Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: 1HsNJMT7MWiGcT0UKPBPUVoQSpJpRvIRVmjy5zXuDPc=
Subject key identifier: 10:98:BB:27:80:4F:7F:73:B4:E9:E0:8C:96:3E:99:7F:EC:97:31:E5
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019A729335A9EAFD8445C156A54FEFB58E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 15B7
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: 8QOVhZdLehl3sThuIE0NTRwQGTn3vTwd3J5fvj81RQs=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:35:a9:ea:fd:84:45:c1:56:a5:4f:ef:b5:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=1098bb27804f7f73b4e9e08c963e997fec9731e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:ca:d5:6f:c4:6c:41:d9:5d:6f:3e:ea:b0:
82:1f:72:48:92:d4:db:f4:d8:b3:4a:6f:51:e6:79:
bb:fe:c5:b9:9e:e2:8a:82:5e:6c:93:e5:f6:65:24:
a3:01:f8:66:9e:99:a5:a3:83:f3:0f:1f:03:36:ea:
4c:81:92:90:f6:d4:1c:54:72:3c:72:6e:16:85:2e:
2c:3d:bc:3f:dc:42:fd:6c:9f:6d:4c:dc:75:67:54:
f5:27:ea:de:3a:32:01:f9:7f:58:d3:b5:e3:44:ca:
ba:a1:e1:2c:dc:4f:1f:b0:1a:62:0a:cb:c1:ae:62:
91:41:58:05:b5:a9:61:44:fd:7f:e9:d9:1a:27:a5:
c9:7b:eb:06:53:50:58:74:8e:8b:10:16:d0:44:3d:
12:48:fc:45:ee:bf:8a:cb:12:55:c5:22:03:65:77:
75:da:a6:d7:c1:c2:af:e4:4e:d2:78:1c:04:03:5b:
e7:3b:f3:27:40:e2:9b:db:28:21:89:5f:9e:87:d5:
bf:80:ac:90:2b:1b:1a:0d:6e:21:d4:33:59:9f:96:
67:df:83:a5:6f:0a:9f:ec:3b:c9:bf:bf:87:5d:97:
34:25:c9:0a:e9:09:2c:7d:e0:c1:e0:cc:5b:94:cf:
69:0f:17:1d:72:cd:42:54:0e:f4:1a:80:b7:56:78:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:BB:27:80:4F:7F:73:B4:E9:E0:8C:96:3E:99:7F:EC:97:31:E5
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:19:62:7d:7a:27:4d:0e:6d:7b:eb:e1:5b:66:30:b0:69:
91:5b:91:cf:fa:b7:2f:e9:67:8d:dd:4b:2b:2c:ad:62:6b:33:
79:1d:d7:6a:09:46:3b:d6:19:7a:36:c8:bf:f4:9d:b6:23:db:
be:51:11:94:90:92:36:4e:cd:d1:4f:50:d3:5f:ec:89:61:9e:
f7:3d:39:79:9f:65:b4:6d:d8:0e:39:05:97:ed:71:cc:f5:f5:
36:68:3f:ad:f9:d5:c3:ff:66:15:75:ee:da:8e:0c:19:cf:6b:
25:bf:6a:9e:6b:3d:d2:a7:3b:d2:4a:5f:d8:98:91:75:f1:4f:
37:61:78:8d:9a:2b:ed:b5:94:24:44:ab:86:03:f2:f3:1d:bc:
d7:c7:0f:ce:c8:70:b2:8b:2b:9f:8c:3c:77:84:bf:8b:df:d8:
cd:c9:e2:23:a9:1f:88:55:e6:ef:10:ca:e7:34:5c:ff:6c:7d:
85:06:a0:59:98:af:24:20:57:37:59:34:33:ad:2e:23:04:d4:
b7:91:fa:36:d7:6d:c4:64:e5:17:c5:58:f6:4d:ea:5c:53:3d:
c9:bb:19:71:be:1d:fe:08:d8:3d:53:13:e6:c0:01:30:10:40:
ef:ff:03:22:d7:84:6a:78:a3:1b:a6:7f:86:57:c4:38:ce:26:
81:bb:54:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzWp6v2ERcFWpU/vtY5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjUxMTExMTEwMDQxWhcNMjUxMTEyMTEwMDQxWjAzMTEwLwYDVQQD
EygxMDk4YmIyNzgwNGY3ZjczYjRlOWUwOGM5NjNlOTk3ZmVjOTczMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHbK1W/EbEHZXW8+6rCCH3JIktTb
9NizSm9R5nm7/sW5nuKKgl5sk+X2ZSSjAfhmnpmlo4PzDx8DNupMgZKQ9tQcVHI8
cm4WhS4sPbw/3EL9bJ9tTNx1Z1T1J+reOjIB+X9Y07XjRMq6oeEs3E8fsBpiCsvB
rmKRQVgFtalhRP1/6dkaJ6XJe+sGU1BYdI6LEBbQRD0SSPxF7r+KyxJVxSIDZXd1
2qbXwcKv5E7SeBwEA1vnO/MnQOKb2yghiV+eh9W/gKyQKxsaDW4h1DNZn5Zn34Ol
bwqf7DvJv7+HXZc0JckK6QksfeDB4MxblM9pDxcdcs1CVA70GoC3VnjIwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCYuyeAT39ztOngjJY+mX/slzHlMB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaYZYn16
J00ObXvr4VtmMLBpkVuRz/q3L+lnjd1LKyytYmszeR3XaglGO9YZejbIv/SdtiPb
vlERlJCSNk7N0U9Q01/siWGe9z05eZ9ltG3YDjkFl+1xzPX1Nmg/rfnVw/9mFXXu
2o4MGc9rJb9qnms90qc70kpf2JiRdfFPN2F4jZor7bWUJESrhgPy8x2818cPzshw
sosrn4w8d4S/i9/YzcniI6kfiFXm7xDK5zRc/2x9hQagWZivJCBXN1k0M60uIwTU
t5H6NtdtxGTlF8VY9k3qXFM9ybsZcb4d/gjYPVMT5sABMBBA7/8DIteEanijG6Z/
hlfEOM4mgbtUwg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client