Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: RA943XWSjoL4xpXAsC6jilz/H6EZnaLvnPXz+9hFd3M=
Subject key identifier: 53:C0:08:5F:E0:D5:08:C6:4E:34:09:54:39:93:63:1A:DF:1C:4A:09
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019A23D34A5DD8FE1625CB6C55D4BBD22C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 04:00:40 +0000
Manifest this update: Mon 27 Oct 2025 04:00:40 +0000
Manifest next update: Tue 28 Oct 2025 04:00:40 +0000
Files and hashes: 1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=)
2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: jonBrtNWU8B9XwGT1JUexNBS8IRKc6mbYXK4gvflDBk=)
3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=)
4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:4a:5d:d8:fe:16:25:cb:6c:55:d4:bb:d2:2c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Oct 27 04:00:40 2025 GMT
Not After : Oct 28 04:00:40 2025 GMT
Subject: CN=53c0085fe0d508c64e3409543993631adf1c4a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:51:3e:b5:1b:b2:5e:86:f1:aa:79:b9:0f:
09:f1:55:1c:7f:5d:4e:a4:7d:33:2b:af:b5:34:34:
c3:e8:28:de:f0:eb:89:4d:8f:33:4e:05:4b:9b:2c:
ed:a2:28:2d:01:23:be:67:12:76:0a:f4:70:2e:63:
bf:d8:3d:95:f8:7e:79:10:3d:f9:a5:89:7e:18:d7:
0e:6d:3f:62:eb:b7:ee:44:2c:98:f2:e8:d3:b3:6e:
75:35:f8:46:de:4c:71:f4:95:ec:65:8a:aa:d5:b9:
d7:93:03:4b:57:42:7e:12:82:e2:d1:d3:9b:79:90:
a8:a5:64:90:e9:6d:4f:8c:cd:b7:ce:91:f4:3b:cd:
77:44:41:03:d8:bc:6b:e6:36:de:c8:60:ae:43:2a:
c7:56:a0:a5:3b:6b:2e:d0:8a:a3:1f:95:6e:b4:57:
2a:2e:83:82:1d:51:f2:eb:82:01:18:81:da:55:41:
c0:e3:51:c2:66:7c:85:af:d0:b7:25:80:04:02:d6:
bd:de:d1:70:ee:d1:bb:9d:84:cc:bc:b5:91:96:f4:
d6:7b:a4:6b:05:26:81:bd:2e:93:56:02:ec:09:72:
4d:9d:47:a0:69:e8:56:3d:d1:e8:d6:8c:b6:01:64:
be:6a:3e:17:59:7b:39:b9:1c:51:97:33:0d:8d:f4:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C0:08:5F:E0:D5:08:C6:4E:34:09:54:39:93:63:1A:DF:1C:4A:09
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:17:50:12:7d:e7:f9:36:01:9d:e9:b8:b2:93:e4:90:5f:
12:91:8b:1f:13:77:3d:bb:32:d7:c8:6e:2c:24:ff:a2:cf:79:
96:88:98:7e:75:73:76:d7:06:2a:80:80:b9:65:1a:a9:da:9e:
96:38:16:48:c6:c2:91:2c:94:05:72:c6:ed:d4:d8:21:35:41:
13:92:6d:54:a8:cf:0a:2e:a4:00:90:f1:42:17:7a:b4:82:66:
da:5d:33:9c:4c:5e:f0:e9:b3:60:df:b5:01:5f:01:c8:4b:12:
4a:8b:fc:50:dd:bf:8f:b3:84:3b:54:45:46:30:f0:90:a3:fb:
44:5e:70:2f:64:71:65:9e:eb:7b:ea:f6:92:4d:2e:93:9c:93:
8a:20:22:d5:38:d8:ae:95:46:56:df:bf:e0:4a:11:42:b2:0b:
1f:59:4b:da:c4:55:b9:37:ea:ec:95:5a:b6:d1:32:30:6e:e6:
00:b9:1c:98:9a:50:24:b7:5b:36:da:e4:c3:7d:d5:ee:d7:17:
f0:b3:96:a5:4a:a3:29:20:ba:3e:35:5a:6f:40:90:90:38:f7:
17:ad:64:5f:a8:99:a0:1d:c2:af:4d:44:ed:3f:65:96:91:c8:
45:35:f2:96:5b:36:cc:33:b9:a5:b3:95:47:e7:b2:dd:f9:15:
d8:b1:1d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj00pd2P4WJctsVdS70iyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy
OGE1YmIwHhcNMjUxMDI3MDQwMDQwWhcNMjUxMDI4MDQwMDQwWjAzMTEwLwYDVQQD
Eyg1M2MwMDg1ZmUwZDUwOGM2NGUzNDA5NTQzOTkzNjMxYWRmMWM0YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohNRPrUbsl6G8ap5uQ8J8VUcf11O
pH0zK6+1NDTD6Cje8OuJTY8zTgVLmyztoigtASO+ZxJ2CvRwLmO/2D2V+H55ED35
pYl+GNcObT9i67fuRCyY8ujTs251NfhG3kxx9JXsZYqq1bnXkwNLV0J+EoLi0dOb
eZCopWSQ6W1PjM23zpH0O813REED2Lxr5jbeyGCuQyrHVqClO2su0IqjH5VutFcq
LoOCHVHy64IBGIHaVUHA41HCZnyFr9C3JYAEAta93tFw7tG7nYTMvLWRlvTWe6Rr
BSaBvS6TVgLsCXJNnUegaehWPdHo1oy2AWS+aj4XWXs5uRxRlzMNjfRuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPACF/g1QjGTjQJVDmTYxrfHEoJMB8GA1UdIwQY
MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt
M2U3Y2FkZDg4YzcwLzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw
LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzEXUBJ9
5/k2AZ3puLKT5JBfEpGLHxN3Pbsy18huLCT/os95loiYfnVzdtcGKoCAuWUaqdqe
ljgWSMbCkSyUBXLG7dTYITVBE5JtVKjPCi6kAJDxQhd6tIJm2l0znExe8OmzYN+1
AV8ByEsSSov8UN2/j7OEO1RFRjDwkKP7RF5wL2RxZZ7re+r2kk0uk5yTiiAi1TjY
rpVGVt+/4EoRQrILH1lL2sRVuTfq7JVattEyMG7mALkcmJpQJLdbNtrkw33V7tcX
8LOWpUqjKSC6PjVab0CQkDj3F61kX6iZoB3Cr01E7T9llpHIRTXylls2zDO5pbOV
R+ey3fkV2LEdFg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 10:31:23 2025 by rpki-client