Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: peif3BN/OU6bxlXne256T0mMM2f1fysk6UFKL2PQiLI=
Subject key identifier: 8E:39:6D:8A:5E:95:F7:E0:59:CA:03:DD:DA:DC:65:7D:98:34:4B:98
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019A714A0E6E9ADC2E0F461B1F71DABA321C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 10F1
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: 6EaXy9seTOuPayAn2Br1/BdBoQIQwqhdKmXkG2Wz0X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0e:6e:9a:dc:2e:0f:46:1b:1f:71:da:ba:32:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=8e396d8a5e95f7e059ca03dddadc657d98344b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:d4:20:31:9b:85:d8:b1:7b:62:29:c6:a4:
ce:78:7b:00:33:e0:29:ea:21:3d:38:a9:ab:86:44:
cf:f8:e8:c3:ff:20:a6:91:c8:d1:30:b3:76:f2:4c:
ad:1f:d4:57:cb:44:93:89:12:9d:b4:f4:0e:cb:5f:
b1:40:76:67:88:81:84:e9:0c:81:56:ba:7e:e1:d2:
17:8c:8a:52:c3:be:cd:f6:7d:17:ab:e1:85:a3:f5:
20:69:51:62:b9:77:fe:99:e3:ff:66:df:8c:cb:ed:
7a:ef:20:39:59:8d:e4:b1:52:93:91:55:1e:ca:7c:
87:14:0d:01:56:d5:89:89:ed:91:c5:fe:8d:dc:8d:
7e:84:32:13:8e:6d:99:8a:9c:d5:3a:ce:53:fd:95:
d2:ff:c1:3c:8b:b6:cd:a0:7a:2e:d7:f2:ac:fe:0e:
13:10:7c:9a:04:ee:04:c8:0d:aa:c5:c9:6a:98:c9:
9b:d3:4a:9f:63:29:33:23:8e:89:d4:8f:1e:b8:e5:
b0:e7:2e:4e:e6:97:d6:4e:96:9c:51:ae:39:7c:37:
ad:ff:23:6f:c3:bd:0e:76:4a:30:de:d0:83:05:5c:
9a:bd:ac:c8:f9:b3:fc:23:dc:d0:9c:c4:0f:fa:83:
96:75:c1:10:85:3f:3b:86:73:4f:bd:9c:51:5a:7f:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:6D:8A:5E:95:F7:E0:59:CA:03:DD:DA:DC:65:7D:98:34:4B:98
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2b:c0:68:68:3f:07:db:1b:c2:92:94:e0:6f:ee:11:ad:80:
70:33:d0:30:2b:57:e7:9d:bc:66:b6:14:3f:18:62:b7:01:ad:
22:c6:1e:4f:8f:f5:22:22:01:b4:96:a3:8e:98:0b:34:08:92:
a1:4c:fe:4d:77:bb:cf:74:7a:48:bc:f1:4d:69:94:ad:5d:3c:
1a:df:6d:fa:c3:cb:8f:80:92:89:11:66:a9:73:e8:05:3e:4d:
b5:71:c1:e2:d5:c7:39:93:cd:92:45:fd:41:e3:29:75:0c:98:
22:ca:b2:be:d7:db:b4:b4:a3:b9:2d:87:6e:5a:5c:2b:4f:51:
c5:16:1e:b1:b9:c4:7b:54:e1:d8:16:ce:d1:eb:a1:29:31:0a:
a7:4f:dc:e2:39:85:3d:24:7a:41:73:e9:c8:07:a8:4b:1b:29:
6e:23:4c:55:68:f6:4f:c6:9b:09:75:f7:38:a9:21:62:2d:65:
d2:6e:07:be:c3:57:39:72:08:bb:db:16:89:60:b7:a3:30:bf:
1e:59:a8:c6:f9:aa:0f:9f:e3:da:86:a7:e4:95:0b:f1:28:6c:
d9:d9:70:29:da:71:25:a0:ed:95:72:fe:1d:88:a6:66:55:74:
a4:cf:bd:2a:0d:5a:1c:9f:eb:d2:ef:89:cc:a0:b8:61:e0:1f:
95:61:7a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSg5umtwuD0YbH3HaujIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5
NzZlMjYwHhcNMjUxMTExMDUwMTA5WhcNMjUxMTEyMDUwMTA5WjAzMTEwLwYDVQQD
Eyg4ZTM5NmQ4YTVlOTVmN2UwNTljYTAzZGRkYWRjNjU3ZDk4MzQ0Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvbUIDGbhdixe2IpxqTOeHsAM+Ap
6iE9OKmrhkTP+OjD/yCmkcjRMLN28kytH9RXy0STiRKdtPQOy1+xQHZniIGE6QyB
Vrp+4dIXjIpSw77N9n0Xq+GFo/UgaVFiuXf+meP/Zt+My+167yA5WY3ksVKTkVUe
ynyHFA0BVtWJie2Rxf6N3I1+hDITjm2ZipzVOs5T/ZXS/8E8i7bNoHou1/Ks/g4T
EHyaBO4EyA2qxclqmMmb00qfYykzI46J1I8euOWw5y5O5pfWTpacUa45fDet/yNv
w70Odkow3tCDBVyavazI+bP8I9zQnMQP+oOWdcEQhT87hnNPvZxRWn9GRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI45bYpelffgWcoD3drcZX2YNEuYMB8GA1UdIwQY
MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt
M2JjNmJjMzA2Zjg5LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5
LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyvAaGg/
B9sbwpKU4G/uEa2AcDPQMCtX5528ZrYUPxhitwGtIsYeT4/1IiIBtJajjpgLNAiS
oUz+TXe7z3R6SLzxTWmUrV08Gt9t+sPLj4CSiRFmqXPoBT5NtXHB4tXHOZPNkkX9
QeMpdQyYIsqyvtfbtLSjuS2HblpcK09RxRYesbnEe1Th2BbO0euhKTEKp0/c4jmF
PSR6QXPpyAeoSxspbiNMVWj2T8abCXX3OKkhYi1l0m4HvsNXOXIIu9sWiWC3ozC/
HlmoxvmqD5/j2oan5JUL8Shs2dlwKdpxJaDtlXL+HYimZlV0pM+9Kg1aHJ/r0u+J
zKC4YeAflWF6Kw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:07 2025 by rpki-client