Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: KCpgBOwvjpxXdBMoQjaPofybI+mf0mjii77l6ZvpmUA=
Subject key identifier: 3F:6A:E2:FE:A7:BF:C8:85:23:51:5E:DE:86:72:A3:1A:D0:67:A6:F0
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 019A18E261B91108C9C8FC0B948172F329DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0828
Signing time: Sat 25 Oct 2025 01:01:20 +0000
Manifest this update: Sat 25 Oct 2025 01:01:20 +0000
Manifest next update: Sun 26 Oct 2025 01:01:20 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: LQWfCBDARCuyB4kL9LZwX2FISuP642LIWeB9Apn00ms=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:61:b9:11:08:c9:c8:fc:0b:94:81:72:f3:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Oct 25 01:01:20 2025 GMT
Not After : Oct 26 01:01:20 2025 GMT
Subject: CN=3f6ae2fea7bfc88523515ede8672a31ad067a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:15:3b:3e:1c:d9:14:d7:3f:e3:c7:84:f9:
d0:e9:c5:1a:46:37:6c:a3:98:95:1b:b4:1f:34:26:
83:c3:3e:c7:84:cb:3d:79:a1:00:24:6a:3f:35:7f:
0d:d8:69:9f:0f:fa:24:62:06:dc:03:b9:85:01:04:
d3:62:80:e2:cc:66:17:15:c7:b5:5b:cb:dc:9b:6e:
e6:17:88:76:4b:9c:a7:3f:14:0b:37:f4:1f:cf:fd:
30:4f:61:8f:07:86:c0:cc:15:1b:c2:bb:d9:0f:43:
17:69:05:d2:07:cc:cc:c7:d1:d3:ba:2b:a9:ea:d2:
af:b0:d4:84:0d:a9:31:9a:45:dc:74:cc:97:91:53:
93:a1:32:f4:e7:10:08:4d:c7:a4:c1:0e:79:c7:af:
27:e0:cf:37:56:dc:36:c3:37:f2:be:73:01:78:c6:
89:66:37:f0:94:07:40:a3:dd:0f:13:18:51:a5:7c:
ca:cf:c1:37:84:ed:4f:6e:7f:a7:39:3d:f5:cb:74:
70:d4:ed:36:6d:94:20:80:01:b2:6a:e1:a1:e9:f4:
fb:bc:8f:9d:e8:3f:6f:92:55:90:8d:42:50:a2:1a:
25:be:d6:0c:91:f4:2f:de:30:20:b9:25:af:21:61:
c7:cf:72:3e:0f:48:c0:66:83:b6:57:d2:7a:26:c5:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:E2:FE:A7:BF:C8:85:23:51:5E:DE:86:72:A3:1A:D0:67:A6:F0
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:87:90:ea:e0:b6:d8:fe:00:4f:3d:e3:01:16:51:64:93:3c:
e8:97:38:64:50:3a:7e:53:f9:df:c9:3b:11:cd:fc:09:c4:c3:
d9:17:ec:90:26:2d:9f:29:d9:b6:4a:7e:3f:44:4d:9c:44:60:
76:98:ac:c1:73:b2:77:af:8d:63:75:f7:34:97:ab:21:27:dc:
f6:2c:b8:0f:67:3a:23:04:7f:aa:dd:11:4d:d9:1e:52:f8:3e:
a2:8f:e6:e3:bf:a0:a7:0f:19:1f:b7:58:8b:24:17:67:cb:0d:
46:78:d1:1e:48:69:12:28:72:e4:57:47:11:ca:02:eb:de:fc:
31:4b:a1:2d:79:48:41:e3:df:7d:b4:4b:bb:d9:8e:11:ba:ea:
02:7f:5c:26:e9:89:a0:2d:c2:5c:94:d9:d3:8f:5f:0d:aa:cb:
0e:43:3b:8c:ab:08:d6:c0:95:c3:a0:0d:d5:f6:73:42:8f:6e:
da:11:c3:bc:78:fd:02:b0:6f:2b:ab:26:0d:14:65:4c:8a:55:
9e:42:a6:36:10:3b:45:cd:84:88:6b:64:f5:e0:5a:22:14:bb:
3d:9f:d8:3b:74:bc:99:b5:30:c1:48:1f:1f:cf:11:5f:9c:d4:
c1:09:80:48:7b:dc:d9:a2:5f:0e:4b:a9:b2:19:18:a4:6c:9f:
be:30:87:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4mG5EQjJyPwLlIFy8yncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjUxMDI1MDEwMTIwWhcNMjUxMDI2MDEwMTIwWjAzMTEwLwYDVQQD
EygzZjZhZTJmZWE3YmZjODg1MjM1MTVlZGU4NjcyYTMxYWQwNjdhNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/8VOz4c2RTXP+PHhPnQ6cUaRjds
o5iVG7QfNCaDwz7HhMs9eaEAJGo/NX8N2GmfD/okYgbcA7mFAQTTYoDizGYXFce1
W8vcm27mF4h2S5ynPxQLN/Qfz/0wT2GPB4bAzBUbwrvZD0MXaQXSB8zMx9HTuiup
6tKvsNSEDakxmkXcdMyXkVOToTL05xAITcekwQ55x68n4M83Vtw2wzfyvnMBeMaJ
ZjfwlAdAo90PExhRpXzKz8E3hO1Pbn+nOT31y3Rw1O02bZQggAGyauGh6fT7vI+d
6D9vklWQjUJQoholvtYMkfQv3jAguSWvIWHHz3I+D0jAZoO2V9J6JsVdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9q4v6nv8iFI1Fe3oZyoxrQZ6bwMB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4eQ6uC2
2P4ATz3jARZRZJM86Jc4ZFA6flP538k7Ec38CcTD2RfskCYtnynZtkp+P0RNnERg
dpiswXOyd6+NY3X3NJerISfc9iy4D2c6IwR/qt0RTdkeUvg+oo/m47+gpw8ZH7dY
iyQXZ8sNRnjRHkhpEihy5FdHEcoC6978MUuhLXlIQePffbRLu9mOEbrqAn9cJumJ
oC3CXJTZ049fDarLDkM7jKsI1sCVw6AN1fZzQo9u2hHDvHj9ArBvK6smDRRlTIpV
nkKmNhA7Rc2EiGtk9eBaIhS7PZ/YO3S8mbUwwUgfH88RX5zUwQmASHvc2aJfDkup
shkYpGyfvjCHug==
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:30:47 2025 by rpki-client