Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: JaL+2YxOasPakkRwUuDLftEs6wo7mEYnSMWHOQ15mSg=
Subject key identifier: 55:26:95:FF:88:55:43:35:69:61:DC:F1:F9:FD:D1:F2:1F:A8:64:BC
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 02A877BD81BA9971285BA267FF3BB1D8112C7804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 02BF
Signing time: Tue 21 Oct 2025 02:02:14 +0000
Manifest this update: Tue 21 Oct 2025 01:57:14 +0000
Manifest next update: Wed 22 Oct 2025 04:27:14 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: VaBweCRtwVFPui/OEg2NldfuNJZnJsyzOr8B50nhkDc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a8:77:bd:81:ba:99:71:28:5b:a2:67:ff:3b:b1:d8:11:2c:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Oct 21 01:57:14 2025 GMT
Not After : Oct 22 04:27:14 2025 GMT
Subject: CN=552695FF885543356961DCF1F9FDD1F21FA864BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:16:52:9a:04:c4:1b:02:53:36:04:16:a2:
a7:5c:b3:77:99:dc:e0:63:ee:de:99:99:83:53:cf:
a6:44:68:e1:de:b9:8c:53:5a:c5:2e:6e:f6:18:fc:
fd:97:1f:f1:15:4b:95:ed:4a:4f:f0:47:31:54:0e:
fa:d8:78:a6:68:71:3b:08:8e:70:e7:34:a5:a2:90:
3f:e8:a6:b4:0f:2f:25:5f:35:52:ee:f0:73:d3:00:
af:03:85:a3:ec:70:67:25:88:ff:0b:ec:f0:83:59:
39:6e:30:47:3f:4c:0c:7f:68:4f:fc:3a:a1:af:9d:
c6:d2:9c:24:7a:1e:ac:13:2a:4b:01:66:49:c4:c8:
91:d5:72:38:d2:82:d3:14:8b:d8:97:b0:82:d7:51:
3c:2b:5d:30:76:8d:45:e5:78:fa:9f:52:39:a7:e3:
c1:d5:94:29:26:77:0d:63:00:27:1c:06:14:9d:71:
ec:df:68:9c:4a:a0:40:55:01:c9:a3:f4:1b:2b:43:
89:03:af:36:56:36:6a:08:8c:86:d6:10:5c:61:19:
26:f5:1a:b1:69:dc:a5:d3:45:15:c5:16:69:ba:4e:
51:ef:eb:eb:be:2e:54:38:b4:7d:38:e1:73:58:f1:
00:f0:a5:8f:88:5e:fc:77:3b:a4:c6:58:0b:27:e0:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:95:FF:88:55:43:35:69:61:DC:F1:F9:FD:D1:F2:1F:A8:64:BC
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:2c:ba:8c:7e:98:cf:c9:fd:b0:cc:4c:2c:b4:c0:5f:9a:
50:14:9d:96:6a:82:3f:03:b5:a7:b4:b6:0a:59:78:fa:e1:7b:
38:09:fb:69:14:5d:5f:8c:77:52:ca:7c:e6:f8:db:0a:29:56:
27:38:9b:f9:2a:7c:88:b1:6c:ef:ba:08:84:92:4f:f3:83:4d:
94:b2:fe:a8:24:46:45:ac:59:57:42:4f:28:7a:55:28:8d:50:
7e:10:3a:51:1e:2a:5c:b8:f6:18:a4:db:a7:f9:f4:cf:e2:cd:
2a:88:de:44:22:37:04:40:49:93:48:af:9e:e4:33:6f:e5:c4:
ac:ba:17:98:86:90:11:4d:8d:01:0a:2d:57:4e:b7:62:3b:96:
b9:9c:a7:99:13:6b:cb:da:ef:50:3f:ae:4e:c1:ad:32:4e:95:
d2:39:87:2d:ae:3e:b9:88:e3:22:ed:f2:c0:e1:a9:8f:f6:05:
14:09:20:fb:88:c6:f9:b0:de:33:6c:5a:4d:1f:2e:85:cb:45:
23:90:09:78:e2:18:83:f2:ef:aa:1c:f8:d7:6b:01:35:48:e4:
c1:05:fb:20:0e:2f:92:4f:ec:0a:cf:c8:d8:64:8e:d5:66:b8:
c8:fc:9e:17:66:78:6a:83:a9:0f:e4:da:30:21:d6:ca:63:3e:
0c:de:8e:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAqh3vYG6mXEoW6Jn/zux2BEseAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz
MjAyNWNmMTAeFw0yNTEwMjEwMTU3MTRaFw0yNTEwMjIwNDI3MTRaMDMxMTAvBgNV
BAMTKDU1MjY5NUZGODg1NTQzMzU2OTYxRENGMUY5RkREMUYyMUZBODY0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwRZSmgTEGwJTNgQWoqdcs3eZ
3OBj7t6ZmYNTz6ZEaOHeuYxTWsUubvYY/P2XH/EVS5XtSk/wRzFUDvrYeKZocTsI
jnDnNKWikD/oprQPLyVfNVLu8HPTAK8DhaPscGcliP8L7PCDWTluMEc/TAx/aE/8
OqGvncbSnCR6HqwTKksBZknEyJHVcjjSgtMUi9iXsILXUTwrXTB2jUXlePqfUjmn
48HVlCkmdw1jACccBhSdcezfaJxKoEBVAcmj9BsrQ4kDrzZWNmoIjIbWEFxhGSb1
GrFp3KXTRRXFFmm6TlHv6+u+LlQ4tH044XNY8QDwpY+IXvx3O6TGWAsn4HpJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVSaV/4hVQzVpYdzx+f3R8h+oZLwwHwYDVR0j
BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh
NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ
Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m
NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC
QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeYsuox+mM/J/bDMTCy0
wF+aUBSdlmqCPwO1p7S2Cll4+uF7OAn7aRRdX4x3Usp85vjbCilWJzib+Sp8iLFs
77oIhJJP84NNlLL+qCRGRaxZV0JPKHpVKI1QfhA6UR4qXLj2GKTbp/n0z+LNKoje
RCI3BEBJk0ivnuQzb+XErLoXmIaQEU2NAQotV063YjuWuZynmRNry9rvUD+uTsGt
Mk6V0jmHLa4+uYjjIu3ywOGpj/YFFAkg+4jG+bDeM2xaTR8uhctFI5AJeOIYg/Lv
qhz412sBNUjkwQX7IA4vkk/sCs/I2GSO1Wa4yPyeF2Z4aoOpD+TaMCHWymM+DN6O
Dg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:11 2025 by rpki-client