Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: IfZmNAkjP66wI9R80/X6VD9I7Ci/1oH5IJTLyfFqmWQ=
Subject key identifier: 31:9B:03:69:3B:92:43:56:9C:FA:3E:27:3E:11:A7:79:88:C7:CE:AC
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019A7149FF9969FCB51361982A7240B39626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: 51NXVgAr2I1eXTe9a9kizTFuHJ4.roa (hash: 1iN5vxfuwXGFtbxcnMWPqsUykL0ZxXTKprGUJelmE44=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: NU5OkrzhCJx0TVsvApTioXQPb2SFOnaBJfIYBhmfYEA=)
3: bzGs0AfDNETTzCPGuhNEtlqP4Lk.roa (hash: W1PVimH7iIBpOpHAPclX+yhqZLE6KhqWf6pI/1uvpY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ff:99:69:fc:b5:13:61:98:2a:72:40:b3:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=319b03693b9243569cfa3e273e11a77988c7ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:8d:66:7c:dd:7c:e9:76:14:5c:cc:b1:e5:
f7:5e:bd:80:25:38:d6:18:1c:6d:7b:c1:a7:43:0c:
92:8d:aa:ba:4a:7d:1f:4a:84:7d:f5:d0:dc:e3:0f:
fd:07:19:7e:18:4a:42:5e:bc:86:49:4e:1b:14:7b:
4d:a5:99:2e:db:bf:82:a7:d0:79:49:bb:83:5c:ca:
3c:2a:f7:9f:f2:dd:78:26:10:f9:a3:27:27:4d:02:
7e:7e:78:03:ff:cf:95:04:63:38:40:a5:f0:c0:8c:
ae:ba:a0:84:4f:de:e5:00:2b:f0:68:64:df:11:76:
15:b2:48:01:8d:be:72:fa:27:fa:48:c5:1c:64:b3:
d0:74:a7:e2:2c:7d:70:b8:85:d6:59:34:b9:36:ab:
7d:cf:49:13:d5:2c:37:a7:a2:0e:bc:cb:98:91:71:
0b:41:0b:0b:95:5d:aa:d0:73:c6:ab:50:04:b5:da:
65:6f:2e:81:ab:90:ec:e2:58:36:55:ce:08:36:46:
36:41:cf:a6:f8:11:cd:25:e6:24:fd:9d:d0:6d:5e:
b6:8c:8a:de:45:c9:c2:1d:7a:f4:9b:32:69:8f:6c:
b7:54:85:68:30:f6:47:af:23:61:f3:a9:f9:b7:42:
00:69:90:5a:88:93:80:5f:a0:ca:0a:c0:60:d2:03:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:03:69:3B:92:43:56:9C:FA:3E:27:3E:11:A7:79:88:C7:CE:AC
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e5:bf:85:24:b8:0c:d2:db:3d:ea:1e:a5:11:d2:77:14:7f:
16:14:22:fc:5f:4a:8c:0e:81:62:07:96:03:36:b7:75:f6:65:
bb:c8:48:dc:f2:6a:d4:5e:4c:95:c1:08:55:a5:9b:29:5e:dc:
1f:b0:f1:ba:95:20:ef:ae:c6:53:25:3f:ac:e1:03:e4:81:f8:
04:16:cf:74:9f:10:f3:e3:f1:96:56:be:5c:fe:6b:92:70:8e:
5d:7b:aa:fb:86:95:9b:4e:0c:9d:2f:6d:3d:40:45:e3:63:82:
e4:cf:81:c7:40:f6:63:5a:00:1f:bb:fe:77:23:eb:1b:16:b9:
c7:dc:a5:34:d3:d3:3c:85:66:a1:22:d6:a1:81:16:18:0d:85:
c8:30:c8:39:dc:eb:a9:98:4d:2b:f0:87:2b:30:74:7a:e3:3b:
d9:f3:83:56:fe:13:37:2e:32:bc:a2:f5:02:b9:1d:c4:95:5c:
e0:bf:27:4d:2e:ba:b8:65:b6:42:f0:38:5b:a0:50:33:1f:b8:
ea:cf:4f:6b:e3:83:77:02:69:e3:6b:86:03:8e:56:9e:a3:c8:
20:6a:e9:9d:e6:f2:4b:2c:d7:bc:74:bb:b5:80:b2:0e:c8:c6:
76:24:e5:65:71:49:83:25:90:1a:0d:c3:4d:ec:78:13:b4:19:
be:68:6d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSf+Zafy1E2GYKnJAs5YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm
OTQ4MzcwHhcNMjUxMTExMDUwMTA2WhcNMjUxMTEyMDUwMTA2WjAzMTEwLwYDVQQD
EygzMTliMDM2OTNiOTI0MzU2OWNmYTNlMjczZTExYTc3OTg4YzdjZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgGNZnzdfOl2FFzMseX3Xr2AJTjW
GBxte8GnQwySjaq6Sn0fSoR99dDc4w/9Bxl+GEpCXryGSU4bFHtNpZku27+Cp9B5
SbuDXMo8Kvef8t14JhD5oycnTQJ+fngD/8+VBGM4QKXwwIyuuqCET97lACvwaGTf
EXYVskgBjb5y+if6SMUcZLPQdKfiLH1wuIXWWTS5Nqt9z0kT1Sw3p6IOvMuYkXEL
QQsLlV2q0HPGq1AEtdplby6Bq5Ds4lg2Vc4INkY2Qc+m+BHNJeYk/Z3QbV62jIre
RcnCHXr0mzJpj2y3VIVoMPZHryNh86n5t0IAaZBaiJOAX6DKCsBg0gPh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGbA2k7kkNWnPo+Jz4Rp3mIx86sMB8GA1UdIwQY
MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt
MTI3MTljMjYxY2MwLzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw
LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+W/hSS4
DNLbPeoepRHSdxR/FhQi/F9KjA6BYgeWAza3dfZlu8hI3PJq1F5MlcEIVaWbKV7c
H7DxupUg767GUyU/rOED5IH4BBbPdJ8Q8+Pxlla+XP5rknCOXXuq+4aVm04MnS9t
PUBF42OC5M+Bx0D2Y1oAH7v+dyPrGxa5x9ylNNPTPIVmoSLWoYEWGA2FyDDIOdzr
qZhNK/CHKzB0euM72fODVv4TNy4yvKL1ArkdxJVc4L8nTS66uGW2QvA4W6BQMx+4
6s9Pa+ODdwJp42uGA45WnqPIIGrpnebySyzXvHS7tYCyDsjGdiTlZXFJgyWQGg3D
Tex4E7QZvmhtdg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client