Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: SwdteHzzqcrTVpuTiFRngULRXvsQ7gKKvSukMkbUPkQ=
Subject key identifier: 9E:31:6D:99:E1:EB:85:DC:DC:B2:77:45:79:8A:1C:67:8A:8E:6E:60
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 019A71B7B6D402A26BF42366B444E74566B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0F24
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: gSR3nObvryKJbhAeGuO2qbUVK8BMri7oKSwXEFSmLPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b6:d4:02:a2:6b:f4:23:66:b4:44:e7:45:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=9e316d99e1eb85dcdcb27745798a1c678a8e6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:ac:6e:d7:fc:64:24:d9:1c:ac:ee:6c:eb:
72:15:84:4d:80:3a:17:75:1f:f7:41:96:c2:d0:77:
8e:78:0e:8e:15:10:82:30:bb:3f:ea:37:73:18:01:
f4:3d:89:2b:e7:fd:e4:5d:75:c4:02:8c:51:d7:0b:
50:28:9e:2f:bd:55:8f:e3:f1:29:0b:d6:8a:08:a0:
bb:b5:17:99:aa:c3:5b:2b:8d:b2:6c:00:4e:a8:80:
01:ed:ca:2c:24:10:ef:d3:fd:5b:8b:99:22:3d:39:
4f:ac:64:9d:c0:a7:35:c4:ea:86:dc:60:28:4f:8d:
6b:ce:f6:f8:db:db:46:8f:2f:56:ff:7d:ee:79:4f:
d2:2c:d5:a6:23:98:d9:83:ff:81:5a:44:bb:27:81:
77:e4:b9:8c:21:dd:24:13:23:6a:97:ba:b2:eb:18:
32:e7:95:3b:94:4c:c7:c5:05:dc:34:b5:0e:07:3e:
af:c2:72:12:8c:18:12:eb:06:92:f6:67:15:08:ec:
65:5a:0f:cd:fa:81:12:d7:fc:05:da:e8:88:7f:7e:
3e:24:32:48:a8:c9:1b:19:f1:c4:56:c3:84:14:b4:
45:7b:d5:a5:86:a6:69:23:31:eb:04:e1:c3:65:fb:
62:5a:43:55:97:06:d8:6e:40:9e:13:12:33:ab:3c:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:6D:99:E1:EB:85:DC:DC:B2:77:45:79:8A:1C:67:8A:8E:6E:60
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d1:47:de:42:ab:0d:6d:7a:21:00:94:ef:42:a9:2a:1f:1f:
7e:04:80:b0:42:28:8d:9f:cb:29:4d:43:33:a8:ec:81:60:64:
da:88:4b:b1:4c:bf:e2:db:32:10:94:1d:2a:09:97:7c:8b:7e:
9b:a9:06:2e:6e:b4:0f:76:4b:a3:c1:02:f3:95:d0:0f:a1:e3:
7c:25:70:28:d7:23:c5:34:33:11:9e:46:4c:3e:33:c8:bf:1d:
f6:98:c3:55:5c:ca:79:0f:5e:d2:e4:a2:7d:67:22:40:25:84:
94:f1:3d:e0:42:cb:aa:24:e5:fd:b3:2e:59:c7:f7:46:b3:cb:
da:93:65:c7:61:b7:62:10:fa:d7:3b:4d:f0:ba:ef:b5:de:f1:
1a:2f:b8:ca:83:7a:cc:c0:dd:0d:49:40:20:d2:80:a2:ab:d9:
dd:5b:e2:76:45:af:27:4f:62:20:04:9d:b2:ab:8a:57:a6:7f:
a4:69:17:c6:6b:fc:5a:8d:18:9f:e2:c9:e3:af:7b:17:da:ca:
8a:28:88:7c:bb:d3:b8:6b:16:7c:94:be:46:6a:c7:21:0e:76:
96:cd:ea:de:13:56:8c:f2:3d:61:5a:e0:f8:b3:79:a9:90:38:
e2:eb:c9:c2:81:31:fd:99:30:e4:5d:ca:5c:95:45:42:8a:f0:
37:97:9e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7bUAqJr9CNmtETnRWa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk
ZTRmZjcwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
Eyg5ZTMxNmQ5OWUxZWI4NWRjZGNiMjc3NDU3OThhMWM2NzhhOGU2ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+sbtf8ZCTZHKzubOtyFYRNgDoX
dR/3QZbC0HeOeA6OFRCCMLs/6jdzGAH0PYkr5/3kXXXEAoxR1wtQKJ4vvVWP4/Ep
C9aKCKC7tReZqsNbK42ybABOqIAB7cosJBDv0/1bi5kiPTlPrGSdwKc1xOqG3GAo
T41rzvb429tGjy9W/33ueU/SLNWmI5jZg/+BWkS7J4F35LmMId0kEyNql7qy6xgy
55U7lEzHxQXcNLUOBz6vwnISjBgS6waS9mcVCOxlWg/N+oES1/wF2uiIf34+JDJI
qMkbGfHEVsOEFLRFe9WlhqZpIzHrBOHDZftiWkNVlwbYbkCeExIzqzzYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4xbZnh64Xc3LJ3RXmKHGeKjm5gMB8GA1UdIwQY
MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt
ZGU5ZDA0MDFhNmY2LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2
LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtFH3kKr
DW16IQCU70KpKh8ffgSAsEIojZ/LKU1DM6jsgWBk2ohLsUy/4tsyEJQdKgmXfIt+
m6kGLm60D3ZLo8EC85XQD6HjfCVwKNcjxTQzEZ5GTD4zyL8d9pjDVVzKeQ9e0uSi
fWciQCWElPE94ELLqiTl/bMuWcf3RrPL2pNlx2G3YhD61ztN8Lrvtd7xGi+4yoN6
zMDdDUlAINKAoqvZ3VvidkWvJ09iIASdsquKV6Z/pGkXxmv8Wo0Yn+LJ4697F9rK
iiiIfLvTuGsWfJS+RmrHIQ52ls3q3hNWjPI9YVrg+LN5qZA44uvJwoEx/Zkw5F3K
XJVFQorwN5eebA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:15 2025 by rpki-client