Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: vcL1DvV+5noRsvSzQDduTda0KWTz4EujhmCkTaZaCWc=
Subject key identifier: 0F:78:AF:C1:52:18:50:0A:36:26:E1:15:AD:3E:47:39:1F:C3:A7:CA
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019A70A56FD33A9AE361970D8BBF0601A35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 05AD
Signing time: Tue 11 Nov 2025 02:01:21 +0000
Manifest this update: Tue 11 Nov 2025 02:01:21 +0000
Manifest next update: Wed 12 Nov 2025 02:01:21 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: 9RPymfHuelJkJ2rQLFHJUsjsoXw8d8UWpNm4FfJ+x8M=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6f:d3:3a:9a:e3:61:97:0d:8b:bf:06:01:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Nov 11 02:01:21 2025 GMT
Not After : Nov 12 02:01:21 2025 GMT
Subject: CN=0f78afc15218500a3626e115ad3e47391fc3a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:72:2c:30:8e:ee:cf:75:29:f6:cf:e9:af:
32:7e:db:ed:06:5a:eb:af:96:3c:33:51:9b:dd:dc:
22:b0:db:b2:4b:2c:60:94:78:fa:00:11:62:cf:d4:
3f:57:2b:33:f4:d4:85:88:53:f9:ca:f2:85:02:71:
d6:bc:1a:1d:4f:d8:e3:2f:f1:3b:03:30:21:2b:e9:
65:e0:b4:7e:70:7b:35:60:a2:3e:90:40:2f:18:dc:
23:d6:a7:10:15:48:a7:ee:d8:5c:d0:04:d4:3e:08:
26:d1:14:52:17:82:33:8c:09:1b:72:2f:1c:19:02:
ab:27:cd:40:99:d9:71:01:8c:35:2d:9e:5b:bc:6b:
55:ed:a6:ff:eb:ae:0d:1d:e8:74:67:b5:d8:cc:49:
69:bb:58:8f:78:43:eb:4b:3f:bd:2f:31:5d:f6:12:
7d:a6:a2:1d:0b:8e:75:c4:dc:ac:0a:2b:24:93:ad:
b2:2e:ee:0d:1f:92:c2:6e:53:cf:3d:0d:26:f5:7a:
85:9f:6d:17:7d:2a:a9:49:f3:cf:fd:41:7b:df:66:
94:49:c8:be:32:8b:6b:48:82:e7:28:37:3b:44:6c:
86:b7:15:c4:53:b6:ec:af:af:34:5d:2b:37:d1:14:
a5:dd:de:8a:e6:b5:1e:e6:c4:d9:62:64:14:44:45:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:AF:C1:52:18:50:0A:36:26:E1:15:AD:3E:47:39:1F:C3:A7:CA
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:53:76:63:08:48:41:25:5b:71:91:f5:5d:b3:03:8f:4b:
e9:ce:07:a3:45:34:5d:89:44:3d:a9:82:2f:de:58:c9:7f:e3:
06:1b:a4:ea:e5:dd:75:84:fb:ad:74:d2:03:82:b2:4e:ff:58:
20:21:8e:fc:68:89:36:07:7a:e4:dc:e7:84:c8:d3:fd:90:05:
c0:7d:9f:78:75:5a:ff:25:ce:0a:80:c5:9b:c5:eb:50:7a:a3:
34:de:d5:d2:7f:cf:88:55:20:e2:13:05:98:9a:c9:7b:de:e0:
fb:15:6b:11:64:88:3f:82:dd:2a:b2:e2:be:f7:07:03:8f:42:
94:c9:95:e2:b8:77:82:ab:40:77:59:91:4e:3c:21:33:c4:a3:
45:c1:36:4c:f8:22:7a:25:ff:00:59:1c:4b:5c:f0:2a:25:48:
1e:26:15:e2:c4:1f:6a:41:35:18:4e:ee:99:64:ee:f1:6d:38:
27:51:64:7f:35:3f:d4:95:57:8c:f7:d8:e6:4f:fd:43:c7:35:
2f:df:01:0f:23:7c:fa:36:44:f7:b5:d3:3a:51:ae:85:9b:ea:
98:09:4a:db:2a:22:f7:d7:e0:ef:07:46:12:3f:ce:ca:1c:60:
b3:17:35:a5:9f:a6:89:cb:4a:6f:7c:30:b8:3f:76:05:ef:fc:
64:70:1e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpW/TOprjYZcNi78GAaNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjUxMTExMDIwMTIxWhcNMjUxMTEyMDIwMTIxWjAzMTEwLwYDVQQD
EygwZjc4YWZjMTUyMTg1MDBhMzYyNmUxMTVhZDNlNDczOTFmYzNhN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ9yLDCO7s91KfbP6a8yftvtBlrr
r5Y8M1Gb3dwisNuySyxglHj6ABFiz9Q/Vysz9NSFiFP5yvKFAnHWvBodT9jjL/E7
AzAhK+ll4LR+cHs1YKI+kEAvGNwj1qcQFUin7thc0ATUPggm0RRSF4IzjAkbci8c
GQKrJ81AmdlxAYw1LZ5bvGtV7ab/664NHeh0Z7XYzElpu1iPeEPrSz+9LzFd9hJ9
pqIdC451xNysCiskk62yLu4NH5LCblPPPQ0m9XqFn20XfSqpSfPP/UF732aUSci+
MotrSILnKDc7RGyGtxXEU7bsr680XSs30RSl3d6K5rUe5sTZYmQUREXArQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA94r8FSGFAKNibhFa0+Rzkfw6fKMB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw
LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGhTdmMI
SEElW3GR9V2zA49L6c4Ho0U0XYlEPamCL95YyX/jBhuk6uXddYT7rXTSA4KyTv9Y
ICGO/GiJNgd65NznhMjT/ZAFwH2feHVa/yXOCoDFm8XrUHqjNN7V0n/PiFUg4hMF
mJrJe97g+xVrEWSIP4LdKrLivvcHA49ClMmV4rh3gqtAd1mRTjwhM8SjRcE2TPgi
eiX/AFkcS1zwKiVIHiYV4sQfakE1GE7umWTu8W04J1FkfzU/1JVXjPfY5k/9Q8c1
L98BDyN8+jZE97XTOlGuhZvqmAlK2yoi99fg7wdGEj/Oyhxgsxc1pZ+mictKb3ww
uD92Be/8ZHAesA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:51 2025 by rpki-client