Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: vud0ssogtYfyOIxDtX2nCYaMHqEKLVk1m++MOH1ybGE=
Subject key identifier: 86:3B:4A:E9:09:6F:08:97:E7:BB:82:6E:02:7B:5C:F2:B2:67:7A:D3
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019A25C1A85D5FDD16CF21DEFDE3ECF9F4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 13:00:39 +0000
Manifest this update: Mon 27 Oct 2025 13:00:39 +0000
Manifest next update: Tue 28 Oct 2025 13:00:39 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: R+za65h49QaY4qY0VtyldY/0GEyiXw0B+Cx8kRbw/I8=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:a8:5d:5f:dd:16:cf:21:de:fd:e3:ec:f9:f4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Oct 27 13:00:39 2025 GMT
Not After : Oct 28 13:00:39 2025 GMT
Subject: CN=863b4ae9096f0897e7bb826e027b5cf2b2677ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:41:ff:51:bd:36:92:89:0c:73:12:e7:2f:
55:4a:b5:c6:e2:33:a9:5b:c4:10:ad:7e:92:87:36:
0b:e0:ce:b3:9c:43:c9:69:3d:53:d9:13:bb:a2:b4:
b3:31:64:7b:f4:64:3e:f7:82:f7:11:c3:39:36:86:
ea:23:87:95:1e:de:92:54:f2:de:1c:53:3f:f4:69:
83:3e:44:19:ca:78:96:2a:a0:17:b5:8e:b5:c0:32:
03:e8:0e:58:f5:b7:5a:d3:7b:7f:52:b6:7f:fb:35:
98:9d:27:6e:2e:45:cd:cf:df:41:7e:f7:9a:72:28:
1e:1f:0c:b5:09:4c:58:1d:c3:d6:e8:59:0e:e6:24:
7d:95:11:df:65:30:8a:a9:b4:50:4e:23:1c:db:db:
77:71:b7:a7:19:68:0c:99:9a:20:51:a7:9b:a3:a9:
88:f2:90:bb:f1:0b:72:8d:bc:97:78:29:91:c1:89:
63:d5:b4:15:2a:6e:8e:42:98:69:86:51:f6:b3:23:
61:71:83:8b:a2:19:d8:e7:db:46:91:14:f0:12:ec:
56:bd:36:ec:b0:4c:e2:1c:be:68:0c:d2:3c:6d:3b:
a8:7d:4e:98:a0:a3:66:8e:12:c5:82:21:64:aa:df:
e2:81:a8:42:5e:64:16:dd:23:81:f1:c1:e0:3e:80:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:4A:E9:09:6F:08:97:E7:BB:82:6E:02:7B:5C:F2:B2:67:7A:D3
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:49:94:eb:29:2e:b8:98:6d:bb:1f:c8:ef:09:f4:96:ad:
4f:04:0a:16:75:d0:bc:bf:fa:c0:82:f2:82:df:5f:39:bc:b2:
e6:1e:75:4a:b0:0f:1d:d2:10:97:96:a0:80:3f:30:ef:53:d7:
2e:3b:52:1b:10:58:6c:f6:fb:32:77:00:d3:d6:97:64:d8:d7:
54:22:c2:3f:5b:15:7b:f8:fd:00:f7:66:47:a5:2f:ca:33:2f:
ae:f9:dc:83:6a:00:48:8b:e7:6b:9e:3f:23:e2:88:cd:8b:3d:
c1:cb:b6:f4:04:61:ce:65:88:e1:33:39:00:e9:2f:36:b0:1d:
17:89:52:bf:8c:dc:17:c6:3d:b3:61:92:7d:c4:bf:50:93:7b:
e5:3f:11:9b:8a:6f:52:87:cd:ed:46:a5:14:fc:f8:c0:40:c9:
21:5c:a0:8b:e9:21:b8:31:f2:1a:ff:62:19:df:8f:51:06:ca:
d2:08:e0:9a:46:bb:c0:a6:44:99:29:b4:78:19:4b:bc:8a:a4:
d7:28:4a:b3:d6:1a:d9:f8:25:47:ff:c2:92:d3:10:82:e7:c8:
b3:27:40:e0:7d:ba:ea:ac:2c:77:35:44:d9:a0:15:3f:2a:73:
0e:04:ae:9e:1f:65:34:29:03:cc:ff:57:bc:90:0a:bf:14:41:
42:63:1d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwahdX90WzyHe/ePs+fTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjUxMDI3MTMwMDM5WhcNMjUxMDI4MTMwMDM5WjAzMTEwLwYDVQQD
Eyg4NjNiNGFlOTA5NmYwODk3ZTdiYjgyNmUwMjdiNWNmMmIyNjc3YWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWlB/1G9NpKJDHMS5y9VSrXG4jOp
W8QQrX6ShzYL4M6znEPJaT1T2RO7orSzMWR79GQ+94L3EcM5NobqI4eVHt6SVPLe
HFM/9GmDPkQZyniWKqAXtY61wDID6A5Y9bda03t/UrZ/+zWYnSduLkXNz99Bfvea
cigeHwy1CUxYHcPW6FkO5iR9lRHfZTCKqbRQTiMc29t3cbenGWgMmZogUaebo6mI
8pC78QtyjbyXeCmRwYlj1bQVKm6OQphphlH2syNhcYOLohnY59tGkRTwEuxWvTbs
sEziHL5oDNI8bTuofU6YoKNmjhLFgiFkqt/igahCXmQW3SOB8cHgPoBMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY7SukJbwiX57uCbgJ7XPKyZ3rTMB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFK1JlOsp
LriYbbsfyO8J9JatTwQKFnXQvL/6wILygt9fObyy5h51SrAPHdIQl5aggD8w71PX
LjtSGxBYbPb7MncA09aXZNjXVCLCP1sVe/j9APdmR6UvyjMvrvncg2oASIvna54/
I+KIzYs9wcu29ARhzmWI4TM5AOkvNrAdF4lSv4zcF8Y9s2GSfcS/UJN75T8Rm4pv
UofN7UalFPz4wEDJIVygi+khuDHyGv9iGd+PUQbK0gjgmka7wKZEmSm0eBlLvIqk
1yhKs9Ya2fglR//CktMQgufIsydA4H266qwsdzVE2aAVPypzDgSunh9lNCkDzP9X
vJAKvxRBQmMdQw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:19:21 2025 by rpki-client