Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: 1D88GxyV+w+2Rd5ZFpkP/BUvh/8Kwag1dkYkdUmH9TI=
Subject key identifier: 68:AF:37:78:3F:53:DC:E5:2B:5B:D7:8D:23:45:37:7F:FA:98:E4:DF
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019A26D4B59933CB556D721263E9B17342E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0A27
Signing time: Mon 27 Oct 2025 18:01:05 +0000
Manifest this update: Mon 27 Oct 2025 18:01:05 +0000
Manifest next update: Tue 28 Oct 2025 18:01:05 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: HfTmNBqDrOuSPa9/wfPp57ZujK1xeNOqc2sgc/Ax54U=)
2: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (hash: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=)
3: ltJZ2aR5x60TKWiWAmS0-oj2c_k.roa (hash: 34pWAkD5QJ94abRhTwOLQbh2Aksu0yZZqkvvoYsDUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:b5:99:33:cb:55:6d:72:12:63:e9:b1:73:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Oct 27 18:01:05 2025 GMT
Not After : Oct 28 18:01:05 2025 GMT
Subject: CN=68af37783f53dce52b5bd78d2345377ffa98e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:0d:3c:f0:cb:5e:36:3c:05:88:6b:38:56:
1b:e6:c5:c8:90:09:e3:2b:74:3e:9d:5c:f8:03:6f:
4e:f9:30:36:74:c0:ab:37:84:96:b6:de:91:87:c6:
c1:63:43:0a:16:39:34:8e:0f:8c:92:b9:f0:16:cd:
e8:0a:d1:f9:20:73:de:5f:25:7e:d6:33:98:62:30:
75:bf:7e:ce:db:49:44:dd:df:9f:43:8a:88:ca:b6:
4a:11:c6:7e:9b:90:ab:3b:26:5c:42:05:d2:4d:69:
8f:9f:68:66:ee:68:41:95:5b:31:05:3e:76:73:de:
94:6a:15:39:12:23:42:08:a4:3a:99:c4:cb:26:ba:
8b:40:96:c3:90:ec:95:3d:81:d0:d0:f2:ea:1f:ea:
9a:a4:6d:ee:b7:09:c5:36:ca:d9:b2:79:27:19:92:
e6:36:7b:83:ba:14:3c:9d:a1:78:ea:dd:e5:98:a6:
4b:ea:ac:14:61:cc:e0:0c:cd:f3:8b:56:c3:e4:7c:
cc:a4:15:e3:b6:17:32:10:2d:6a:6c:e6:23:be:cf:
0e:05:e1:12:d4:da:bc:76:86:81:76:d4:e7:27:44:
29:d0:27:cb:47:92:0b:0f:f0:7b:e6:72:98:49:85:
d2:81:1a:5e:df:04:27:3b:49:3b:30:f4:a6:6e:83:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:37:78:3F:53:DC:E5:2B:5B:D7:8D:23:45:37:7F:FA:98:E4:DF
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:28:7e:5e:3c:67:01:e9:13:a3:8c:9e:b0:a3:5f:5f:27:
f0:fe:c8:c7:63:02:aa:dc:27:bd:d5:ef:6d:84:21:58:6c:98:
d3:d4:a4:16:36:14:19:55:f2:9d:f9:70:b2:84:b1:38:e8:70:
71:60:c1:28:0e:55:6f:66:5e:2e:27:5c:c3:b9:c2:9c:0c:22:
a2:eb:e7:52:ed:34:9f:b9:90:d1:97:4c:c0:6b:7d:4f:3e:78:
0a:c4:fb:83:56:c4:5b:fa:81:62:b7:af:a9:2b:9a:3c:3e:79:
10:97:fc:48:cf:2b:b9:6d:eb:ab:90:6d:cb:40:d3:0b:24:af:
e5:47:05:f5:bc:2c:0e:56:8a:91:d6:7a:d0:8e:50:84:3c:f4:
c5:47:3a:be:45:87:b0:c2:3a:96:aa:8d:f6:64:8f:62:c0:61:
6d:12:42:a4:21:f0:d0:0c:e0:c1:0d:94:dd:58:e3:87:74:4e:
93:a6:ea:79:3d:0a:e9:43:54:19:a2:8d:54:ef:bf:de:cb:ad:
42:33:2a:2d:e6:f3:9d:67:66:45:8d:55:fe:96:14:b7:1f:8a:
c5:c6:51:80:ee:cf:5d:56:5f:79:51:62:46:17:81:48:0d:82:
fe:eb:59:84:1b:08:ef:a7:3b:b8:27:7b:3f:e6:f4:f7:e2:20:
d6:26:af:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1LWZM8tVbXISY+mxc0LpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWJhMjlhNzVhZTEzMjVjMDM4MmZiNDg0YjMyMWQ2OGQx
NTQzODQwHhcNMjUxMDI3MTgwMTA1WhcNMjUxMDI4MTgwMTA1WjAzMTEwLwYDVQQD
Eyg2OGFmMzc3ODNmNTNkY2U1MmI1YmQ3OGQyMzQ1Mzc3ZmZhOThlNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNoNPPDLXjY8BYhrOFYb5sXIkAnj
K3Q+nVz4A29O+TA2dMCrN4SWtt6Rh8bBY0MKFjk0jg+MkrnwFs3oCtH5IHPeXyV+
1jOYYjB1v37O20lE3d+fQ4qIyrZKEcZ+m5CrOyZcQgXSTWmPn2hm7mhBlVsxBT52
c96UahU5EiNCCKQ6mcTLJrqLQJbDkOyVPYHQ0PLqH+qapG3utwnFNsrZsnknGZLm
NnuDuhQ8naF46t3lmKZL6qwUYczgDM3zi1bD5HzMpBXjthcyEC1qbOYjvs8OBeES
1Nq8doaBdtTnJ0Qp0CfLR5ILD/B75nKYSYXSgRpe3wQnO0k7MPSmboMjHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGivN3g/U9zlK1vXjSNFN3/6mOTfMB8GA1UdIwQY
MBaAFBWbopp1rhMlwDgvtISzIdaNFUOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQt
Y2FmNGZhMDcyNjgyLzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQtY2FmNGZhMDcyNjgy
LzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVcofl48
ZwHpE6OMnrCjX18n8P7Ix2MCqtwnvdXvbYQhWGyY09SkFjYUGVXynflwsoSxOOhw
cWDBKA5Vb2ZeLidcw7nCnAwiouvnUu00n7mQ0ZdMwGt9Tz54CsT7g1bEW/qBYrev
qSuaPD55EJf8SM8ruW3rq5Bty0DTCySv5UcF9bwsDlaKkdZ60I5QhDz0xUc6vkWH
sMI6lqqN9mSPYsBhbRJCpCHw0AzgwQ2U3Vjjh3ROk6bqeT0K6UNUGaKNVO+/3sut
QjMqLebznWdmRY1V/pYUtx+KxcZRgO7PXVZfeVFiRheBSA2C/utZhBsI76c7uCd7
P+b09+Ig1iavQw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:47:43 2025 by rpki-client