Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: 5jaApg/tsajTm1aaew7DUlHiSyVCDzEaaSoOvfA+YRU=
Subject key identifier: E3:FE:82:7E:07:34:9E:75:F6:B3:32:3F:A5:F8:F3:74:A4:2A:30:69
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0199FC58980225A530806445D25CE06D942A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 04D3
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: Hi3JL0+rrYDNKwxRohxJDnlLxsRCDuHtS0SPzSdATLw=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:98:02:25:a5:30:80:64:45:d2:5c:e0:6d:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=e3fe827e07349e75f6b3323fa5f8f374a42a3069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:9c:cf:49:19:b1:4e:5c:24:b7:ce:30:ab:
9f:6c:0b:3a:4a:0b:73:e2:cc:2a:04:3a:fe:fd:52:
24:75:1b:54:b8:a4:cf:ff:ee:39:8f:c5:93:35:83:
57:5f:8e:e4:f4:0c:34:54:26:66:ea:a7:ff:c6:79:
b4:39:97:00:27:76:29:8f:93:77:32:a4:f4:a2:d3:
4b:41:f0:c4:d6:a5:d3:ab:23:81:5a:6b:1c:05:2c:
54:ab:4c:d8:87:ff:2f:12:22:06:9c:cf:fe:20:60:
75:a2:c8:aa:01:1c:22:81:67:7b:50:9a:c5:4b:3c:
55:58:84:14:2b:42:c1:de:9c:96:d2:1b:e5:9c:e1:
cc:c4:7b:85:f9:3b:3e:a0:24:29:cb:08:70:f5:99:
8a:56:01:dd:f0:af:d2:6f:80:5e:75:5c:2d:95:4f:
94:6c:89:c8:a4:fb:fc:cb:98:91:a1:28:1b:e2:5c:
36:34:a5:43:cb:f3:19:0c:71:ac:e4:c5:a5:a9:e9:
9d:27:e1:9d:60:3b:01:dd:4f:cd:90:68:6a:cc:5c:
07:e5:de:6d:00:b2:0d:f0:40:41:a0:41:34:d4:89:
b6:05:e8:5f:f8:4f:6e:d0:37:37:6c:94:bd:00:7a:
6e:ed:86:37:5a:80:67:91:44:db:72:fb:b3:4a:76:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:82:7E:07:34:9E:75:F6:B3:32:3F:A5:F8:F3:74:A4:2A:30:69
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:f9:3f:de:6a:34:55:8a:1e:96:00:27:7d:e6:3e:5a:d7:
47:81:80:e0:a9:7a:01:50:c5:37:bb:ec:59:2b:56:79:17:be:
49:dd:10:66:48:13:c2:d7:b6:3d:ed:e2:3d:0c:4a:9a:9f:ad:
0a:3a:1a:7a:4f:22:d0:ab:54:65:e8:80:6d:bc:48:26:45:85:
c5:9f:39:c2:7d:f6:c9:45:28:4e:a4:9b:ce:69:ca:82:a3:cd:
71:10:5d:04:bf:1d:17:d3:e3:da:39:e2:de:09:a4:50:70:ca:
7e:5a:47:7b:00:83:0f:3b:b1:7c:dd:92:56:86:c7:97:56:14:
27:9b:d8:41:39:b0:24:b0:6a:ee:91:ef:93:91:9f:67:8d:3c:
73:72:8a:5a:d6:b4:66:a3:b1:4c:be:a8:59:aa:09:eb:75:04:
66:89:62:d8:8b:52:15:9f:f9:49:74:9e:29:4a:39:7c:d9:68:
22:28:fe:27:a4:4d:c8:03:4b:5c:41:d1:b1:e5:03:8f:18:a5:
22:55:87:9f:c3:bc:fe:95:a4:56:89:79:ae:e2:b1:e0:aa:0d:
ed:ea:31:0d:e6:a5:38:f7:ac:ee:5a:8a:f5:d6:0e:0e:4a:84:
bb:d8:0e:3e:88:fd:cc:3c:ff:53:f3:5d:d5:39:e9:fd:b1:e0:
3b:7c:80:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJgCJaUwgGRF0lzgbZQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUxMDE5MTIwMTI4WhcNMjUxMDIwMTIwMTI4WjAzMTEwLwYDVQQD
EyhlM2ZlODI3ZTA3MzQ5ZTc1ZjZiMzMyM2ZhNWY4ZjM3NGE0MmEzMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cKcz0kZsU5cJLfOMKufbAs6Sgtz
4swqBDr+/VIkdRtUuKTP/+45j8WTNYNXX47k9Aw0VCZm6qf/xnm0OZcAJ3Ypj5N3
MqT0otNLQfDE1qXTqyOBWmscBSxUq0zYh/8vEiIGnM/+IGB1osiqARwigWd7UJrF
SzxVWIQUK0LB3pyW0hvlnOHMxHuF+Ts+oCQpywhw9ZmKVgHd8K/Sb4BedVwtlU+U
bInIpPv8y5iRoSgb4lw2NKVDy/MZDHGs5MWlqemdJ+GdYDsB3U/NkGhqzFwH5d5t
ALIN8EBBoEE01Im2Behf+E9u0Dc3bJS9AHpu7YY3WoBnkUTbcvuzSnbQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP+gn4HNJ519rMyP6X483SkKjBpMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWD5P95q
NFWKHpYAJ33mPlrXR4GA4Kl6AVDFN7vsWStWeRe+Sd0QZkgTwte2Pe3iPQxKmp+t
Cjoaek8i0KtUZeiAbbxIJkWFxZ85wn32yUUoTqSbzmnKgqPNcRBdBL8dF9Pj2jni
3gmkUHDKflpHewCDDzuxfN2SVobHl1YUJ5vYQTmwJLBq7pHvk5GfZ408c3KKWta0
ZqOxTL6oWaoJ63UEZoli2ItSFZ/5SXSeKUo5fNloIij+J6RNyANLXEHRseUDjxil
IlWHn8O8/pWkVol5ruKx4KoN7eoxDealOPes7lqK9dYODkqEu9gOPoj9zDz/U/Nd
1Tnp/bHgO3yAow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:48 2025 by rpki-client