Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: 0bkB8ak66CmU0XAmEY3yTkLzc2EpfsprIB+m0gJSWS4=
Subject key identifier: 7C:12:03:34:09:2D:7C:56:44:B2:45:47:EA:11:79:AB:36:F0:81:94
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 0199FEB5190932D4839FD570295BAEE2A10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1707
Signing time: Sun 19 Oct 2025 23:01:45 +0000
Manifest this update: Sun 19 Oct 2025 23:01:45 +0000
Manifest next update: Mon 20 Oct 2025 23:01:45 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: FOhyF4QKA1lTJtATO3C0YGxZWOXY5RR1BI/QnfyCZ80=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: BG1cqZ9YVyNJo6yn7aRCRKFwi1E.roa (hash: iWMwZkGfB/SrRzVNIRiDbpY7F5RfXCU+vPN0FbVq8Zo=)
5: UhdjQtj-FfDyuU6V5WnFSOKYjmk.roa (hash: QbBqfb3nWseUxtS3InHqu29EzpheC2v8vhkaoLoZ0FY=)
6: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:19:09:32:d4:83:9f:d5:70:29:5b:ae:e2:a1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Oct 19 23:01:45 2025 GMT
Not After : Oct 20 23:01:45 2025 GMT
Subject: CN=7c120334092d7c5644b24547ea1179ab36f08194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:e7:f0:93:d4:76:3f:95:33:f7:df:59:8a:
0e:7d:4b:f9:e0:56:70:50:4d:69:43:4b:07:54:c6:
90:98:62:8a:7f:d3:2f:4d:09:d5:b1:2d:f7:77:3b:
f7:a6:39:53:77:25:1e:42:60:ff:8d:d1:23:ac:dd:
17:b1:0c:b0:3b:f4:5a:74:b1:d6:e8:29:58:eb:49:
dd:8e:69:f2:1d:21:b9:5b:dd:b7:0b:3f:26:61:40:
e8:b6:10:98:3e:61:8c:15:00:7c:37:14:f6:a1:dd:
0e:89:91:1d:d9:1b:8b:9e:9e:dd:fd:bf:ef:94:27:
f3:20:e4:d1:31:d7:95:b6:7b:22:0e:d4:e1:88:37:
c5:c2:2d:8b:16:16:cd:59:b0:b9:ca:0e:1c:aa:80:
5c:c1:09:17:f9:59:81:8d:09:ad:ce:a1:6a:30:c8:
f9:06:a2:45:83:f0:00:9e:e5:b6:db:e0:88:0a:3b:
c8:2b:53:28:11:8b:7f:e2:1f:9f:59:1b:76:80:d0:
21:61:48:57:6c:a9:c4:b4:cc:3e:ee:20:3d:a1:50:
7e:7d:c0:1f:9d:07:a9:c4:87:01:4a:59:d9:88:89:
b0:b8:91:59:ab:31:6d:20:d5:1e:b3:f0:09:3c:c3:
9f:0f:97:eb:34:36:4f:c4:b3:9d:db:b7:20:7c:64:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:03:34:09:2D:7C:56:44:B2:45:47:EA:11:79:AB:36:F0:81:94
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:79:bd:1d:83:14:96:15:d2:b4:a6:b3:00:45:e4:6d:df:
90:fc:4a:d3:b8:80:2b:91:99:5f:b8:6e:5a:62:31:f4:54:cc:
0e:00:74:f9:54:8e:0a:28:85:26:78:61:c2:1c:1d:5f:e4:8f:
e3:f9:90:b6:a2:be:8b:11:78:99:41:e6:74:38:fa:aa:12:6d:
16:24:3c:74:c2:a1:34:c4:9b:35:21:21:19:d7:c8:1c:93:42:
fc:4b:8b:03:38:63:46:02:18:c4:28:52:62:7c:09:78:4d:3c:
4a:42:bd:8a:0d:c2:05:6f:d0:36:0a:a7:a1:20:32:a3:c7:ab:
99:6a:18:99:21:01:07:e0:75:d5:5d:e2:4f:e5:9a:b0:b0:6f:
e0:6d:c0:07:02:a0:a6:63:dc:b1:fb:16:c3:6e:77:7a:82:68:
83:bd:61:90:21:71:0d:05:08:d9:dd:4f:55:5d:08:06:1f:d0:
25:12:54:67:0f:3b:ae:f4:60:5f:a0:13:69:42:df:92:8d:5b:
38:d1:54:c0:a8:b8:1a:3a:3a:54:5c:50:f3:45:a4:78:49:e3:
66:61:53:9f:bf:09:a2:fd:68:d9:e3:65:c6:5b:16:38:6f:8f:
fc:6a:d0:2a:2f:61:58:31:66:20:ea:3d:bf:b9:13:3e:78:56:
b5:c5:91:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn+tRkJMtSDn9VwKVuu4qENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjUxMDE5MjMwMTQ1WhcNMjUxMDIwMjMwMTQ1WjAzMTEwLwYDVQQD
Eyg3YzEyMDMzNDA5MmQ3YzU2NDRiMjQ1NDdlYTExNzlhYjM2ZjA4MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTnn8JPUdj+VM/ffWYoOfUv54FZw
UE1pQ0sHVMaQmGKKf9MvTQnVsS33dzv3pjlTdyUeQmD/jdEjrN0XsQywO/RadLHW
6ClY60ndjmnyHSG5W923Cz8mYUDothCYPmGMFQB8NxT2od0OiZEd2RuLnp7d/b/v
lCfzIOTRMdeVtnsiDtThiDfFwi2LFhbNWbC5yg4cqoBcwQkX+VmBjQmtzqFqMMj5
BqJFg/AAnuW22+CICjvIK1MoEYt/4h+fWRt2gNAhYUhXbKnEtMw+7iA9oVB+fcAf
nQepxIcBSlnZiImwuJFZqzFtINUes/AJPMOfD5frNDZPxLOd27cgfGS2DwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHwSAzQJLXxWRLJFR+oReas28IGUMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD55
vR2DFJYV0rSmswBF5G3fkPxK07iAK5GZX7huWmIx9FTMDgB0+VSOCiiFJnhhwhwd
X+SP4/mQtqK+ixF4mUHmdDj6qhJtFiQ8dMKhNMSbNSEhGdfIHJNC/EuLAzhjRgIY
xChSYnwJeE08SkK9ig3CBW/QNgqnoSAyo8ermWoYmSEBB+B11V3iT+WasLBv4G3A
BwKgpmPcsfsWw253eoJog71hkCFxDQUI2d1PVV0IBh/QJRJUZw87rvRgX6ATaULf
ko1bONFUwKi4Gjo6VFxQ80WkeEnjZmFTn78Jov1o2eNlxlsWOG+P/GrQKi9hWDFm
IOo9v7kTPnhWtcWRkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:46 2025 by rpki-client