Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: cIOcrdOPuDUSkkX3YvcEpHTXggswKfb6Ozy9/5A4FYg=
Subject key identifier: 4D:24:84:FB:E7:B0:86:40:F2:D5:70:82:57:BA:38:51:87:1C:37:EB
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019A4F62B14641F6D89382171788002EA5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0A3C
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: IBoYUhvka2XGvR8w0dGlPw0r/7dgMLzhQBZ6RLK7nAQ=)
2: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (hash: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=)
3: ltJZ2aR5x60TKWiWAmS0-oj2c_k.roa (hash: 34pWAkD5QJ94abRhTwOLQbh2Aksu0yZZqkvvoYsDUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b1:46:41:f6:d8:93:82:17:17:88:00:2e:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=4d2484fbe7b08640f2d5708257ba3851871c37eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:28:85:32:be:8f:94:3b:0b:b0:d5:89:cc:
38:b9:fc:0f:cf:89:f8:3c:a6:dc:de:32:5d:6e:1a:
a3:f0:34:a9:e8:0b:a9:cf:ef:0e:b4:4a:02:19:90:
8d:f2:1f:4d:65:3e:50:5b:6d:02:ec:31:15:9c:84:
c5:a0:0c:6e:b9:af:a7:3a:94:d2:84:9a:07:d3:00:
da:c5:61:2d:34:43:2a:3f:db:32:45:54:00:ca:0c:
3f:62:c9:2f:5f:a0:26:13:6a:26:03:00:35:3e:a9:
56:a4:8b:3d:7d:1f:e8:99:d3:b7:6a:93:a8:4a:88:
f4:f7:f6:aa:95:29:66:c2:9d:c9:2c:4a:38:d8:f5:
bd:69:ef:6f:af:33:7e:10:87:55:e9:02:a7:bc:12:
73:8d:ad:0d:ea:a9:26:c7:11:23:9a:57:a2:6b:08:
b1:1f:28:55:88:d1:c1:1c:85:5e:0e:18:13:f6:02:
63:21:79:1e:d1:80:e1:66:0e:d6:1f:7e:65:f7:2b:
e1:80:a6:a2:5b:1c:c5:3a:bd:68:47:15:10:7e:d9:
ce:8a:75:3d:cf:58:0b:03:85:83:f2:94:f3:c3:74:
9c:cf:c8:7d:79:96:ee:76:66:0f:da:fc:86:44:9c:
81:3a:a7:61:c1:69:54:27:f8:20:3a:e5:89:f0:71:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:84:FB:E7:B0:86:40:F2:D5:70:82:57:BA:38:51:87:1C:37:EB
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4a:f0:32:46:ed:49:7f:86:60:00:36:76:fd:3d:8f:03:fd:
80:72:37:75:4b:35:1a:92:db:c9:59:67:8f:c1:82:2d:ba:f0:
a4:af:2e:07:e1:07:1b:84:d3:7c:17:c5:d1:ad:e9:89:a7:4c:
5e:3f:3f:20:59:05:77:e6:38:89:f4:12:70:f3:a7:84:4c:a8:
8f:66:59:5b:18:f2:46:5f:5d:a8:62:c5:50:10:b8:3e:b3:31:
d0:90:b3:6b:db:85:90:ca:28:43:df:9b:4a:8c:a4:6c:c5:ea:
e9:a5:88:ea:6d:b8:1b:52:3e:67:1a:58:a8:c3:9d:58:c6:22:
20:81:06:35:4e:65:41:20:b5:6b:1a:44:d8:ee:5c:f8:db:72:
8e:01:77:10:2a:99:83:f0:c2:05:08:d7:38:db:8b:bc:5a:a3:
ba:57:98:03:23:37:56:96:fb:5d:c4:e7:01:3d:ba:90:dd:a7:
ef:0a:7d:a1:3d:3b:8f:09:47:d8:85:b2:4a:ef:7a:bf:02:6c:
8c:71:48:40:1e:09:b4:46:2f:5d:76:20:e2:a6:bb:23:8c:68:
48:ec:05:1e:c0:87:fe:92:fc:37:b9:f9:fa:59:b4:22:dd:a6:
44:bb:45:4c:3b:1b:e2:0f:be:30:3a:0a:0c:e3:4e:62:fb:2d:
ec:9e:c7:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYrFGQfbYk4IXF4gALqXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWJhMjlhNzVhZTEzMjVjMDM4MmZiNDg0YjMyMWQ2OGQx
NTQzODQwHhcNMjUxMTA0MTUwMDU5WhcNMjUxMTA1MTUwMDU5WjAzMTEwLwYDVQQD
Eyg0ZDI0ODRmYmU3YjA4NjQwZjJkNTcwODI1N2JhMzg1MTg3MWMzN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2oohTK+j5Q7C7DVicw4ufwPz4n4
PKbc3jJdbhqj8DSp6Aupz+8OtEoCGZCN8h9NZT5QW20C7DEVnITFoAxuua+nOpTS
hJoH0wDaxWEtNEMqP9syRVQAygw/YskvX6AmE2omAwA1PqlWpIs9fR/omdO3apOo
Soj09/aqlSlmwp3JLEo42PW9ae9vrzN+EIdV6QKnvBJzja0N6qkmxxEjmleiawix
HyhViNHBHIVeDhgT9gJjIXke0YDhZg7WH35l9yvhgKaiWxzFOr1oRxUQftnOinU9
z1gLA4WD8pTzw3Scz8h9eZbudmYP2vyGRJyBOqdhwWlUJ/ggOuWJ8HEDaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0khPvnsIZA8tVwgle6OFGHHDfrMB8GA1UdIwQY
MBaAFBWbopp1rhMlwDgvtISzIdaNFUOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQt
Y2FmNGZhMDcyNjgyLzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQtY2FmNGZhMDcyNjgy
LzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0rwMkbt
SX+GYAA2dv09jwP9gHI3dUs1GpLbyVlnj8GCLbrwpK8uB+EHG4TTfBfF0a3piadM
Xj8/IFkFd+Y4ifQScPOnhEyoj2ZZWxjyRl9dqGLFUBC4PrMx0JCza9uFkMooQ9+b
SoykbMXq6aWI6m24G1I+ZxpYqMOdWMYiIIEGNU5lQSC1axpE2O5c+NtyjgF3ECqZ
g/DCBQjXONuLvFqjuleYAyM3Vpb7XcTnAT26kN2n7wp9oT07jwlH2IWySu96vwJs
jHFIQB4JtEYvXXYg4qa7I4xoSOwFHsCH/pL8N7n5+lm0It2mRLtFTDsb4g++MDoK
DONOYvst7J7HcA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:01 2025 by rpki-client