Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier: gEs3blRJE+/olh4a8T6H+fOPs3n54iuR79d2CWvg9CE=
Subject key identifier: AE:B9:DF:D5:2A:35:7F:70:CC:CA:48:A0:3E:13:E2:B4:C7:68:85:88
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 019A21ADA9F292F6AA90B5F07DF36148BFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 18:00:20 +0000
Manifest this update: Sun 26 Oct 2025 18:00:20 +0000
Manifest next update: Mon 27 Oct 2025 18:00:20 +0000
Files and hashes: 1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: YyyMZYhCRQoHOpExjBqqNc5QidluMJjktv3e5qa5idI=)
4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:a9:f2:92:f6:aa:90:b5:f0:7d:f3:61:48:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Oct 26 18:00:20 2025 GMT
Not After : Oct 27 18:00:20 2025 GMT
Subject: CN=aeb9dfd52a357f70ccca48a03e13e2b4c7688588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:8d:90:e7:33:43:0c:3e:92:d3:37:f3:91:
6d:7d:c5:97:42:7a:d8:ca:c0:80:d4:18:40:56:e4:
64:4b:ef:55:5f:25:dc:15:19:f4:3b:0f:e3:45:06:
f4:5b:2c:33:04:1a:7e:7c:b5:11:15:8e:b5:50:f7:
01:92:e0:60:e7:5a:9e:7c:dc:3e:41:20:f8:61:0d:
0b:f7:a0:29:e5:f3:e4:79:93:3b:b6:7e:e9:e3:56:
22:0f:3f:f5:f1:0c:f2:36:db:c7:e7:6a:d4:4e:e9:
ed:28:b4:fd:c6:73:ab:5d:19:a3:c2:fe:14:78:f9:
7b:ec:b3:84:9f:c1:79:41:59:ce:a4:0e:97:57:23:
ba:47:c2:bf:02:08:45:0b:81:ae:01:98:f7:0b:0b:
b9:89:33:f1:fb:eb:aa:bd:6d:c7:8d:20:e2:db:84:
c3:6c:95:13:5c:03:7e:d8:1a:45:e5:b0:1b:8c:e4:
15:98:00:f3:55:f9:0c:6e:51:84:98:9e:9f:2c:64:
ee:76:b3:f2:9d:65:88:09:42:ae:0d:a2:58:e2:c2:
fa:5f:bd:c5:e4:86:e0:cf:e0:46:9f:53:aa:ab:b2:
2d:6d:c4:0b:65:e3:0f:c3:b7:4f:d8:0f:1e:41:e3:
fc:61:f7:62:e3:58:52:0e:90:dd:54:a8:c3:3e:0e:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:DF:D5:2A:35:7F:70:CC:CA:48:A0:3E:13:E2:B4:C7:68:85:88
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:49:a8:6a:d8:bb:45:ec:2e:2e:9d:7d:ee:0b:42:3f:6f:67:
7b:75:a1:9b:89:35:65:56:be:4a:a5:08:75:c8:dc:b1:4c:6c:
15:a2:68:44:0a:87:76:94:37:e7:38:6f:99:34:3d:50:de:2a:
31:97:9c:23:b1:1c:06:0e:a4:7d:50:e9:87:c7:ca:a3:75:7b:
a5:a8:83:2a:6a:bf:e3:45:1f:aa:db:a4:93:88:d3:91:85:59:
2b:52:c3:76:37:29:4a:16:43:2c:cf:71:aa:2d:75:50:d7:73:
c1:38:29:7b:6e:b5:35:85:af:d7:c9:b9:8d:c5:f7:fd:e0:d2:
0d:d7:9d:a1:36:32:f1:38:79:08:9d:e4:5a:60:c2:f1:7c:6c:
22:55:46:8e:e9:ab:09:51:df:82:35:72:9d:6d:2a:ad:b7:3d:
73:39:15:79:2d:0e:d8:85:f6:06:1e:d4:c7:49:50:53:70:e9:
8c:cd:29:da:91:54:0a:45:c6:a2:01:02:39:1c:13:bc:7b:91:
c3:22:61:ef:9b:19:7b:d8:b8:e4:8f:ef:fc:91:70:47:50:f0:
c6:0f:0d:da:d6:85:c9:63:31:6b:38:26:07:b8:cd:f1:ec:ce:
30:51:be:ed:fc:7d:09:e9:9e:e7:e8:69:66:ad:8d:74:f6:3b:
1f:69:fe:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohranykvaqkLXwffNhSL+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh
N2Q2MmMwHhcNMjUxMDI2MTgwMDIwWhcNMjUxMDI3MTgwMDIwWjAzMTEwLwYDVQQD
EyhhZWI5ZGZkNTJhMzU3ZjcwY2NjYTQ4YTAzZTEzZTJiNGM3Njg4NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+NkOczQww+ktM385FtfcWXQnrY
ysCA1BhAVuRkS+9VXyXcFRn0Ow/jRQb0WywzBBp+fLURFY61UPcBkuBg51qefNw+
QSD4YQ0L96Ap5fPkeZM7tn7p41YiDz/18QzyNtvH52rUTuntKLT9xnOrXRmjwv4U
ePl77LOEn8F5QVnOpA6XVyO6R8K/AghFC4GuAZj3Cwu5iTPx++uqvW3HjSDi24TD
bJUTXAN+2BpF5bAbjOQVmADzVfkMblGEmJ6fLGTudrPynWWICUKuDaJY4sL6X73F
5Ibgz+BGn1Oqq7ItbcQLZeMPw7dP2A8eQeP8Yfdi41hSDpDdVKjDPg6A7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6539UqNX9wzMpIoD4T4rTHaIWIMB8GA1UdIwQY
MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt
ZDA3NDY0YjliMzc4LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4
LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEmoati7
RewuLp197gtCP29ne3Whm4k1ZVa+SqUIdcjcsUxsFaJoRAqHdpQ35zhvmTQ9UN4q
MZecI7EcBg6kfVDph8fKo3V7paiDKmq/40Ufqtukk4jTkYVZK1LDdjcpShZDLM9x
qi11UNdzwTgpe261NYWv18m5jcX3/eDSDdedoTYy8Th5CJ3kWmDC8XxsIlVGjumr
CVHfgjVynW0qrbc9czkVeS0O2IX2Bh7Ux0lQU3DpjM0p2pFUCkXGogECORwTvHuR
wyJh75sZe9i45I/v/JFwR1Dwxg8N2taFyWMxazgmB7jN8ezOMFG+7fx9Ceme5+hp
Zq2NdPY7H2n+fQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:30 2025 by rpki-client