Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: HAgYys3uELq4Ii1blaimzE7ewRPOu692UGSwbkX28F8=
Subject key identifier: B4:A4:EE:9F:64:E0:B5:4D:65:F9:46:74:34:71:AA:4D:EE:45:9E:C0
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019A530863208F0855F225E5B8257A39C768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 055A
Signing time: Wed 05 Nov 2025 08:00:49 +0000
Manifest this update: Wed 05 Nov 2025 08:00:49 +0000
Manifest next update: Thu 06 Nov 2025 08:00:49 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: NUm6vKUqpJydrNd4lQhOqXL6CvDp3rf6iWgzaQOPrrQ=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:63:20:8f:08:55:f2:25:e5:b8:25:7a:39:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Nov 5 08:00:49 2025 GMT
Not After : Nov 6 08:00:49 2025 GMT
Subject: CN=b4a4ee9f64e0b54d65f946743471aa4dee459ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:90:c6:7a:e2:55:36:98:b9:f6:78:9c:75:
f3:ec:da:d6:24:86:66:2c:c6:61:4f:31:f9:46:31:
f7:dd:cb:8f:b7:97:55:89:35:aa:54:e2:4f:68:00:
cd:73:5f:7b:b4:73:24:b2:f1:ca:69:f3:bc:d6:2c:
ff:24:47:30:b0:e6:fd:a4:0e:8f:f1:c4:25:af:6e:
53:6e:57:3c:c1:03:0c:72:fe:8e:77:be:71:c4:29:
bf:e7:03:87:1f:34:f6:a0:3e:e5:ac:15:7e:d0:13:
3e:db:e7:cd:3f:6c:93:6f:d2:fe:af:e4:c2:e5:8a:
1f:11:e4:d6:c7:bf:61:62:57:9b:8b:be:bf:52:58:
36:50:d3:b6:5a:e2:f8:11:f9:6c:93:bb:cd:74:0d:
87:ae:41:29:90:a5:df:b1:8b:4d:35:d3:e8:25:9a:
89:8e:09:c1:bf:29:b4:7c:dd:17:5b:a3:3a:bd:45:
48:53:76:92:bc:a3:00:4f:da:39:fa:77:ea:a5:58:
e3:d6:df:d3:f2:a7:aa:76:4f:95:c5:8c:1d:e9:5b:
fd:6c:50:29:2e:b0:15:af:ef:5f:78:d2:3b:78:98:
28:83:42:b3:ac:2f:37:9d:5e:2c:56:92:06:8e:e7:
88:ad:80:ea:ac:0c:84:57:f3:0a:e0:73:ab:7b:8d:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:EE:9F:64:E0:B5:4D:65:F9:46:74:34:71:AA:4D:EE:45:9E:C0
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:f1:53:43:5c:a3:45:6e:d8:89:c3:c3:3a:60:33:d8:0b:
6a:8b:8c:de:89:fa:64:84:31:07:e3:8a:37:36:d0:93:db:e9:
51:06:05:7b:e4:82:99:fd:ac:2f:21:49:0a:ff:7d:73:23:e0:
64:d8:10:3d:3a:59:2c:6b:23:ed:6f:fd:59:5e:cf:da:ce:4f:
05:05:43:a8:67:27:df:26:80:e9:27:05:c8:c6:21:84:94:69:
64:4d:0c:0c:f9:bf:9e:81:47:69:d4:67:bf:a2:4f:85:67:ba:
48:6a:39:43:6e:29:3d:ed:43:7d:c0:fd:71:9c:a5:b8:e7:8a:
be:88:f3:6c:3e:8f:0d:a5:40:b9:90:27:40:d4:5a:d8:4f:1e:
31:d5:ae:ba:5f:5d:1e:24:c0:cd:0f:31:fb:15:ae:dc:b5:2a:
6f:c9:0e:a6:bf:51:2b:0d:b2:eb:ae:c8:99:08:a5:6a:78:93:
0a:db:20:09:e4:44:24:b9:fc:6f:8c:d4:e8:33:c6:a4:f7:ba:
e8:c4:8b:4e:dd:36:36:26:f3:de:e6:20:6f:19:d2:5c:b7:cd:
9c:72:b2:16:a2:3d:c7:42:5b:63:8b:ed:fc:4d:97:db:8d:3d:
d5:87:bc:f3:ec:13:07:6e:c8:d1:9b:04:12:e4:53:3b:4d:89:
c4:a7:99:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCGMgjwhV8iXluCV6OcdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzdkYzY2YTU2M2EzYWYyMWVlMDdhYjMzZThiZmZlN2Fm
OTI4OGUwHhcNMjUxMTA1MDgwMDQ5WhcNMjUxMTA2MDgwMDQ5WjAzMTEwLwYDVQQD
EyhiNGE0ZWU5ZjY0ZTBiNTRkNjVmOTQ2NzQzNDcxYWE0ZGVlNDU5ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwyQxnriVTaYufZ4nHXz7NrWJIZm
LMZhTzH5RjH33cuPt5dViTWqVOJPaADNc197tHMksvHKafO81iz/JEcwsOb9pA6P
8cQlr25Tblc8wQMMcv6Od75xxCm/5wOHHzT2oD7lrBV+0BM+2+fNP2yTb9L+r+TC
5YofEeTWx79hYlebi76/Ulg2UNO2WuL4Eflsk7vNdA2HrkEpkKXfsYtNNdPoJZqJ
jgnBvym0fN0XW6M6vUVIU3aSvKMAT9o5+nfqpVjj1t/T8qeqdk+VxYwd6Vv9bFAp
LrAVr+9feNI7eJgog0KzrC83nV4sVpIGjueIrYDqrAyEV/MK4HOre42ZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSk7p9k4LVNZflGdDRxqk3uRZ7AMB8GA1UdIwQY
MBaAFNN33GalY6OvIe4HqzPov/56+SiOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTkt
YWYyNDA0YzI1YWNmLzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTktYWYyNDA0YzI1YWNm
LzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7rxU0Nc
o0Vu2InDwzpgM9gLaouM3on6ZIQxB+OKNzbQk9vpUQYFe+SCmf2sLyFJCv99cyPg
ZNgQPTpZLGsj7W/9WV7P2s5PBQVDqGcn3yaA6ScFyMYhhJRpZE0MDPm/noFHadRn
v6JPhWe6SGo5Q24pPe1DfcD9cZyluOeKvojzbD6PDaVAuZAnQNRa2E8eMdWuul9d
HiTAzQ8x+xWu3LUqb8kOpr9RKw2y667ImQilaniTCtsgCeREJLn8b4zU6DPGpPe6
6MSLTt02Nibz3uYgbxnSXLfNnHKyFqI9x0JbY4vt/E2X24091Ye88+wTB27I0ZsE
EuRTO02JxKeZCg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:50 2025 by rpki-client