Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: 0tT0E2LZY2/9ezaOLSqiuVxqN+h6fb07m5IvEQT2ZRM=
Subject key identifier: FC:2D:FB:28:98:11:60:01:10:64:88:0E:47:A3:ED:03:00:D9:20:2B
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019A22F77F4A28D02475966753B08F38A71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0B76
Signing time: Mon 27 Oct 2025 00:00:36 +0000
Manifest this update: Mon 27 Oct 2025 00:00:36 +0000
Manifest next update: Tue 28 Oct 2025 00:00:36 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: GnuDC4nZP9UxuhkZLNpbn7vRx/VpTEhyBdGN+BcXWyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:7f:4a:28:d0:24:75:96:67:53:b0:8f:38:a7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Oct 27 00:00:36 2025 GMT
Not After : Oct 28 00:00:36 2025 GMT
Subject: CN=fc2dfb28981160011064880e47a3ed0300d9202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:13:3e:b9:4f:20:a9:dc:56:8a:77:07:fd:
95:20:dc:54:15:ff:95:61:ed:df:fb:e3:05:ec:08:
f3:1c:3d:ba:4d:78:38:d2:64:d5:a5:4f:50:12:51:
48:0d:bb:ca:52:70:65:e7:9b:25:5e:d2:ee:eb:e7:
4b:c4:fc:a0:71:ed:c8:1e:45:77:82:ee:2a:fb:4a:
e9:ce:8c:10:b7:3a:67:91:96:9e:b4:67:c6:6c:1b:
1e:ed:50:b8:a1:bd:6e:bf:a7:ab:1f:30:ea:47:bb:
ed:66:48:e0:49:32:bf:aa:4b:1c:79:e2:da:e3:71:
e3:6c:44:c0:60:e7:41:b7:c2:63:e3:42:49:bb:dc:
57:58:55:c8:e4:39:49:e8:dd:81:70:44:e9:b6:64:
6a:ad:48:9f:eb:d6:e9:de:6b:4b:e0:1f:ea:d1:3a:
05:12:ea:d3:30:fe:a7:3b:ad:80:55:02:2e:dc:97:
8c:4c:f9:72:e2:3f:84:f1:b4:61:ff:57:a8:af:21:
18:d4:14:28:d5:dc:37:f8:69:ae:48:d0:0c:ac:a5:
12:fc:12:2c:29:6a:8f:05:79:93:10:b1:5a:fb:6e:
a6:c0:77:6d:de:89:f3:12:0a:ba:bb:4f:dd:53:83:
de:b0:9c:f2:ff:0e:87:85:4a:7c:91:f4:f5:09:af:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:FB:28:98:11:60:01:10:64:88:0E:47:A3:ED:03:00:D9:20:2B
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:36:df:9d:01:6a:0c:aa:b0:11:a2:ec:06:44:bf:a2:79:
6d:4d:41:77:98:55:f3:03:4e:3e:aa:cf:b3:c2:b3:12:cf:e4:
8e:5a:ff:f7:f4:23:08:d5:6b:93:52:e2:4c:fe:0d:df:74:df:
82:7e:18:f4:9b:bf:f8:e3:58:bf:86:2d:6b:4b:3d:96:87:a3:
e3:0e:f9:94:ef:a3:8a:ba:e0:3c:8f:20:75:a9:2c:66:90:a2:
24:13:2c:6b:b5:b7:42:01:81:ec:fb:71:78:68:c8:80:47:50:
9c:8e:99:23:1a:46:34:5f:1f:3d:e0:c4:15:38:53:a2:5d:b3:
cd:ec:1e:bb:1c:5b:17:48:dc:5b:7e:98:58:0e:e9:b2:86:f5:
58:3c:70:93:dd:da:40:c7:37:f1:68:f7:9c:d9:05:50:de:cd:
05:f6:7e:98:68:e9:a4:d9:d6:52:28:3d:5d:54:d9:f4:83:20:
de:85:4a:2d:79:4a:7a:54:15:4b:5c:3c:55:30:03:d2:68:2f:
f3:11:75:b4:72:43:05:99:6c:70:62:2a:df:e5:57:3c:fe:ed:
3e:d0:aa:3b:e3:42:ef:3d:81:3b:4b:02:5f:24:78:58:b5:23:
1b:45:ed:00:4a:51:18:a3:c0:a8:79:d0:3f:5d:b0:80:34:e9:
20:0e:e4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi939KKNAkdZZnU7CPOKcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1
MzBiMzAwHhcNMjUxMDI3MDAwMDM2WhcNMjUxMDI4MDAwMDM2WjAzMTEwLwYDVQQD
EyhmYzJkZmIyODk4MTE2MDAxMTA2NDg4MGU0N2EzZWQwMzAwZDkyMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmwTPrlPIKncVop3B/2VINxUFf+V
Ye3f++MF7AjzHD26TXg40mTVpU9QElFIDbvKUnBl55slXtLu6+dLxPygce3IHkV3
gu4q+0rpzowQtzpnkZaetGfGbBse7VC4ob1uv6erHzDqR7vtZkjgSTK/qksceeLa
43HjbETAYOdBt8Jj40JJu9xXWFXI5DlJ6N2BcETptmRqrUif69bp3mtL4B/q0ToF
EurTMP6nO62AVQIu3JeMTPly4j+E8bRh/1eoryEY1BQo1dw3+GmuSNAMrKUS/BIs
KWqPBXmTELFa+26mwHdt3onzEgq6u0/dU4PesJzy/w6HhUp8kfT1Ca/JowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwt+yiYEWABEGSIDkej7QMA2SArMB8GA1UdIwQY
MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt
ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz
LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Y2350B
agyqsBGi7AZEv6J5bU1Bd5hV8wNOPqrPs8KzEs/kjlr/9/QjCNVrk1LiTP4N33Tf
gn4Y9Ju/+ONYv4Yta0s9loej4w75lO+jirrgPI8gdaksZpCiJBMsa7W3QgGB7Ptx
eGjIgEdQnI6ZIxpGNF8fPeDEFThTol2zzeweuxxbF0jcW36YWA7psob1WDxwk93a
QMc38Wj3nNkFUN7NBfZ+mGjppNnWUig9XVTZ9IMg3oVKLXlKelQVS1w8VTAD0mgv
8xF1tHJDBZlscGIq3+VXPP7tPtCqO+NC7z2BO0sCXyR4WLUjG0XtAEpRGKPAqHnQ
P12wgDTpIA7kTQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:27:52 2025 by rpki-client