Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: jUcRGwpNa57ookLrYbiRNJl3T9lpz8iOClLyYtKCA9w=
Subject key identifier: 69:4C:80:36:EA:76:F1:1F:C6:F8:66:D9:FB:36:EB:76:1B:F2:53:13
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0199FCC6BF8A9E8A40DB88159C7520D1D38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0FEF
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: HH2lbdr9fy4TWfi/vVqqJwIrY/gqMo2fBT0QG/VKLVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bf:8a:9e:8a:40:db:88:15:9c:75:20:d1:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=694c8036ea76f11fc6f866d9fb36eb761bf25313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:ea:ee:ef:9c:e0:90:69:69:4c:2e:45:4b:
b5:52:69:8d:ed:c1:13:b4:ab:af:5b:9d:95:81:9d:
4a:b6:bc:11:26:84:87:3f:51:22:ed:cb:fe:73:bf:
00:c7:00:9f:70:e1:3b:8d:c1:a1:42:40:4c:d2:9b:
7c:ea:f8:65:e4:38:8b:71:78:2c:6e:e0:1b:6b:b7:
89:54:83:f7:5b:96:a9:6e:a4:06:5b:cf:df:e7:9d:
44:01:9d:2b:d1:11:3a:a9:14:24:b1:ca:f5:f1:7e:
e7:97:a3:73:6f:1d:44:1b:4f:5d:b2:68:c8:a0:5d:
46:2a:3b:47:6e:1a:17:07:34:2a:f8:af:3b:f0:13:
06:c3:cf:3d:92:ef:e0:b1:00:6a:6c:1b:ef:66:50:
fb:06:0c:cb:59:45:e6:1b:a9:0e:72:71:7b:0b:5b:
16:08:53:b1:be:cc:47:5f:79:f2:3d:e5:d3:3b:90:
a3:47:ae:64:fc:76:05:6c:47:32:dd:36:d2:80:d2:
2a:1d:ee:d0:d3:bf:2f:20:72:7e:12:6f:5e:a7:72:
44:c4:90:d0:16:54:08:95:bd:39:2c:79:bc:b7:e1:
bd:a8:99:28:e8:b7:89:24:23:fc:d9:e7:e4:25:b1:
33:67:69:0c:57:ce:da:5f:8e:03:f9:52:db:5c:39:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:80:36:EA:76:F1:1F:C6:F8:66:D9:FB:36:EB:76:1B:F2:53:13
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:11:b4:af:9d:4e:01:42:15:a7:3a:34:be:92:ea:31:5a:11:
00:b1:a3:03:d8:ff:7a:0f:07:0d:eb:7f:5a:75:60:12:c8:c0:
a4:2c:2c:f1:13:d6:dc:4d:f8:b9:b9:78:4a:5c:c4:b7:b6:b6:
c4:52:47:5e:39:c6:a5:cd:56:74:58:bf:c4:61:b1:21:98:35:
48:4a:b0:f7:89:b5:7e:08:5a:c8:c6:f1:94:a8:b8:cb:f2:07:
5f:12:4d:41:51:ff:ff:4d:a5:e1:ee:e6:4f:10:4e:a6:0f:77:
07:13:e3:d4:52:86:30:06:78:49:d5:d1:b9:f5:88:b4:53:35:
88:fe:38:8a:9b:71:3b:6f:08:da:e5:f2:ed:11:d6:8b:18:5f:
87:88:c6:d6:42:7e:86:8e:aa:6f:48:02:75:ac:a8:96:db:11:
80:51:04:3a:18:23:3e:11:93:e0:93:b1:d9:3f:5b:69:dc:07:
82:70:03:ac:c4:ed:ee:65:13:17:ab:6b:dd:70:5a:da:ad:3d:
f9:86:44:84:20:e2:26:5f:8f:58:f3:d9:97:80:59:cf:74:7d:
3b:27:5e:61:e0:3b:d1:8c:fe:47:68:ac:9f:b5:66:ab:35:dd:
88:fd:1e:44:10:7a:9f:e5:da:b7:0c:2c:e9:46:95:52:d2:3c:
ae:15:37:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xr+KnopA24gVnHUg0dOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjUxMDE5MTQwMTQ3WhcNMjUxMDIwMTQwMTQ3WjAzMTEwLwYDVQQD
Eyg2OTRjODAzNmVhNzZmMTFmYzZmODY2ZDlmYjM2ZWI3NjFiZjI1MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tjq7u+c4JBpaUwuRUu1UmmN7cET
tKuvW52VgZ1KtrwRJoSHP1Ei7cv+c78AxwCfcOE7jcGhQkBM0pt86vhl5DiLcXgs
buAba7eJVIP3W5apbqQGW8/f551EAZ0r0RE6qRQkscr18X7nl6Nzbx1EG09dsmjI
oF1GKjtHbhoXBzQq+K878BMGw889ku/gsQBqbBvvZlD7BgzLWUXmG6kOcnF7C1sW
CFOxvsxHX3nyPeXTO5CjR65k/HYFbEcy3TbSgNIqHe7Q078vIHJ+Em9ep3JExJDQ
FlQIlb05LHm8t+G9qJko6LeJJCP82efkJbEzZ2kMV87aX44D+VLbXDlWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlMgDbqdvEfxvhm2fs263Yb8lMTMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxG0r51O
AUIVpzo0vpLqMVoRALGjA9j/eg8HDet/WnVgEsjApCws8RPW3E34ubl4SlzEt7a2
xFJHXjnGpc1WdFi/xGGxIZg1SEqw94m1fghayMbxlKi4y/IHXxJNQVH//02l4e7m
TxBOpg93BxPj1FKGMAZ4SdXRufWItFM1iP44iptxO28I2uXy7RHWixhfh4jG1kJ+
ho6qb0gCdayoltsRgFEEOhgjPhGT4JOx2T9badwHgnADrMTt7mUTF6tr3XBa2q09
+YZEhCDiJl+PWPPZl4BZz3R9OydeYeA70Yz+R2isn7VmqzXdiP0eRBB6n+Xatwws
6UaVUtI8rhU3SQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:28 2025 by rpki-client