Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: wHnFU5JlSw7SQYDo/vI+P9B7xHcVU1Zy8KeD8UtEJsw=
Subject key identifier: DD:AC:CC:D2:39:CF:91:B8:03:FA:8B:EB:E7:5A:44:43:25:2E:AD:44
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019A5006F26A07A756E75972CD389131EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 029E
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: HRnE/8QsPRJHoP59D2Qq8TFvNJv2sSGs/KGQ/RgmeZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f2:6a:07:a7:56:e7:59:72:cd:38:91:31:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=ddacccd239cf91b803fa8bebe75a4443252ead44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:44:14:28:bb:8b:d6:26:86:1b:3c:7b:67:
45:34:2b:64:80:49:bd:e9:ba:76:6e:6e:57:9d:7c:
fb:c1:a8:61:95:9b:9f:24:1f:90:21:18:2b:cb:13:
14:6a:52:2a:ee:29:25:7e:22:d4:fc:b4:a6:47:63:
8a:cc:6c:9e:18:25:19:fc:70:40:73:48:00:33:08:
35:76:13:1f:98:3b:99:f8:ca:ed:df:c4:f1:12:6f:
3a:9d:8b:6b:c8:07:29:81:02:2c:45:58:6b:d4:65:
5e:19:7c:2a:88:ac:6c:13:c0:bb:0f:b8:de:74:4b:
dc:87:ef:fb:ed:2c:4d:40:c1:94:87:34:de:5a:1c:
b5:b9:17:22:fb:29:23:3b:8c:32:05:5f:4a:ff:dc:
73:0f:8c:c4:b0:8a:60:e1:17:81:84:c4:0b:2d:f6:
ab:48:a2:c5:75:95:3a:ae:2e:45:49:9f:65:ab:92:
c7:bd:2c:45:b7:76:29:49:1c:7f:c2:c3:bb:5b:5d:
aa:72:62:be:96:e5:1c:d9:d8:41:f3:8e:23:81:13:
15:49:4f:72:0c:ba:d8:a7:d2:63:ea:2b:03:5c:c8:
75:dd:b6:43:51:d1:26:0d:ae:e6:f0:19:44:94:25:
53:9c:c3:93:b1:eb:6a:64:97:18:05:56:9d:28:c1:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AC:CC:D2:39:CF:91:B8:03:FA:8B:EB:E7:5A:44:43:25:2E:AD:44
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a5:91:82:c7:a5:96:81:4e:f5:18:c1:37:e8:27:a9:42:05:
89:50:10:6f:63:84:d4:09:7a:9f:38:63:4c:8b:f4:99:20:44:
29:54:15:d7:2b:e3:d6:8e:bb:94:02:8e:00:00:2b:44:30:6e:
db:ed:75:00:11:cd:4e:58:e3:62:99:88:d2:eb:3b:a7:f0:e3:
50:4f:8e:f7:54:74:bd:b2:a4:d9:88:88:e3:7f:e1:bc:57:5b:
31:5b:89:30:50:f8:46:01:89:54:bd:81:6b:ea:3a:9c:d1:24:
96:bf:e6:7b:6c:df:b6:d5:2e:01:2b:e9:47:1f:f7:05:e4:e8:
82:96:e6:8a:74:b5:9f:b5:f2:52:80:9a:b8:7f:18:da:71:8c:
aa:b4:8e:b1:85:a4:e4:b7:23:4f:dd:92:c4:cd:4e:02:85:39:
4d:78:13:7a:2e:23:37:9f:d9:7a:a9:6b:c2:8e:8b:88:26:cc:
86:c8:f6:e7:1e:cf:0e:82:f1:bc:a8:88:12:b3:89:31:49:b6:
dc:ca:3e:a3:b1:35:9f:53:de:ff:7f:a4:f2:f2:d2:3e:fb:99:
6c:47:09:88:c4:2b:47:16:1d:5d:ea:bc:ae:4e:cb:d3:a4:aa:
ab:79:55:96:ed:12:93:26:45:c8:96:50:cd:59:58:0e:1e:bf:
79:21:74:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBvJqB6dW51lyzTiRMe+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNmUyZTY5NjZlMDZhYjI1Y2EwZTFkYTY2ZTFlM2Q2NDI0
OGIzYTEwHhcNMjUxMTA0MTgwMDIzWhcNMjUxMTA1MTgwMDIzWjAzMTEwLwYDVQQD
EyhkZGFjY2NkMjM5Y2Y5MWI4MDNmYThiZWJlNzVhNDQ0MzI1MmVhZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlodEFCi7i9Ymhhs8e2dFNCtkgEm9
6bp2bm5XnXz7wahhlZufJB+QIRgryxMUalIq7iklfiLU/LSmR2OKzGyeGCUZ/HBA
c0gAMwg1dhMfmDuZ+Mrt38TxEm86nYtryAcpgQIsRVhr1GVeGXwqiKxsE8C7D7je
dEvch+/77SxNQMGUhzTeWhy1uRci+ykjO4wyBV9K/9xzD4zEsIpg4ReBhMQLLfar
SKLFdZU6ri5FSZ9lq5LHvSxFt3YpSRx/wsO7W12qcmK+luUc2dhB844jgRMVSU9y
DLrYp9Jj6isDXMh13bZDUdEmDa7m8BlElCVTnMOTsetqZJcYBVadKMGOJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2szNI5z5G4A/qL6+daREMlLq1EMB8GA1UdIwQY
MBaAFH5uLmlm4GqyXKDh2mbh49ZCSLOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEt
ODdkOTdlMmFhZGM0LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEtODdkOTdlMmFhZGM0
LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6WRgsel
loFO9RjBN+gnqUIFiVAQb2OE1Al6nzhjTIv0mSBEKVQV1yvj1o67lAKOAAArRDBu
2+11ABHNTljjYpmI0us7p/DjUE+O91R0vbKk2YiI43/hvFdbMVuJMFD4RgGJVL2B
a+o6nNEklr/me2zfttUuASvpRx/3BeTogpbminS1n7XyUoCauH8Y2nGMqrSOsYWk
5LcjT92SxM1OAoU5TXgTei4jN5/Zeqlrwo6LiCbMhsj25x7PDoLxvKiIErOJMUm2
3Mo+o7E1n1Pe/3+k8vLSPvuZbEcJiMQrRxYdXeq8rk7L06Sqq3lVlu0SkyZFyJZQ
zVlYDh6/eSF0UA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:58:05 2025 by rpki-client