Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: YDzvKpeEhcQzZswhdkjzdr1Sc1+71mQhHy/ovAmfqOQ=
Subject key identifier: 08:98:7F:93:55:9E:52:0F:6A:CB:45:49:0B:CB:80:12:1D:41:DA:D4
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 019A71B8CFAFD1B3F9D9CE5EC22D1862766C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: lN0E4QfukAVFyePPCII67uuhDJ6t0idz/lKlDoHbXjk=)
2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cf:af:d1:b3:f9:d9:ce:5e:c2:2d:18:62:76:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=08987f93559e520f6acb45490bcb80121d41dad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:44:17:71:ab:9b:42:68:6c:76:3b:5a:c8:
6c:e2:d9:6b:1c:e9:89:84:71:01:1c:eb:bf:be:57:
42:dc:a3:9e:71:4e:5d:c2:31:c0:7a:10:2f:c8:db:
d7:cf:a7:c1:60:cc:0f:e0:b0:9d:b3:4a:ee:23:60:
35:7d:ff:26:7f:a2:c2:3d:45:a3:10:9c:d9:05:68:
e7:65:be:5a:fc:bf:63:11:e0:58:29:5e:67:b3:94:
b2:64:94:60:e7:e4:6a:b6:4d:d9:9a:f5:2c:ac:5e:
17:db:78:32:e1:d9:c6:82:52:be:ef:34:66:1d:84:
4f:c0:44:07:98:1c:a3:08:d3:66:16:92:4e:83:84:
6f:96:7d:ae:a7:a7:85:d2:00:98:6f:7a:38:1e:8e:
25:20:1f:b3:0c:57:48:f8:a4:e4:a4:fd:ec:74:0d:
29:08:59:81:0a:9a:fb:2c:bf:19:33:02:22:20:e0:
6a:7d:c4:10:66:22:d8:59:cf:4c:a8:f9:2d:0e:70:
0b:e2:3e:e7:06:00:22:37:90:09:cd:35:2f:88:68:
84:8d:3c:68:9d:08:3a:01:5e:7d:ec:9e:ff:16:98:
bc:3b:d8:9e:6a:7c:08:eb:6d:34:9f:1e:df:fd:d7:
44:89:85:da:f0:8d:ae:f5:0c:d0:81:fc:85:ff:00:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:98:7F:93:55:9E:52:0F:6A:CB:45:49:0B:CB:80:12:1D:41:DA:D4
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:01:c2:b1:a0:e5:03:43:da:aa:40:d6:ae:c7:e6:ba:77:c6:
61:4d:92:fb:04:e5:c3:24:65:8a:2a:85:e9:29:01:e8:ca:59:
73:1c:93:89:4b:ca:a3:25:72:14:f3:36:76:30:2d:93:58:40:
5c:10:96:17:d9:11:5c:52:e5:9d:a0:b3:d6:06:b2:ad:b2:73:
a4:1e:e5:1f:5c:9d:e1:b6:d8:b1:f3:6c:d1:82:e8:b8:db:9d:
84:6c:1b:34:87:c0:ba:64:be:7c:37:c9:77:78:5b:9b:a8:ae:
87:65:77:5c:85:21:d7:48:66:ba:f0:30:32:12:48:a4:3e:ff:
fc:4f:7f:cc:5f:1e:aa:5e:cc:1e:3d:19:14:71:b4:e8:a8:7a:
0c:27:ab:49:fb:4f:d7:7e:74:99:ff:bc:c5:5b:1f:11:8f:36:
a1:b4:94:7d:e5:45:de:be:d6:0e:4e:a0:84:54:df:a1:c2:55:
69:4a:04:89:fb:5f:6c:8e:b6:69:59:bc:09:74:7e:ee:ed:a1:
d3:96:fd:4c:a8:28:2c:8d:9a:4f:ba:d0:5e:1f:94:0c:29:3e:
5a:b2:f9:59:07:21:d6:9e:aa:11:19:6c:f4:6f:6f:aa:bc:19:
75:25:98:88:86:dc:cc:e8:11:6e:de:37:17:83:f4:f0:5d:97:
ba:e1:3d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuM+v0bP52c5ewi0YYnZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjdiODA2ODFmNWI0OGUxMjY4OTgyOTU5ODNlMGRmMjk5
NzFiOTgwHhcNMjUxMTExMDcwMjA4WhcNMjUxMTEyMDcwMjA4WjAzMTEwLwYDVQQD
EygwODk4N2Y5MzU1OWU1MjBmNmFjYjQ1NDkwYmNiODAxMjFkNDFkYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJhEF3Grm0JobHY7Wshs4tlrHOmJ
hHEBHOu/vldC3KOecU5dwjHAehAvyNvXz6fBYMwP4LCds0ruI2A1ff8mf6LCPUWj
EJzZBWjnZb5a/L9jEeBYKV5ns5SyZJRg5+Rqtk3ZmvUsrF4X23gy4dnGglK+7zRm
HYRPwEQHmByjCNNmFpJOg4Rvln2up6eF0gCYb3o4Ho4lIB+zDFdI+KTkpP3sdA0p
CFmBCpr7LL8ZMwIiIOBqfcQQZiLYWc9MqPktDnAL4j7nBgAiN5AJzTUviGiEjTxo
nQg6AV597J7/Fpi8O9ieanwI6200nx7f/ddEiYXa8I2u9QzQgfyF/wDCTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiYf5NVnlIPastFSQvLgBIdQdrUMB8GA1UdIwQY
MBaAFBYnuAaB9bSOEmiYKVmD4N8plxuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTct
NjgyY2QzYmQ0MTAyLzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTctNjgyY2QzYmQ0MTAy
LzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1gHCsaDl
A0PaqkDWrsfmunfGYU2S+wTlwyRliiqF6SkB6MpZcxyTiUvKoyVyFPM2djAtk1hA
XBCWF9kRXFLlnaCz1gayrbJzpB7lH1yd4bbYsfNs0YLouNudhGwbNIfAumS+fDfJ
d3hbm6iuh2V3XIUh10hmuvAwMhJIpD7//E9/zF8eql7MHj0ZFHG06Kh6DCerSftP
1350mf+8xVsfEY82obSUfeVF3r7WDk6ghFTfocJVaUoEiftfbI62aVm8CXR+7u2h
05b9TKgoLI2aT7rQXh+UDCk+WrL5WQch1p6qERls9G9vqrwZdSWYiIbczOgRbt43
F4P08F2XuuE9iw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:10 2025 by rpki-client