Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: eg+2hn3H8NaRYbfdzLfRP5vUn9WRGc5+/P1aQYCZNZY=
Subject key identifier: 9D:07:C9:25:60:DD:2D:48:B8:9E:5A:C4:EB:4D:EC:35:36:37:9F:B3
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019A2553C0A5D7587ABB4297CAA9CFB2A7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 16FE
Signing time: Mon 27 Oct 2025 11:00:37 +0000
Manifest this update: Mon 27 Oct 2025 11:00:37 +0000
Manifest next update: Tue 28 Oct 2025 11:00:37 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: TDSoimORFpCir9ff/Xtdlmh1DQkGEoEEkuMazV0YuSc=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:c0:a5:d7:58:7a:bb:42:97:ca:a9:cf:b2:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Oct 27 11:00:37 2025 GMT
Not After : Oct 28 11:00:37 2025 GMT
Subject: CN=9d07c92560dd2d48b89e5ac4eb4dec3536379fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:5c:f7:4e:f6:0e:73:ac:37:6d:13:20:2c:
f6:9a:47:4c:79:9f:3f:9a:cd:f1:75:1e:64:08:62:
8e:64:9d:59:1c:42:ad:ee:15:51:61:e5:f3:a0:06:
61:0e:a4:7e:57:60:ab:e5:28:f3:4f:19:0e:6e:3b:
2c:e7:e8:90:39:4f:8e:d0:99:3a:6e:2a:9c:38:b6:
72:21:dc:ea:30:c2:ef:3a:8d:8c:04:94:3c:c1:95:
7c:0e:b3:10:45:35:81:49:3d:ec:e7:1d:40:3c:31:
b7:e1:a7:51:22:39:3d:a4:4a:8a:d7:ae:1f:33:71:
b1:6e:df:92:f1:5d:8c:4d:04:83:22:c9:d7:14:45:
b3:11:07:59:f5:36:46:a3:a1:68:a6:9a:7d:a4:d3:
b2:10:f8:91:d3:a2:a5:be:55:80:d9:40:71:ab:a5:
d4:11:ea:2e:7d:51:51:b0:b0:6b:fb:5f:d4:d6:40:
c5:69:12:03:be:fc:df:1e:d5:37:32:63:d3:61:5c:
fd:43:0b:e2:7c:7b:ff:5d:47:77:db:87:c6:4d:59:
7b:4f:8f:de:8c:5c:73:c5:41:53:87:79:f0:09:33:
3e:a3:ec:11:78:4f:6d:ba:74:24:c8:67:28:d5:cd:
2e:ac:36:29:29:42:5e:8b:87:95:2e:e0:c6:bb:c6:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:C9:25:60:DD:2D:48:B8:9E:5A:C4:EB:4D:EC:35:36:37:9F:B3
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d0:d8:e5:9e:5f:36:ec:57:05:eb:8b:f5:e2:15:6c:6a:d0:
a2:d9:87:4b:6b:b0:74:c9:19:b2:60:36:74:2c:d2:d0:1c:5d:
fe:05:43:ac:90:85:2f:45:e2:50:3e:9d:5e:28:5b:7f:ab:8a:
f5:35:29:81:24:b3:bb:06:d9:14:aa:71:0e:1a:85:5b:06:99:
c1:ff:6d:00:fd:45:f5:8b:39:de:0c:f8:17:54:5b:9a:fa:87:
dd:f9:e1:c2:c4:65:01:4f:fb:aa:6d:03:1f:41:f4:43:74:7d:
63:5e:d5:97:2b:26:38:77:56:32:98:a2:97:19:96:6c:b9:c4:
54:c7:bd:05:3a:c2:0b:3f:b8:08:76:12:22:7f:ec:59:eb:ac:
ad:e0:67:7c:ba:b0:0f:f0:65:ed:b3:fb:0e:41:67:c9:61:d7:
01:cb:c7:ec:8c:07:99:72:e7:7e:38:52:50:23:72:c5:cb:ba:
24:7c:fe:fe:56:48:52:18:af:58:cf:ec:6b:5a:bb:5c:15:ce:
c6:f0:25:a5:72:e7:8d:bf:b1:a5:b5:c9:52:8c:72:fb:23:4d:
74:b7:7c:dc:e0:a4:fb:30:a1:87:32:be:5f:a4:19:4d:a4:63:
e7:04:9c:19:fc:92:3e:b0:fa:54:05:40:71:bf:a9:cf:f8:5e:
41:01:50:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU8Cl11h6u0KXyqnPsqeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUxMDI3MTEwMDM3WhcNMjUxMDI4MTEwMDM3WjAzMTEwLwYDVQQD
Eyg5ZDA3YzkyNTYwZGQyZDQ4Yjg5ZTVhYzRlYjRkZWMzNTM2Mzc5ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGhc9072DnOsN20TICz2mkdMeZ8/
ms3xdR5kCGKOZJ1ZHEKt7hVRYeXzoAZhDqR+V2Cr5SjzTxkObjss5+iQOU+O0Jk6
biqcOLZyIdzqMMLvOo2MBJQ8wZV8DrMQRTWBST3s5x1APDG34adRIjk9pEqK164f
M3Gxbt+S8V2MTQSDIsnXFEWzEQdZ9TZGo6Foppp9pNOyEPiR06KlvlWA2UBxq6XU
EeoufVFRsLBr+1/U1kDFaRIDvvzfHtU3MmPTYVz9QwvifHv/XUd324fGTVl7T4/e
jFxzxUFTh3nwCTM+o+wReE9tunQkyGco1c0urDYpKUJei4eVLuDGu8YVmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0HySVg3S1IuJ5axOtN7DU2N5+zMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9DY5Z5f
NuxXBeuL9eIVbGrQotmHS2uwdMkZsmA2dCzS0Bxd/gVDrJCFL0XiUD6dXihbf6uK
9TUpgSSzuwbZFKpxDhqFWwaZwf9tAP1F9Ys53gz4F1RbmvqH3fnhwsRlAU/7qm0D
H0H0Q3R9Y17VlysmOHdWMpiilxmWbLnEVMe9BTrCCz+4CHYSIn/sWeusreBnfLqw
D/Bl7bP7DkFnyWHXAcvH7IwHmXLnfjhSUCNyxcu6JHz+/lZIUhivWM/sa1q7XBXO
xvAlpXLnjb+xpbXJUoxy+yNNdLd83OCk+zChhzK+X6QZTaRj5wScGfySPrD6VAVA
cb+pz/heQQFQoA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:09:52 2025 by rpki-client