
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: KY36tbCEFW3NvcEW85FQ034jA7Pp6Eh7X4e5W277mJg=
Subject key identifier: 27:C6:28:2B:2F:64:2B:4E:C9:51:A1:36:43:2C:F7:CE:C6:A5:F6:B6
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0199FB458C482F3A3F22666E94C72338BB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0E34
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: JA3vM1n5jyQmGpdDq/tLeFwJgpX1WvpkcNskF8RqHV4=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8c:48:2f:3a:3f:22:66:6e:94:c7:23:38:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=27c6282b2f642b4ec951a136432cf7cec6a5f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:e6:4f:06:65:73:d6:9f:6c:a0:c5:21:50:
e4:9c:86:ac:08:bf:5b:d0:0d:91:61:14:61:4c:73:
23:fc:a0:66:00:8e:db:ad:cf:0f:91:7a:80:b6:e4:
85:bd:e4:2b:45:a5:4d:1a:74:33:8b:d0:2e:c1:ff:
9a:6a:e2:dd:c4:34:f4:af:c1:f5:b7:6c:29:a6:21:
7f:70:04:cf:c0:74:d6:ea:cf:0e:d1:8b:ec:66:c2:
13:fa:d9:1e:7b:a1:52:de:8d:67:5e:95:85:9f:b7:
fc:f1:14:71:07:94:c7:74:b1:af:61:7c:56:dc:6e:
7a:9c:88:0e:13:b7:c5:bb:cc:a4:dd:f0:42:4d:5d:
47:a4:44:40:2b:af:99:94:9a:21:b5:a3:1d:12:61:
16:6f:3e:96:6d:9a:b4:e1:41:51:aa:3b:47:48:f2:
1e:4a:78:fb:7f:a0:21:ac:75:4f:0f:cf:98:06:2b:
3e:60:42:ae:d1:cf:a2:ce:7d:cf:6f:b7:3d:db:ba:
f8:5a:3d:bc:f9:91:85:81:5e:fd:88:55:ca:44:d5:
11:a7:55:8f:3a:47:39:33:c8:c7:77:28:7a:6f:e3:
16:0d:9f:7e:5d:ef:bc:6f:26:3a:1d:42:32:64:b3:
84:ed:1b:12:28:49:a5:f3:82:4e:1b:3b:a8:42:68:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:28:2B:2F:64:2B:4E:C9:51:A1:36:43:2C:F7:CE:C6:A5:F6:B6
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:82:b6:47:b2:04:89:1f:c7:24:d4:0e:1e:ca:96:14:27:30:
b6:d0:e3:1d:9b:ff:ed:f6:fc:ae:99:35:3e:f7:dd:31:ab:f3:
8d:b7:6c:7f:68:e2:68:d6:fd:56:5a:1c:00:f9:91:40:b7:5d:
59:11:f9:e8:91:e9:ea:2b:fb:aa:6b:99:ad:d3:7a:cf:f7:1d:
34:36:c3:09:59:d7:83:be:3c:63:c6:a8:b4:55:65:e1:d6:e7:
24:e9:58:61:bb:46:eb:f3:a5:58:b7:1e:f4:18:6e:c1:92:f0:
69:4c:d4:49:7d:3a:24:04:8a:6c:4f:2c:c6:d0:4c:2b:a3:c8:
b0:f7:d9:be:38:18:fd:4f:5c:08:f6:9b:24:e6:54:ef:af:67:
96:11:a3:8e:00:69:5f:e0:d7:82:c5:02:ae:de:03:4e:8d:7b:
90:31:79:9b:e4:bf:2c:97:ac:c8:73:ed:6f:bb:66:f7:5c:40:
4a:2f:2c:f0:21:2a:2e:dd:3e:22:99:02:1a:eb:2b:d8:77:5c:
5f:d2:5b:05:95:ff:e1:10:ea:33:60:36:aa:a1:b3:4f:be:e5:
0b:09:fc:8b:55:06:e1:ee:12:37:26:34:ea:01:12:0b:32:4e:
d7:ca:0d:f2:19:54:11:74:b7:c7:2c:27:b9:4c:2d:58:09:81:
4a:43:85:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RYxILzo/ImZulMcjOLtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmU2MjM3OGJiNTgwYWY0ZWQ3MGJmYTM1YWJjODQwOTQ1
ZDc4MDMwHhcNMjUxMDE5MDcwMTAyWhcNMjUxMDIwMDcwMTAyWjAzMTEwLwYDVQQD
EygyN2M2MjgyYjJmNjQyYjRlYzk1MWExMzY0MzJjZjdjZWM2YTVmNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv/mTwZlc9afbKDFIVDknIasCL9b
0A2RYRRhTHMj/KBmAI7brc8PkXqAtuSFveQrRaVNGnQzi9Auwf+aauLdxDT0r8H1
t2wppiF/cATPwHTW6s8O0YvsZsIT+tkee6FS3o1nXpWFn7f88RRxB5THdLGvYXxW
3G56nIgOE7fFu8yk3fBCTV1HpERAK6+ZlJohtaMdEmEWbz6WbZq04UFRqjtHSPIe
Snj7f6AhrHVPD8+YBis+YEKu0c+izn3Pb7c927r4Wj28+ZGFgV79iFXKRNURp1WP
Okc5M8jHdyh6b+MWDZ9+Xe+8byY6HUIyZLOE7RsSKEml84JOGzuoQmiuFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfGKCsvZCtOyVGhNkMs987Gpfa2MB8GA1UdIwQY
MBaAFPy+YjeLtYCvTtcL+jWryECUXXgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3Mzkt
ZGY1NmVjNjcwZGU3LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3MzktZGY1NmVjNjcwZGU3
LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIK2R7IE
iR/HJNQOHsqWFCcwttDjHZv/7fb8rpk1PvfdMavzjbdsf2jiaNb9VlocAPmRQLdd
WRH56JHp6iv7qmuZrdN6z/cdNDbDCVnXg748Y8aotFVl4dbnJOlYYbtG6/OlWLce
9BhuwZLwaUzUSX06JASKbE8sxtBMK6PIsPfZvjgY/U9cCPabJOZU769nlhGjjgBp
X+DXgsUCrt4DTo17kDF5m+S/LJesyHPtb7tm91xASi8s8CEqLt0+IpkCGusr2Hdc
X9JbBZX/4RDqM2A2qqGzT77lCwn8i1UG4e4SNyY06gESCzJO18oN8hlUEXS3xywn
uUwtWAmBSkOFqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:01 2025 by rpki-client