Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: k3Mb/MDu8Twr1HmcXLMupWA8pJopbc5EDUogrXZgD7c=
Subject key identifier: FD:3F:B0:9D:91:DE:F2:E6:E3:02:4A:81:43:5B:DC:51:AF:85:29:2D
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019A2289C1D214517F40EBEC28BDDD7D22D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:00:44 +0000
Manifest this update: Sun 26 Oct 2025 22:00:44 +0000
Manifest next update: Mon 27 Oct 2025 22:00:44 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: 5BLkgmScc8WystWpew0duHY9qzxo7R+E1doZ7sTd4D0=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:c1:d2:14:51:7f:40:eb:ec:28:bd:dd:7d:22:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Oct 26 22:00:44 2025 GMT
Not After : Oct 27 22:00:44 2025 GMT
Subject: CN=fd3fb09d91def2e6e3024a81435bdc51af85292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:c0:ec:42:54:21:a9:92:b4:3c:06:d8:5b:
2e:62:5d:dc:21:d5:09:18:69:35:5a:fd:fd:e7:5b:
97:f4:90:0a:b2:b8:12:8d:71:50:ab:d3:25:e5:23:
77:dc:99:32:67:a1:d9:7f:92:a1:48:11:89:ee:c8:
ce:d7:d3:c8:12:35:9d:9f:c4:58:ce:55:7d:13:08:
23:a5:09:7b:37:d9:be:41:b2:0c:7b:43:fe:6e:bc:
2b:8b:ec:b6:1c:31:fc:e1:73:96:3a:d1:d4:ed:81:
de:c7:c8:4d:e5:a5:62:04:c5:95:9e:7b:dd:c0:8f:
fd:14:4e:4f:4d:2d:16:82:85:0a:ff:d1:fa:6a:5b:
e5:a6:df:f6:c1:9b:bf:69:c9:6a:56:ef:fa:fa:1a:
34:af:28:c9:7e:29:b7:f5:98:fe:07:75:0e:b8:c5:
a6:26:86:40:26:7c:c0:29:59:ee:12:d0:45:6b:7e:
0b:c8:69:a7:ab:95:fb:2d:0e:09:fb:95:e0:eb:1e:
a2:ae:e8:15:cb:91:64:0e:ea:38:0d:e1:40:09:88:
02:63:8f:5e:50:17:9f:49:d5:79:cb:e7:f3:06:62:
00:c8:35:e7:ba:2a:d0:0e:7e:3c:c7:c1:8e:be:3b:
89:94:22:30:fa:a3:e1:34:97:e0:ed:d2:d0:3a:95:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:B0:9D:91:DE:F2:E6:E3:02:4A:81:43:5B:DC:51:AF:85:29:2D
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:69:73:8f:9b:aa:9f:3c:5f:2d:65:7b:dd:d6:5a:5f:74:90:
3e:65:7c:32:5a:96:52:6e:5f:9f:25:b0:43:83:92:2c:7f:69:
e2:0e:84:e0:0a:96:b0:2c:e4:06:d8:18:25:7b:e2:30:14:1f:
67:f2:38:bb:21:58:6c:4f:d9:1e:d9:02:4e:d2:0c:e5:66:0c:
d1:f5:80:ab:5d:3f:1e:8b:d1:fd:e0:bc:cf:55:ea:af:38:36:
12:f0:3a:3e:40:29:7d:0f:40:9b:8a:cf:11:fd:c8:e8:a3:82:
35:17:62:da:ee:b4:9c:80:86:7b:33:72:d4:3c:96:d0:90:72:
5a:a1:0b:2c:12:fd:c9:5d:99:1d:f2:0e:d8:85:2d:ba:46:96:
16:4d:02:d5:7f:92:0c:93:ee:be:29:99:3d:68:15:f4:a3:53:
81:59:79:c5:f4:f6:21:db:d1:6e:48:e2:09:b9:4c:bd:9c:00:
b6:2b:4c:e2:e3:3d:81:ea:92:42:96:4a:23:20:c4:9e:cd:21:
4c:2f:f9:ae:cc:56:92:1f:32:68:49:2f:c4:0b:ef:d5:b6:a6:
44:46:27:d3:c9:7d:be:d1:33:e7:24:ae:bd:11:ff:38:76:8d:
66:dc:bf:26:41:c6:2f:d6:eb:4b:bd:fe:8f:e5:33:df:ce:93:
67:e9:36:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiicHSFFF/QOvsKL3dfSLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh
N2RlYmMwHhcNMjUxMDI2MjIwMDQ0WhcNMjUxMDI3MjIwMDQ0WjAzMTEwLwYDVQQD
EyhmZDNmYjA5ZDkxZGVmMmU2ZTMwMjRhODE0MzViZGM1MWFmODUyOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdfA7EJUIamStDwG2FsuYl3cIdUJ
GGk1Wv3951uX9JAKsrgSjXFQq9Ml5SN33JkyZ6HZf5KhSBGJ7sjO19PIEjWdn8RY
zlV9EwgjpQl7N9m+QbIMe0P+brwri+y2HDH84XOWOtHU7YHex8hN5aViBMWVnnvd
wI/9FE5PTS0WgoUK/9H6alvlpt/2wZu/aclqVu/6+ho0ryjJfim39Zj+B3UOuMWm
JoZAJnzAKVnuEtBFa34LyGmnq5X7LQ4J+5Xg6x6irugVy5FkDuo4DeFACYgCY49e
UBefSdV5y+fzBmIAyDXnuirQDn48x8GOvjuJlCIw+qPhNJfg7dLQOpU7KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0/sJ2R3vLm4wJKgUNb3FGvhSktMB8GA1UdIwQY
MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt
NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi
LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmlzj5uq
nzxfLWV73dZaX3SQPmV8MlqWUm5fnyWwQ4OSLH9p4g6E4AqWsCzkBtgYJXviMBQf
Z/I4uyFYbE/ZHtkCTtIM5WYM0fWAq10/HovR/eC8z1Xqrzg2EvA6PkApfQ9Am4rP
Ef3I6KOCNRdi2u60nICGezNy1DyW0JByWqELLBL9yV2ZHfIO2IUtukaWFk0C1X+S
DJPuvimZPWgV9KNTgVl5xfT2IdvRbkjiCblMvZwAtitM4uM9geqSQpZKIyDEns0h
TC/5rsxWkh8yaEkvxAvv1bamREYn08l9vtEz5ySuvRH/OHaNZty/JkHGL9brS73+
j+Uz386TZ+k2Vg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:12 2025 by rpki-client