Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: 3LlhoxCIhxUrNqYL4N42fU2+V3L7T9zeVS+kmq7DmkI=
Subject key identifier: 58:A6:FD:E0:44:27:8B:A1:59:B8:66:4F:9E:AD:B1:8A:81:2E:0F:F0
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 019A4DAABB96BEDAD19EA90F22431D66AD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: n63ATHnlftkop7VuSRioi3/KVlGc23fUcruU63bnx8U=)
2: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (hash: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=)
3: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (hash: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:bb:96:be:da:d1:9e:a9:0f:22:43:1d:66:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=58a6fde044278ba159b8664f9eadb18a812e0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:79:e6:58:60:14:2d:a5:10:b8:92:84:0d:
d5:0f:77:47:53:03:78:74:61:0b:9c:00:09:fc:f2:
51:c9:ef:ed:af:cb:8c:86:5b:c1:42:c2:df:9d:d4:
c2:86:d5:5f:55:96:92:a7:02:21:9f:4c:e2:c5:00:
cb:bd:12:93:29:f8:41:52:79:49:53:4f:94:5b:3a:
6a:65:76:5a:42:37:3e:73:81:be:e7:0d:e4:7e:07:
33:95:d5:4e:f0:51:65:dd:ea:b9:46:dc:1c:80:e1:
c9:41:c2:13:97:ee:3f:fc:b3:00:1a:b7:76:ad:67:
1a:9d:88:cd:ca:e7:fc:36:f6:a7:a5:e2:ec:5a:5d:
35:34:ee:25:d6:58:3c:8a:bb:9e:bb:13:6f:24:3e:
0c:5f:94:b3:cc:aa:03:9b:45:c4:5c:94:f1:d3:d0:
87:b0:ba:1c:f7:75:3f:2c:51:94:f9:82:16:5c:e6:
60:77:75:2f:4f:26:48:29:0c:86:b1:72:48:be:5f:
00:0c:0d:4d:c2:8f:26:5d:91:09:54:b1:67:36:1a:
ca:e3:81:42:97:5a:1e:37:6c:13:3f:60:ac:38:b5:
d5:49:6a:a9:fc:bd:88:2f:6a:c9:3f:1c:7e:dc:1e:
d7:e5:61:3b:95:f3:79:7e:98:dc:40:5f:3a:05:0a:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:FD:E0:44:27:8B:A1:59:B8:66:4F:9E:AD:B1:8A:81:2E:0F:F0
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5f:0f:1c:c5:4a:9b:34:df:f7:0a:5e:bf:23:7f:10:f6:6d:
00:37:2f:c8:ca:d1:a1:59:7c:df:89:5a:f7:37:c4:a8:18:df:
a9:60:4a:e7:bc:3b:22:5a:dd:31:94:ba:11:45:1a:59:22:98:
e1:d5:56:6d:9d:25:70:8e:da:67:89:c6:e8:74:71:6a:5c:c8:
58:c0:98:60:e7:eb:1d:43:18:6e:ce:2e:d0:ac:78:03:b0:fb:
8f:73:aa:2c:00:b6:f5:5d:67:92:70:79:1c:1b:da:d1:59:b1:
12:e6:6a:6e:7e:59:99:4d:dc:7d:7c:90:ed:93:1c:6a:84:b9:
bd:54:ce:57:13:17:ba:ec:0e:67:4c:85:b5:9f:4e:59:97:fe:
75:f2:8f:67:83:ae:04:68:0d:82:78:4f:4b:7a:66:8c:8a:7e:
45:16:74:df:59:70:96:a5:44:53:5c:d7:e4:52:b5:7c:b7:48:
81:db:62:fe:ce:20:8e:62:14:ca:42:ef:b1:bd:13:47:1e:37:
c7:1d:85:32:0a:25:fb:e8:35:31:8d:23:0e:c7:28:17:d0:0d:
90:89:0f:58:b8:3c:7f:b2:ed:1d:dc:f6:75:34:20:f1:46:8e:
27:bd:ea:7f:e9:bd:9a:d5:85:93:9f:84:d0:57:0b:62:7c:23:
45:15:38:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqruWvtrRnqkPIkMdZq0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzM5MGZjNjE2MDhjMDE3ODVkMWE4MDY4NWFlOWU1NmE1
YjI1ODMwHhcNMjUxMTA0MDcwMDI1WhcNMjUxMTA1MDcwMDI1WjAzMTEwLwYDVQQD
Eyg1OGE2ZmRlMDQ0Mjc4YmExNTliODY2NGY5ZWFkYjE4YTgxMmUwZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49B55lhgFC2lELiShA3VD3dHUwN4
dGELnAAJ/PJRye/tr8uMhlvBQsLfndTChtVfVZaSpwIhn0zixQDLvRKTKfhBUnlJ
U0+UWzpqZXZaQjc+c4G+5w3kfgczldVO8FFl3eq5RtwcgOHJQcITl+4//LMAGrd2
rWcanYjNyuf8NvanpeLsWl01NO4l1lg8irueuxNvJD4MX5SzzKoDm0XEXJTx09CH
sLoc93U/LFGU+YIWXOZgd3UvTyZIKQyGsXJIvl8ADA1Nwo8mXZEJVLFnNhrK44FC
l1oeN2wTP2CsOLXVSWqp/L2IL2rJPxx+3B7X5WE7lfN5fpjcQF86BQoh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFim/eBEJ4uhWbhmT56tsYqBLg/wMB8GA1UdIwQY
MBaAFPdzkPxhYIwBeF0agGha6eVqWyWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYt
NjNhYmY2MTk4ZjU4LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYtNjNhYmY2MTk4ZjU4
LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV8PHMVK
mzTf9wpevyN/EPZtADcvyMrRoVl834la9zfEqBjfqWBK57w7IlrdMZS6EUUaWSKY
4dVWbZ0lcI7aZ4nG6HRxalzIWMCYYOfrHUMYbs4u0Kx4A7D7j3OqLAC29V1nknB5
HBva0VmxEuZqbn5ZmU3cfXyQ7ZMcaoS5vVTOVxMXuuwOZ0yFtZ9OWZf+dfKPZ4Ou
BGgNgnhPS3pmjIp+RRZ031lwlqVEU1zX5FK1fLdIgdti/s4gjmIUykLvsb0TRx43
xx2FMgol++g1MY0jDscoF9ANkIkPWLg8f7LtHdz2dTQg8UaOJ73qf+m9mtWFk5+E
0FcLYnwjRRU4Rw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:52 2025 by rpki-client