Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: LkKLWGFzq8Gp0VmHPPWw2AjG9vAkLQjk7kOErtlh33E=
Subject key identifier: D0:F6:34:C6:BF:D6:BD:EF:ED:B5:42:1B:6B:82:AC:80:92:47:9B:D6
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 0199C3EA81F7014C989FB73D4F57BAC9052F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 13:02:29 +0000
Manifest this update: Wed 08 Oct 2025 13:02:29 +0000
Manifest next update: Thu 09 Oct 2025 13:02:29 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: 9xh1srClpbEotKhy4N78IUcmzpJwb3ACDamalQDAips=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:81:f7:01:4c:98:9f:b7:3d:4f:57:ba:c9:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Oct 8 13:02:29 2025 GMT
Not After : Oct 9 13:02:29 2025 GMT
Subject: CN=d0f634c6bfd6bdefedb5421b6b82ac8092479bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:35:31:c5:d3:cb:09:b1:7b:b3:b4:ce:1f:
d5:93:65:2a:ce:f8:41:cc:e6:ac:15:e9:34:da:b2:
05:29:a4:60:8e:87:a8:62:04:5d:56:d7:fb:5d:c9:
e7:bd:84:a1:20:0c:e4:a6:a7:d5:de:1d:a1:fd:57:
57:74:73:5f:22:55:4f:38:1c:a6:0b:84:37:f0:74:
e9:55:ec:6b:27:61:e0:d2:f1:12:a4:53:be:5a:b0:
27:24:ba:59:50:83:47:01:6a:64:d5:1c:62:03:de:
c8:db:f4:3a:c2:21:98:7a:7e:fa:04:13:5b:0c:12:
33:1d:df:31:69:b6:95:12:c9:8a:ce:5b:e8:98:c6:
fb:ac:1b:be:8c:b5:6e:02:44:36:dc:6a:b8:2c:0c:
b1:db:d9:21:f7:35:52:ac:dc:1a:de:24:32:a0:47:
c9:3b:01:0d:b0:e7:e3:d4:c1:64:c2:cf:b7:e7:6e:
49:a1:09:49:41:0d:2a:4b:79:44:66:27:12:ee:f9:
0e:aa:0b:0a:6f:b5:78:da:d5:38:5e:b7:c3:5f:11:
09:06:4f:b0:81:6d:92:06:d3:46:8f:93:7e:86:4d:
ff:5f:a5:e1:1d:19:c0:36:20:c6:73:0b:a9:b2:f8:
5a:9e:3c:ce:64:de:e2:93:65:5c:a5:0c:cd:9d:6b:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:34:C6:BF:D6:BD:EF:ED:B5:42:1B:6B:82:AC:80:92:47:9B:D6
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:66:4d:00:1f:10:1b:68:8a:ca:de:46:93:78:a7:f4:b1:0b:
14:bb:d9:8a:85:de:76:b2:d0:f4:5f:46:43:9a:93:02:7b:0f:
b8:cd:47:86:98:a0:9b:a7:46:da:ee:25:81:60:18:d1:31:24:
7a:e9:e0:bc:1f:d5:fd:28:66:ed:2c:7e:2e:e9:d6:b3:2e:42:
a0:37:1a:eb:31:20:90:83:20:0e:62:53:b8:86:71:cb:77:5b:
95:70:02:d5:2d:83:bf:4e:e3:77:58:d5:2a:61:70:fb:8e:6c:
53:79:07:d3:d7:fd:3f:50:2b:3d:4c:a5:b2:c3:d8:57:98:65:
ca:2d:6b:53:db:de:e8:87:3c:64:1a:fa:d6:15:ad:ac:33:18:
cd:a9:0d:e9:a8:05:41:98:4f:03:7f:f2:ae:ff:14:2d:b7:32:
df:bb:95:14:bf:b7:91:c1:86:53:f9:4a:84:bb:93:2f:ac:fa:
c3:90:ff:24:42:88:ea:a5:c2:03:1f:e8:51:03:92:35:6c:33:
3d:13:62:7f:e9:a6:6a:53:86:fa:fa:71:09:4d:3b:ae:bc:1b:
c3:36:91:69:90:b0:2c:f9:ea:0e:f0:0c:e3:76:41:4b:a7:26:
21:86:e0:23:fa:58:0c:d9:3c:41:c0:3e:c8:b1:76:db:18:44:
e7:68:d0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6oH3AUyYn7c9T1e6yQUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2
MDFiMDUwHhcNMjUxMDA4MTMwMjI5WhcNMjUxMDA5MTMwMjI5WjAzMTEwLwYDVQQD
EyhkMGY2MzRjNmJmZDZiZGVmZWRiNTQyMWI2YjgyYWM4MDkyNDc5YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOU1McXTywmxe7O0zh/Vk2UqzvhB
zOasFek02rIFKaRgjoeoYgRdVtf7XcnnvYShIAzkpqfV3h2h/VdXdHNfIlVPOBym
C4Q38HTpVexrJ2Hg0vESpFO+WrAnJLpZUINHAWpk1RxiA97I2/Q6wiGYen76BBNb
DBIzHd8xabaVEsmKzlvomMb7rBu+jLVuAkQ23Gq4LAyx29kh9zVSrNwa3iQyoEfJ
OwENsOfj1MFkws+3525JoQlJQQ0qS3lEZicS7vkOqgsKb7V42tU4XrfDXxEJBk+w
gW2SBtNGj5N+hk3/X6XhHRnANiDGcwupsvhanjzOZN7ik2VcpQzNnWuApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND2NMa/1r3v7bVCG2uCrICSR5vWMB8GA1UdIwQY
MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt
NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0
LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2ZNAB8Q
G2iKyt5Gk3in9LELFLvZioXedrLQ9F9GQ5qTAnsPuM1Hhpigm6dG2u4lgWAY0TEk
eungvB/V/Shm7Sx+LunWsy5CoDca6zEgkIMgDmJTuIZxy3dblXAC1S2Dv07jd1jV
KmFw+45sU3kH09f9P1ArPUylssPYV5hlyi1rU9ve6Ic8ZBr61hWtrDMYzakN6agF
QZhPA3/yrv8ULbcy37uVFL+3kcGGU/lKhLuTL6z6w5D/JEKI6qXCAx/oUQOSNWwz
PRNif+mmalOG+vpxCU07rrwbwzaRaZCwLPnqDvAM43ZBS6cmIYbgI/pYDNk8QcA+
yLF22xhE52jQnw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:27:12 2025 by rpki-client