEJh+DoToChL66K8pS8Gq
sTv5iMsGC0d+1OBKF0den3nS82Yfz5HDiu4UFh3gPmCRE+DJOBVCoqnyeYPPy/bQ
uk4zJDwbxkarTG3fC77x4uqkIBJtPc9T/N3+mlhH7wzEhSWy517DRQcVhOFdAeGr
M7RF1iZRWRC6aw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:36 2025 by rpki-client