Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: LvftLDFXmzWz1fUv8JiC/RO4P3kE2mkIPyPRrh+mgHs=
Subject key identifier: 57:A6:97:FC:EB:F6:A6:6D:4D:28:AD:75:20:34:50:62:F6:73:B1:D2
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 019A70DC0642704E29ACB7A49D3F24B87836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 0230
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: vr8FKjarSB94brThy0pdaZrGfQRu+OBu8Sl813Xs5vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:06:42:70:4e:29:ac:b7:a4:9d:3f:24:b8:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=57a697fcebf6a66d4d28ad7520345062f673b1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:32:ab:50:e0:33:4b:84:4b:00:e8:f8:8c:
1d:86:3e:6b:81:9b:ee:82:b9:cb:b5:02:62:3b:13:
95:6b:a4:e8:e3:6c:4a:0e:45:a2:ea:e9:5e:df:e9:
a6:fe:e4:77:62:f1:6c:1e:36:c0:a5:31:ac:47:bd:
10:f2:11:8d:f5:a0:8c:7c:58:49:72:01:01:71:ff:
06:53:e3:05:02:06:37:39:c1:7b:7c:73:5d:f5:8c:
ae:57:64:bf:f8:8f:48:4a:d9:c0:4c:80:c6:8d:fb:
db:cf:53:fe:4a:a5:d1:c7:cb:19:95:fa:b8:1b:2a:
dc:9e:15:de:65:d6:8d:32:98:8b:7a:c4:f8:f7:8b:
39:32:9c:1b:97:d4:e7:d3:af:b7:52:24:a7:df:7a:
35:57:f0:40:01:ce:b5:bb:6c:1e:a9:f3:dc:20:f5:
67:95:7e:e0:ec:9f:f6:bd:70:25:b3:35:05:bf:d1:
c0:cf:83:6d:7b:dd:0c:1f:f8:7e:ab:96:76:ab:b5:
e0:f1:bb:04:6b:42:39:b0:13:30:b1:3c:10:de:f1:
50:7d:6d:17:46:05:d1:51:57:e2:73:75:cd:50:b4:
9a:cb:1e:ba:65:af:d7:72:4d:a2:f5:d5:44:84:ac:
9e:d4:1d:d2:8b:f6:aa:ec:31:dd:27:62:8f:bc:83:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:97:FC:EB:F6:A6:6D:4D:28:AD:75:20:34:50:62:F6:73:B1:D2
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9d:13:b2:5b:e2:1b:1b:66:6d:2d:c1:ea:18:5d:13:98:35:
e7:63:86:5c:df:fc:11:42:de:20:ac:60:e6:8c:62:21:1c:ac:
c4:70:1e:99:9c:65:4c:59:86:e0:fa:f6:75:cb:fd:45:e4:b3:
64:9d:ad:c3:da:de:77:f3:31:6b:d0:cd:75:37:7b:9e:57:67:
46:d9:a3:d7:a3:73:d7:f4:92:f5:e8:80:f8:83:f2:6c:c0:97:
b8:63:4b:ef:ec:f1:44:f6:c8:b4:6c:77:48:b2:2e:7a:29:d6:
2e:08:08:0a:e4:78:0e:72:ab:bf:3c:dc:9f:55:ce:6a:fc:46:
47:8f:5a:4f:46:7e:d0:81:1c:bf:a1:41:15:e2:fa:d2:cd:d0:
b0:55:77:27:1f:13:5c:d7:5e:ea:61:51:d9:4d:21:24:8e:f6:
12:94:eb:d1:5a:35:55:f7:51:dc:f0:74:a5:49:8e:39:68:f5:
d1:01:13:db:33:83:dd:64:6e:0d:72:0a:d5:71:58:5c:0d:50:
54:7d:51:8a:a3:77:1e:f9:e6:7f:48:13:ab:77:53:0c:bb:91:
55:a7:a1:fd:39:95:37:08:6f:60:09:90:0c:1b:bc:f2:8c:08:
46:fd:e9:a9:f4:84:44:c9:95:82:d2:3a:cc:6c:d9:49:55:fc:
bc:8c:a7:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3AZCcE4prLeknT8kuHg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw
MDViNDgwHhcNMjUxMTExMDMwMDU4WhcNMjUxMTEyMDMwMDU4WjAzMTEwLwYDVQQD
Eyg1N2E2OTdmY2ViZjZhNjZkNGQyOGFkNzUyMDM0NTA2MmY2NzNiMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoAyq1DgM0uESwDo+Iwdhj5rgZvu
grnLtQJiOxOVa6To42xKDkWi6ule3+mm/uR3YvFsHjbApTGsR70Q8hGN9aCMfFhJ
cgEBcf8GU+MFAgY3OcF7fHNd9YyuV2S/+I9IStnATIDGjfvbz1P+SqXRx8sZlfq4
GyrcnhXeZdaNMpiLesT494s5Mpwbl9Tn06+3UiSn33o1V/BAAc61u2weqfPcIPVn
lX7g7J/2vXAlszUFv9HAz4Nte90MH/h+q5Z2q7Xg8bsEa0I5sBMwsTwQ3vFQfW0X
RgXRUVfic3XNULSayx66Za/Xck2i9dVEhKye1B3Si/aq7DHdJ2KPvIOjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeml/zr9qZtTSitdSA0UGL2c7HSMB8GA1UdIwQY
MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt
MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj
LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ0Tslvi
GxtmbS3B6hhdE5g152OGXN/8EULeIKxg5oxiIRysxHAemZxlTFmG4Pr2dcv9ReSz
ZJ2tw9red/Mxa9DNdTd7nldnRtmj16Nz1/SS9eiA+IPybMCXuGNL7+zxRPbItGx3
SLIueinWLggICuR4DnKrvzzcn1XOavxGR49aT0Z+0IEcv6FBFeL60s3QsFV3Jx8T
XNde6mFR2U0hJI72EpTr0Vo1VfdR3PB0pUmOOWj10QET2zOD3WRuDXIK1XFYXA1Q
VH1RiqN3Hvnmf0gTq3dTDLuRVaeh/TmVNwhvYAmQDBu88owIRv3pqfSERMmVgtI6
zGzZSVX8vIyn3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:59 2025 by rpki-client