Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier: P7wQOMvZ5t4z9oVEC53imLe7rg2MhuCL4I/U5Pc3oDg=
Subject key identifier: 4F:0D:39:70:52:78:19:83:13:21:11:DF:D0:70:F5:8C:60:5E:1A:DA
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial: 019A71132481EA5D63D35F9DBE5614D771FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number: 08E4
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: DlFiqytHtQiNMQroc1kW/+te+f9Yi1E5sr4Y/Zua/xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:24:81:ea:5d:63:d3:5f:9d:be:56:14:d7:71:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=4f0d397052781983132111dfd070f58c605e1ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:39:31:ba:fb:61:12:6a:bd:3a:0a:69:28:
f2:14:c4:86:a0:99:38:d7:d9:93:78:af:48:3a:cb:
8e:d3:e3:38:bc:b0:51:17:8b:d3:2a:36:1a:55:d0:
d3:86:ae:ea:30:74:33:ad:6c:fe:89:03:b5:d0:97:
a4:c8:3e:0b:26:f4:eb:62:db:ef:97:03:22:6a:f9:
b2:02:5b:c0:6b:c3:9b:21:8a:5b:eb:1c:c8:80:6e:
f4:04:15:65:05:ab:56:ce:a2:26:f0:f5:70:c8:d8:
91:37:10:5b:91:dc:65:02:e3:8a:d5:8d:cc:10:36:
70:f9:89:c9:ab:53:f2:4b:ed:57:a1:51:9c:74:1d:
eb:6b:cf:7b:da:16:ea:d4:61:a4:d9:22:f5:fa:83:
48:7a:af:72:f6:4f:2d:4c:26:0c:b3:2b:1e:39:28:
ea:15:ad:1f:24:bc:26:cd:05:14:d8:7b:ab:97:93:
4f:c7:52:20:6d:2e:2b:e8:b2:88:0a:9d:e9:bc:d2:
01:9f:38:c0:68:54:f9:01:82:24:37:b7:e9:5c:97:
b4:99:b8:48:dc:f1:88:e8:d5:fb:a3:bd:14:26:59:
b9:12:b2:ff:5b:20:9e:32:8f:61:54:8a:34:95:53:
7c:37:a3:c9:f5:cb:a5:f5:bb:aa:c8:1f:64:2d:ed:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:39:70:52:78:19:83:13:21:11:DF:D0:70:F5:8C:60:5E:1A:DA
X509v3 Authority Key Identifier:
keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:8a:9b:c4:b3:36:c2:d0:86:97:97:1c:73:4e:9f:d3:82:
7d:5a:f9:48:75:b3:34:01:ff:13:39:2d:75:4b:47:68:42:d2:
0e:78:93:06:a4:80:33:60:f2:94:89:7c:f0:21:dc:51:9d:86:
cd:17:bd:78:21:5d:82:84:c4:0c:2c:6d:d9:49:8c:e2:1f:33:
38:5c:3b:c1:d8:84:ae:6b:f5:f6:6f:f5:52:cd:6c:3d:be:37:
d8:23:12:df:55:38:b4:37:71:ae:55:47:ec:4b:52:f1:23:63:
e8:dc:81:ca:85:88:d3:4b:29:c2:48:2e:8e:57:86:66:7f:24:
cd:3a:12:3e:2e:0b:28:59:22:b9:ea:93:b5:53:76:2e:01:0e:
82:06:5a:59:b9:b2:b1:c7:5c:88:a0:1c:27:ae:0e:5e:4d:39:
2b:d9:80:3e:6d:ec:e6:e1:ed:94:f8:ad:03:e2:61:d8:b9:a7:
6c:9b:0f:a9:e0:de:f9:c5:a8:9d:c3:6f:e4:4b:d3:e5:6e:63:
53:20:87:63:94:e5:57:ba:dd:a8:44:11:e3:ee:e4:e0:b1:22:
c5:59:7c:4f:8a:c9:35:cb:e5:79:f0:50:2c:03:d8:bb:d3:43:
88:10:52:77:bb:75:c8:99:23:cf:78:1e:b8:43:42:54:f1:34:
5c:d2:e7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEySB6l1j01+dvlYU13H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4
MmY5NTkwHhcNMjUxMTExMDQwMTExWhcNMjUxMTEyMDQwMTExWjAzMTEwLwYDVQQD
Eyg0ZjBkMzk3MDUyNzgxOTgzMTMyMTExZGZkMDcwZjU4YzYwNWUxYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk45Mbr7YRJqvToKaSjyFMSGoJk4
19mTeK9IOsuO0+M4vLBRF4vTKjYaVdDThq7qMHQzrWz+iQO10JekyD4LJvTrYtvv
lwMiavmyAlvAa8ObIYpb6xzIgG70BBVlBatWzqIm8PVwyNiRNxBbkdxlAuOK1Y3M
EDZw+YnJq1PyS+1XoVGcdB3ra8972hbq1GGk2SL1+oNIeq9y9k8tTCYMsyseOSjq
Fa0fJLwmzQUU2Hurl5NPx1IgbS4r6LKICp3pvNIBnzjAaFT5AYIkN7fpXJe0mbhI
3PGI6NX7o70UJlm5ErL/WyCeMo9hVIo0lVN8N6PJ9cul9buqyB9kLe2p/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8NOXBSeBmDEyER39Bw9YxgXhraMB8GA1UdIwQY
MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt
NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx
LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwiKm8Sz
NsLQhpeXHHNOn9OCfVr5SHWzNAH/EzktdUtHaELSDniTBqSAM2DylIl88CHcUZ2G
zRe9eCFdgoTEDCxt2UmM4h8zOFw7wdiErmv19m/1Us1sPb432CMS31U4tDdxrlVH
7EtS8SNj6NyByoWI00spwkgujleGZn8kzToSPi4LKFkiueqTtVN2LgEOggZaWbmy
scdciKAcJ64OXk05K9mAPm3s5uHtlPitA+Jh2LmnbJsPqeDe+cWoncNv5EvT5W5j
UyCHY5TlV7rdqEQR4+7k4LEixVl8T4rJNcvlefBQLAPYu9NDiBBSd7t1yJkjz3ge
uENCVPE0XNLnhw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:54 2025 by rpki-client