Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: EHPfcGD02o1PUOy3YuCujesfs7kxjfcSXa4BFCxsYqE=
Subject key identifier: FA:93:F1:00:8E:25:67:9B:EF:C3:79:8B:5C:04:8D:15:F7:27:76:CB
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 019A51F549353181608CF70C7B29DE0DB594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:20 +0000
Manifest this update: Wed 05 Nov 2025 03:00:20 +0000
Manifest next update: Thu 06 Nov 2025 03:00:20 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: 4I/gFKstRm1sKoIvj5oSiPHbA7P845EG7W6nJ2FvPu8=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:49:35:31:81:60:8c:f7:0c:7b:29:de:0d:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Nov 5 03:00:20 2025 GMT
Not After : Nov 6 03:00:20 2025 GMT
Subject: CN=fa93f1008e25679befc3798b5c048d15f72776cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:c1:58:e3:f3:d2:50:f8:85:b4:36:e6:21:
3d:fe:06:cf:72:2b:a4:f5:4e:1f:d9:2a:9c:bc:f3:
6a:d6:0e:aa:c0:d9:76:e6:cf:6b:e3:bc:61:18:3f:
a5:d8:50:28:4c:b4:b6:ff:4b:08:3b:d1:5f:79:a4:
0a:23:71:e3:b1:d9:a3:07:c4:1e:06:9a:3b:af:ec:
31:ad:f5:46:5d:70:1e:d9:9f:f4:d0:04:71:a7:6b:
26:68:ae:00:c9:09:69:2e:7f:bc:90:f8:b3:81:23:
29:c7:63:66:49:fa:0b:58:e7:9d:c4:f8:ee:be:d3:
3f:90:a2:b4:79:23:00:8f:66:63:1c:b8:c2:ba:8e:
f9:0b:b9:a3:65:8b:0a:a5:50:a5:9f:ad:16:2c:9c:
4d:06:09:f1:01:2f:f2:58:9f:5a:9a:1f:6d:66:b8:
bd:d1:5e:62:9e:1b:b0:d4:ef:b6:19:c0:4f:f6:11:
09:31:f8:bf:33:c3:a4:b6:5c:57:cb:6d:5a:dc:a7:
8b:17:cf:e9:8b:6a:e6:30:a0:4d:f3:57:2a:b2:60:
10:a4:35:1c:12:f5:1d:68:9d:9f:f5:50:03:0b:4f:
9c:c7:f2:38:76:de:62:51:65:ee:37:09:1b:f0:ef:
92:ba:a1:d7:41:06:20:af:c0:ef:db:7a:fc:de:aa:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:F1:00:8E:25:67:9B:EF:C3:79:8B:5C:04:8D:15:F7:27:76:CB
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:da:d5:4e:3b:b7:14:0b:dd:93:c4:9a:cc:d4:c6:ef:7d:
d7:bd:b0:73:41:18:cf:cc:5c:9c:76:4d:65:db:56:53:18:36:
14:36:67:f3:6d:42:ed:cb:b4:e6:46:c4:54:2d:95:0d:27:8c:
d9:7f:c8:bd:71:06:8c:55:e9:90:61:59:55:49:09:89:05:62:
0e:34:70:50:50:e3:3d:72:4b:2e:71:72:9c:78:db:90:ed:c9:
67:8f:9e:ab:c2:89:1a:ab:f6:d0:f4:5f:99:a9:ed:7b:13:09:
9d:82:d4:bd:fc:e9:f6:a9:c0:67:73:cf:52:cd:ac:f0:7b:b4:
d6:cb:12:14:ef:90:22:a8:98:d5:df:0f:5f:40:58:10:10:cb:
1d:ee:14:af:94:49:d8:40:01:d6:49:8a:0c:7c:0d:a2:29:52:
db:8f:d8:07:2c:d4:79:bc:7a:64:9f:69:e7:5b:69:3b:d0:97:
57:ac:1a:26:96:8c:1a:1f:00:fa:2f:70:21:ab:43:e3:4c:d1:
4c:c9:5c:be:c9:85:fd:d3:bf:34:a4:76:87:05:45:06:9f:f0:
ee:d4:32:c6:30:4c:6e:a2:4e:ee:f5:09:da:1e:c4:c5:f1:22:
4a:d2:3f:2a:6b:af:35:40:84:a9:60:08:1c:52:cf:18:01:87:
d3:95:19:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9Uk1MYFgjPcMeyneDbWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0
YTQ5MGQwHhcNMjUxMTA1MDMwMDIwWhcNMjUxMTA2MDMwMDIwWjAzMTEwLwYDVQQD
EyhmYTkzZjEwMDhlMjU2NzliZWZjMzc5OGI1YzA0OGQxNWY3Mjc3NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonfBWOPz0lD4hbQ25iE9/gbPciuk
9U4f2SqcvPNq1g6qwNl25s9r47xhGD+l2FAoTLS2/0sIO9FfeaQKI3HjsdmjB8Qe
Bpo7r+wxrfVGXXAe2Z/00ARxp2smaK4AyQlpLn+8kPizgSMpx2NmSfoLWOedxPju
vtM/kKK0eSMAj2ZjHLjCuo75C7mjZYsKpVCln60WLJxNBgnxAS/yWJ9amh9tZri9
0V5inhuw1O+2GcBP9hEJMfi/M8OktlxXy21a3KeLF8/pi2rmMKBN81cqsmAQpDUc
EvUdaJ2f9VADC0+cx/I4dt5iUWXuNwkb8O+SuqHXQQYgr8Dv23r83qqOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqT8QCOJWeb78N5i1wEjRX3J3bLMB8GA1UdIwQY
MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt
Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh
LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUB/a1U47
txQL3ZPEmszUxu99172wc0EYz8xcnHZNZdtWUxg2FDZn821C7cu05kbEVC2VDSeM
2X/IvXEGjFXpkGFZVUkJiQViDjRwUFDjPXJLLnFynHjbkO3JZ4+eq8KJGqv20PRf
mantexMJnYLUvfzp9qnAZ3PPUs2s8Hu01ssSFO+QIqiY1d8PX0BYEBDLHe4Ur5RJ
2EAB1kmKDHwNoilS24/YByzUebx6ZJ9p51tpO9CXV6waJpaMGh8A+i9wIatD40zR
TMlcvsmF/dO/NKR2hwVFBp/w7tQyxjBMbqJO7vUJ2h7ExfEiStI/KmuvNUCEqWAI
HFLPGAGH05UZZw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:45 2025 by rpki-client