Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: NP+IyBYg26plNBp1zJvBY2bLR1ep+XqZ3WH5E0WWFz4=
Subject key identifier: 02:53:D2:66:F0:DA:30:6E:84:BC:35:17:F5:18:2B:8C:BE:BE:7E:F8
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019A70A4D859AEF0FDE5F5EFD277E6CC81B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: XY0eb303e0HAkf/rFE+CETy0a12xbrOA7RM6LZXNtLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d8:59:ae:f0:fd:e5:f5:ef:d2:77:e6:cc:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=0253d266f0da306e84bc3517f5182b8cbebe7ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:ff:de:78:34:a0:6b:fe:38:fc:48:ad:28:
7e:e8:46:c3:00:6d:91:00:6c:99:32:d7:68:16:b0:
75:94:2d:f9:5f:b4:ab:44:15:cc:ad:6e:01:f9:7d:
98:57:08:18:1a:f2:9e:03:a5:2e:88:1c:7a:8f:1e:
18:0a:ad:bd:c4:59:61:29:1c:9b:b7:0b:40:70:32:
5a:c6:1f:ae:1d:5d:53:3a:59:92:b2:9e:92:42:fa:
d0:0e:b2:40:5a:63:b1:55:f6:c3:dc:d3:86:95:8e:
98:ad:9b:9c:d1:22:7c:36:7a:9f:d0:a8:2a:e3:80:
a6:d4:2b:2c:35:48:47:09:b7:32:03:9b:af:8c:fb:
71:53:08:4e:18:0c:69:ce:51:bd:02:1a:a4:9d:86:
e9:04:a1:06:b0:d6:22:d9:ba:36:2a:0b:9a:19:76:
d1:a9:2d:97:db:4c:a7:c0:db:c5:1e:d7:e1:a7:ed:
d4:66:dc:6c:24:fa:75:6d:f9:c5:7c:4d:74:a1:7e:
c1:b8:91:48:dd:01:4b:3e:80:5d:d5:d2:20:4a:56:
d8:6f:fa:4c:fa:bf:53:db:ef:4c:22:13:35:89:2f:
69:98:14:3c:9c:16:45:3f:02:42:71:ad:e5:ec:19:
5c:7a:74:02:37:99:fd:eb:4e:36:d1:d9:54:a6:2d:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:D2:66:F0:DA:30:6E:84:BC:35:17:F5:18:2B:8C:BE:BE:7E:F8
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:85:58:9a:d0:83:37:7e:8e:cd:ad:3f:c2:84:d1:a5:d6:78:
79:c1:3c:4e:00:93:d9:81:e7:05:be:6c:fc:4f:85:c5:83:28:
8b:42:5d:1b:e8:4b:c9:0c:2b:e3:66:af:e3:04:48:d6:c5:42:
52:bb:67:97:08:eb:cd:6b:a7:fc:8e:31:bc:79:a3:fa:f6:c6:
0c:31:36:c7:70:e1:87:af:b8:cd:19:6e:39:78:aa:c3:6f:5b:
f5:9f:4c:be:4e:1a:de:7b:9a:9f:c7:50:c9:fd:bd:7b:91:44:
bf:e8:71:be:de:50:01:63:b4:b6:31:f3:d8:00:4d:e1:06:0a:
18:a5:ff:c6:a6:c5:df:9f:ac:8b:fd:15:e5:56:f3:6b:ab:4c:
f6:32:a2:b3:fd:c1:7d:64:d6:b7:7b:19:1b:e5:ad:ec:92:c9:
8e:74:6e:67:28:e0:f2:9b:3c:10:15:ab:da:1d:77:d2:f7:6f:
34:85:7b:6b:83:4f:18:09:33:27:9f:37:95:f9:85:9c:7e:06:
a4:e2:a7:10:bc:b6:1d:96:b3:be:e8:80:be:9c:16:75:2f:ab:
42:b2:f7:97:74:54:d9:c7:66:76:a8:5e:d5:c6:82:59:ee:3c:
de:5d:f6:e3:65:b6:2b:5a:cd:f2:be:4c:a1:53:7a:61:0e:02:
33:04:83:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNhZrvD95fXv0nfmzIG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDA4YzBjY2RhODAyY2YyMGNlN2FiZGVlYTIwMjE0ZTA1
ZTQ3YWYwHhcNMjUxMTExMDIwMDQyWhcNMjUxMTEyMDIwMDQyWjAzMTEwLwYDVQQD
EygwMjUzZDI2NmYwZGEzMDZlODRiYzM1MTdmNTE4MmI4Y2JlYmU3ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2j/3ng0oGv+OPxIrSh+6EbDAG2R
AGyZMtdoFrB1lC35X7SrRBXMrW4B+X2YVwgYGvKeA6UuiBx6jx4YCq29xFlhKRyb
twtAcDJaxh+uHV1TOlmSsp6SQvrQDrJAWmOxVfbD3NOGlY6YrZuc0SJ8Nnqf0Kgq
44Cm1CssNUhHCbcyA5uvjPtxUwhOGAxpzlG9AhqknYbpBKEGsNYi2bo2KguaGXbR
qS2X20ynwNvFHtfhp+3UZtxsJPp1bfnFfE10oX7BuJFI3QFLPoBd1dIgSlbYb/pM
+r9T2+9MIhM1iS9pmBQ8nBZFPwJCca3l7BlcenQCN5n960420dlUpi38ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJT0mbw2jBuhLw1F/UYK4y+vn74MB8GA1UdIwQY
MBaAFH7QjAzNqALPIM56ve6iAhTgXkevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEt
YWI1ZjM5ZmI4ZDM2LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEtYWI1ZjM5ZmI4ZDM2
LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4VYmtCD
N36Oza0/woTRpdZ4ecE8TgCT2YHnBb5s/E+FxYMoi0JdG+hLyQwr42av4wRI1sVC
UrtnlwjrzWun/I4xvHmj+vbGDDE2x3Dhh6+4zRluOXiqw29b9Z9Mvk4a3nuan8dQ
yf29e5FEv+hxvt5QAWO0tjHz2ABN4QYKGKX/xqbF35+si/0V5Vbza6tM9jKis/3B
fWTWt3sZG+Wt7JLJjnRuZyjg8ps8EBWr2h130vdvNIV7a4NPGAkzJ583lfmFnH4G
pOKnELy2HZazvuiAvpwWdS+rQrL3l3RU2cdmdqhe1caCWe483l3242W2K1rN8r5M
oVN6YQ4CMwSDjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:07 2025 by rpki-client