Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier: O4YszONTOo9bOoBA1ocBDpFMd2dybxdgk6qzpjpbOBw=
Subject key identifier: 02:C3:E2:84:A8:80:D4:A1:D7:1D:1F:58:6B:1D:3A:32:53:05:86:5D
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial: 759126841E4CB05A5824BA6901DC597BD50F6473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number: 0FF3
Signing time: Sat 25 Oct 2025 11:13:13 +0000
Manifest this update: Sat 25 Oct 2025 11:08:13 +0000
Manifest next update: Sun 26 Oct 2025 13:53:13 +0000
Files and hashes: 1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: Tb0HyAyQc9bdJTB8g4nMBA6y2Mp+CL0YMj3gorpgeLc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 13:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:91:26:84:1e:4c:b0:5a:58:24:ba:69:01:dc:59:7b:d5:0f:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
Validity
Not Before: Oct 25 11:08:13 2025 GMT
Not After : Oct 26 13:53:13 2025 GMT
Subject: CN=02C3E284A880D4A1D71D1F586B1D3A325305865D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:93:1b:56:0d:d6:17:a1:e1:2d:b3:b3:09:
e8:18:0e:5f:62:85:17:5a:23:e4:a0:6e:4b:0a:db:
d9:34:fa:d5:81:38:59:6f:1e:95:75:ab:25:78:5d:
5f:a4:84:ad:1b:a0:1d:1a:70:16:03:5b:ed:b5:71:
93:cb:6f:51:b4:9d:71:34:de:45:34:4d:89:b9:ba:
9d:b7:7c:e7:ce:cf:94:1d:ad:4a:f5:fa:eb:64:38:
91:b7:00:3b:ac:f5:77:73:b4:57:dc:a6:18:0b:8c:
0f:e2:85:16:3e:41:23:76:e0:c3:4b:d1:db:f5:a2:
ac:00:4e:35:0c:a2:4c:bf:0b:4f:8b:a2:62:be:62:
90:10:a9:0a:64:ba:1d:60:64:01:62:a4:69:37:18:
11:93:ab:f2:68:76:39:44:0f:ce:b8:62:09:74:56:
8b:4a:50:a0:77:94:f9:13:7b:d9:77:ad:51:6d:eb:
cb:63:33:3a:8e:15:ad:ce:f8:d0:e6:45:52:6c:b8:
f1:33:fe:62:8b:c5:43:d2:a3:e2:3b:c9:62:e8:35:
ce:e4:da:26:f6:03:9a:0c:16:f5:db:02:ce:7b:41:
0b:69:85:cd:08:31:33:5d:37:0b:de:f2:83:3c:ef:
3e:8b:19:6f:a5:5a:48:69:11:02:31:02:0c:2f:1f:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:E2:84:A8:80:D4:A1:D7:1D:1F:58:6B:1D:3A:32:53:05:86:5D
X509v3 Authority Key Identifier:
keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:6a:db:dd:d2:89:93:7e:c0:ef:36:a9:89:ea:64:7e:1b:
75:d4:f1:fd:21:0a:a2:f8:51:99:64:97:f6:5b:b8:af:72:e0:
9c:51:33:4a:56:89:ca:7a:61:79:41:f5:e6:23:b1:d4:e4:27:
c2:77:26:78:05:47:e7:2f:fd:fe:3c:f5:6d:dd:a9:99:04:0e:
60:48:83:a4:34:21:81:46:2a:2a:8a:6d:d6:0c:77:3a:b4:f2:
39:e2:84:bd:e9:60:e8:8e:6b:fd:c9:45:92:39:9b:71:03:b9:
82:5d:5d:64:13:d0:79:a8:af:47:4c:91:73:ea:fd:9a:d9:6b:
e7:e7:5c:76:97:bb:55:35:76:ca:59:be:1f:df:97:26:0d:2b:
a9:82:ee:28:b4:49:41:f2:a7:9a:62:11:1d:a6:a1:c8:60:05:
18:6a:d2:b8:d9:19:61:bf:f9:bc:c0:b2:80:79:f6:fc:ed:dd:
fe:18:bd:a4:32:35:ef:a6:54:c4:8e:93:af:d7:82:0f:ab:bf:
23:00:4e:47:81:7d:3a:c7:5e:09:95:90:76:3b:1c:ac:0e:4f:
97:50:8d:fa:57:64:1d:9b:c5:41:0a:d0:55:d7:72:7f:8a:20:
1b:6c:95:e2:a2:e2:3b:52:2c:7d:39:96:9f:91:d2:06:66:c2:
db:ee:da:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdZEmhB5MsFpYJLppAdxZe9UPZHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjA1NjgxMWNiOTQ0YTIzYzc1N2Y1N2FmZmQ0ODNjNmZj
ZmI4MDExOTAeFw0yNTEwMjUxMTA4MTNaFw0yNTEwMjYxMzUzMTNaMDMxMTAvBgNV
BAMTKDAyQzNFMjg0QTg4MEQ0QTFENzFEMUY1ODZCMUQzQTMyNTMwNTg2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zJMbVg3WF6HhLbOzCegYDl9i
hRdaI+SgbksK29k0+tWBOFlvHpV1qyV4XV+khK0boB0acBYDW+21cZPLb1G0nXE0
3kU0TYm5up23fOfOz5QdrUr1+utkOJG3ADus9XdztFfcphgLjA/ihRY+QSN24MNL
0dv1oqwATjUMoky/C0+LomK+YpAQqQpkuh1gZAFipGk3GBGTq/JodjlED864Ygl0
VotKUKB3lPkTe9l3rVFt68tjMzqOFa3O+NDmRVJsuPEz/mKLxUPSo+I7yWLoNc7k
2ib2A5oMFvXbAs57QQtphc0IMTNdNwve8oM87z6LGW+lWkhpEQIxAgwvH5cNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAsPihKiA1KHXHR9Yax06MlMFhl0wHwYDVR0j
BBgwFoAUsFaBHLlEojx1f1ev/Ug8b8+4ARkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xODkvQjA1NjgxMUNCOTQ0QTIzQzc1N0Y1N0FGRkQ0ODNDNkZDRkI4MDEx
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NGYUJITGxFb2p4MWYxZXZfVWc4
YjgtNEFSay5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4OS9CMDU2ODExQ0I5NDRB
MjNDNzU3RjU3QUZGRDQ4M0M2RkNGQjgwMTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXZq293SiZN+
wO82qYnqZH4bddTx/SEKovhRmWSX9lu4r3LgnFEzSlaJynpheUH15iOx1OQnwncm
eAVH5y/9/jz1bd2pmQQOYEiDpDQhgUYqKopt1gx3OrTyOeKEvelg6I5r/clFkjmb
cQO5gl1dZBPQeaivR0yRc+r9mtlr5+dcdpe7VTV2ylm+H9+XJg0rqYLuKLRJQfKn
mmIRHaahyGAFGGrSuNkZYb/5vMCygHn2/O3d/hi9pDI176ZUxI6Tr9eCD6u/IwBO
R4F9OsdeCZWQdjscrA5Pl1CN+ldkHZvFQQrQVddyf4ogG2yV4qLiO1IsfTmWn5HS
BmbC2+7aDA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:20:30 2025 by rpki-client