Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: t0g02MNelkdmb+TYgaFbImp6GxvI5GJaEhkGb65ku/w=
Subject key identifier: CB:90:12:EE:89:92:49:38:08:40:E5:2F:CD:63:E6:E7:FD:BA:58:5D
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019A72CA93FB177FB1C0118857168B36EB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 12:01:09 +0000
Manifest this update: Tue 11 Nov 2025 12:01:09 +0000
Manifest next update: Wed 12 Nov 2025 12:01:09 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: OCgfExNHaVSpUpW+CIpogrqn09SwLY6PVKkYMzX89vw=)
2: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (hash: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:93:fb:17:7f:b1:c0:11:88:57:16:8b:36:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Nov 11 12:01:09 2025 GMT
Not After : Nov 12 12:01:09 2025 GMT
Subject: CN=cb9012ee899249380840e52fcd63e6e7fdba585d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:78:cc:05:e8:a5:e6:62:9c:4c:f0:72:0a:
04:dc:c4:d9:cc:e5:fa:d7:e9:4f:5c:2d:f0:75:b3:
09:07:67:2c:ea:a4:ba:f8:b0:ad:c4:01:96:0f:71:
9c:1b:67:89:ff:44:a2:02:f6:01:68:d3:67:cd:e2:
09:f8:56:2a:eb:11:4a:dd:f1:ed:fd:4e:c4:95:be:
1c:84:84:7b:64:29:8c:4f:f3:ae:d3:86:44:b0:a4:
a8:87:5b:d3:e5:50:6f:8d:fd:c9:33:6c:e0:84:cc:
9c:a8:d8:9d:c5:c3:6d:89:35:8c:88:69:f7:b0:30:
e3:04:78:b6:b8:df:f1:18:a5:26:aa:b5:32:4e:e1:
c0:10:45:cb:26:fd:ab:ec:6b:30:f2:72:0d:a8:0a:
f2:60:ba:c2:58:f0:f8:12:74:ee:cb:70:39:02:cd:
c2:33:04:5d:38:d9:66:00:b7:eb:2d:d7:f1:bc:31:
33:1b:79:99:88:04:20:78:76:74:71:c5:a9:11:c7:
d0:4f:ac:e4:55:fc:fe:10:cc:64:38:1c:00:de:61:
c3:3f:0a:a1:ee:a2:96:e8:cc:13:31:b4:3c:c8:c1:
8f:03:48:24:78:24:48:a5:8f:24:e7:18:84:56:a2:
de:33:78:a8:2d:94:26:80:6d:71:51:0f:bf:a9:b6:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:12:EE:89:92:49:38:08:40:E5:2F:CD:63:E6:E7:FD:BA:58:5D
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:75:ef:1a:8e:09:53:e1:47:11:fd:13:53:91:2d:af:fb:42:
ce:bc:6f:5c:7b:4a:8f:93:7f:33:e0:0e:94:26:b3:1f:e7:57:
8d:1f:1e:ec:6e:50:74:4b:ed:cc:4c:89:b7:79:58:d1:e7:23:
05:b0:ee:e9:6f:3f:75:f1:16:80:4a:bd:5d:5c:81:d2:a5:6d:
25:f0:93:8d:11:02:bd:e0:b4:01:2d:88:7b:c0:55:95:6d:73:
aa:b4:aa:4a:fa:ed:96:c5:98:3c:de:ae:a9:d9:39:af:4c:ef:
96:74:29:2c:a9:23:35:1e:92:12:85:ff:a1:df:34:df:d8:3f:
e8:27:e3:33:7d:16:cc:36:f5:e5:29:4c:8f:df:b6:d8:ad:7a:
6a:e7:79:24:51:6c:c5:8a:f0:fe:38:54:ac:22:9f:d5:a7:91:
f6:40:a2:bd:9b:82:bf:c2:9d:09:4a:61:12:61:e2:03:e5:35:
92:ad:ab:f5:72:51:a9:ad:99:f3:49:e8:fb:c0:81:19:c2:f0:
ee:66:db:3b:83:c9:fc:65:50:64:fd:e9:0d:22:92:56:ac:fb:
44:2e:a4:d5:bc:22:5a:a1:9e:14:9b:99:84:6a:ea:da:97:eb:
2a:9b:31:10:17:02:be:89:f7:02:3c:90:a9:35:ed:b0:a4:7e:
28:1c:b3:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyypP7F3+xwBGIVxaLNuuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5
MWU5NDYwHhcNMjUxMTExMTIwMTA5WhcNMjUxMTEyMTIwMTA5WjAzMTEwLwYDVQQD
EyhjYjkwMTJlZTg5OTI0OTM4MDg0MGU1MmZjZDYzZTZlN2ZkYmE1ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogt4zAXopeZinEzwcgoE3MTZzOX6
1+lPXC3wdbMJB2cs6qS6+LCtxAGWD3GcG2eJ/0SiAvYBaNNnzeIJ+FYq6xFK3fHt
/U7Elb4chIR7ZCmMT/Ou04ZEsKSoh1vT5VBvjf3JM2zghMycqNidxcNtiTWMiGn3
sDDjBHi2uN/xGKUmqrUyTuHAEEXLJv2r7Gsw8nINqAryYLrCWPD4EnTuy3A5As3C
MwRdONlmALfrLdfxvDEzG3mZiAQgeHZ0ccWpEcfQT6zkVfz+EMxkOBwA3mHDPwqh
7qKW6MwTMbQ8yMGPA0gkeCRIpY8k5xiEVqLeM3ioLZQmgG1xUQ+/qbagrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuQEu6Jkkk4CEDlL81j5uf9ulhdMB8GA1UdIwQY
MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt
Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi
LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3XvGo4J
U+FHEf0TU5Etr/tCzrxvXHtKj5N/M+AOlCazH+dXjR8e7G5QdEvtzEyJt3lY0ecj
BbDu6W8/dfEWgEq9XVyB0qVtJfCTjRECveC0AS2Ie8BVlW1zqrSqSvrtlsWYPN6u
qdk5r0zvlnQpLKkjNR6SEoX/od8039g/6CfjM30WzDb15SlMj9+22K16aud5JFFs
xYrw/jhUrCKf1aeR9kCivZuCv8KdCUphEmHiA+U1kq2r9XJRqa2Z80no+8CBGcLw
7mbbO4PJ/GVQZP3pDSKSVqz7RC6k1bwiWqGeFJuZhGrq2pfrKpsxEBcCvon3AjyQ
qTXtsKR+KByz/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:33 2025 by rpki-client