Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: +4goLgZjwbSvKSFJOgRvbJTMjCkomsd/VXLsY7ix8g8=
Subject key identifier: 0A:06:B3:EB:0D:CC:6B:5C:6C:51:C9:38:E8:B0:6D:30:3D:D3:C6:FA
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019A50073477A7C65626BA60B2A599C2E793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 18:00:40 +0000
Manifest this update: Tue 04 Nov 2025 18:00:40 +0000
Manifest next update: Wed 05 Nov 2025 18:00:40 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: Z2cCNogISbAfl4/GK95BOKZBa6hMk+4roY6QVxbEYdU=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:34:77:a7:c6:56:26:ba:60:b2:a5:99:c2:e7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Nov 4 18:00:40 2025 GMT
Not After : Nov 5 18:00:40 2025 GMT
Subject: CN=0a06b3eb0dcc6b5c6c51c938e8b06d303dd3c6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:f2:ee:48:ba:a7:9a:02:c9:7d:f3:9f:76:
28:6e:42:60:bb:79:50:83:08:3c:21:51:a0:28:99:
20:2d:19:af:ee:d6:53:ef:51:3d:86:fd:6d:5e:2d:
e2:6a:d3:ec:90:3f:71:80:50:10:c7:93:24:a2:3f:
5b:c1:49:0c:9c:27:b9:60:7b:8f:92:e3:0a:e5:0b:
44:2c:62:06:b8:50:08:80:88:a2:ce:45:1d:34:86:
37:7b:b2:1b:74:2c:9a:80:63:fb:a9:69:f4:84:0b:
47:80:5b:9c:03:9b:19:33:9a:e9:f7:ab:90:0f:66:
45:b5:0b:1a:15:eb:84:87:53:e4:ed:d2:81:5f:cf:
7e:72:f3:ab:83:cd:c0:06:bd:fa:42:de:c3:97:84:
e6:ab:0a:30:8a:43:6a:11:96:b9:3f:f3:c7:01:e8:
95:a6:43:4c:56:b4:b2:01:43:fe:4c:ec:b1:5d:c1:
f8:bb:f4:88:2f:48:89:64:da:fb:b7:80:70:e9:c2:
a9:38:7b:54:f1:47:04:c1:b5:f5:3e:35:62:ac:a3:
ce:b0:f7:1e:d5:c0:d2:77:4b:fd:ed:20:0f:bc:8d:
0e:89:e6:bd:1d:ac:04:e5:7f:21:c2:fa:e6:93:ae:
cf:1f:d0:bd:ba:2e:66:bc:b5:20:79:fc:3b:87:47:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:B3:EB:0D:CC:6B:5C:6C:51:C9:38:E8:B0:6D:30:3D:D3:C6:FA
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:14:1a:e4:ee:79:44:6a:56:ea:2d:d8:b9:cc:01:61:f4:
35:27:dd:2c:6a:95:1a:c9:d0:19:b9:d1:7d:ff:bb:b9:1e:84:
45:87:af:4e:ad:a2:76:03:79:ab:76:db:ed:13:8f:5e:e9:0e:
2e:92:2f:7b:b6:82:77:8b:1c:9d:fa:1c:c5:9d:73:90:80:3e:
7f:51:0f:1a:ff:81:f5:98:8a:b5:b2:13:58:ed:b7:61:1a:e6:
c9:91:45:7a:dd:1d:cc:2c:c5:b6:6e:00:33:11:6e:0a:68:1d:
52:8e:5b:f3:2c:ea:fa:7e:c0:5e:e1:bd:84:54:bb:30:93:c1:
64:dd:37:0b:2c:aa:2c:72:17:83:e1:0b:0f:8b:cb:d1:9d:cc:
ac:f1:3c:df:fd:b3:8a:73:35:08:20:23:bc:fd:71:1b:9f:a6:
e7:c3:7a:d1:49:a1:7c:8f:f6:20:b4:6c:ee:fe:0e:5b:ab:3b:
45:3d:38:85:39:c0:11:cb:cb:59:5e:40:c3:b9:66:2c:4c:e4:
ca:c0:42:35:b6:70:f5:e8:38:b4:e4:76:d9:1b:3e:95:3a:2b:
54:b6:72:f7:6a:fc:23:05:87:e4:c4:e4:df:07:fd:dc:7b:dc:
3a:c8:5c:03:4e:6a:8f:c7:ca:dd:a6:39:67:e4:e9:cb:01:00:
5f:ba:38:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBzR3p8ZWJrpgsqWZwueTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1
NWZmMzkwHhcNMjUxMTA0MTgwMDQwWhcNMjUxMTA1MTgwMDQwWjAzMTEwLwYDVQQD
EygwYTA2YjNlYjBkY2M2YjVjNmM1MWM5MzhlOGIwNmQzMDNkZDNjNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9vy7ki6p5oCyX3zn3YobkJgu3lQ
gwg8IVGgKJkgLRmv7tZT71E9hv1tXi3iatPskD9xgFAQx5Mkoj9bwUkMnCe5YHuP
kuMK5QtELGIGuFAIgIiizkUdNIY3e7IbdCyagGP7qWn0hAtHgFucA5sZM5rp96uQ
D2ZFtQsaFeuEh1Pk7dKBX89+cvOrg83ABr36Qt7Dl4TmqwowikNqEZa5P/PHAeiV
pkNMVrSyAUP+TOyxXcH4u/SIL0iJZNr7t4Bw6cKpOHtU8UcEwbX1PjVirKPOsPce
1cDSd0v97SAPvI0Oiea9HawE5X8hwvrmk67PH9C9ui5mvLUgefw7h0fL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoGs+sNzGtcbFHJOOiwbTA908b6MB8GA1UdIwQY
MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt
ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx
LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPoUGuTu
eURqVuot2LnMAWH0NSfdLGqVGsnQGbnRff+7uR6ERYevTq2idgN5q3bb7ROPXukO
LpIve7aCd4scnfocxZ1zkIA+f1EPGv+B9ZiKtbITWO23YRrmyZFFet0dzCzFtm4A
MxFuCmgdUo5b8yzq+n7AXuG9hFS7MJPBZN03CyyqLHIXg+ELD4vL0Z3MrPE83/2z
inM1CCAjvP1xG5+m58N60UmhfI/2ILRs7v4OW6s7RT04hTnAEcvLWV5Aw7lmLEzk
ysBCNbZw9eg4tOR22Rs+lTorVLZy92r8IwWH5MTk3wf93HvcOshcA05qj8fK3aY5
Z+TpywEAX7o4nQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:03 2025 by rpki-client