Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
File: FR5sPcXWdU_k9gqCscxVGreA34s.mft (raw, json)
Hash identifier: o0AzzMQko2b7xXBbp1pRUpuBC6UJpOUVpFO5nyEzBlA=
Subject key identifier: 7F:86:42:CB:04:21:F2:3D:06:9E:AB:E2:C3:65:28:8D:8D:A9:75:BC
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Certificate issuer: /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial: 019A71B84BFA0D1A0294CA1C29D6CCBF8D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: FR5sPcXWdU_k9gqCscxVGreA34s.crl (hash: QBGSHT7An61Sb2A1AhI40dfDPVnWSAojN8Z88vDlrOA=)
2: H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa (hash: F+upw1/HpLM3WaLlt0Qi9SCbAq0VRTzqm01IyvK059A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:fa:0d:1a:02:94:ca:1c:29:d6:cc:bf:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=7f8642cb0421f23d069eabe2c365288d8da975bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:65:f1:15:9b:50:4d:29:fe:40:26:06:a3:
15:68:f8:39:ef:6f:f9:d9:9b:69:82:03:4f:68:e3:
07:21:1c:7e:41:b7:a1:d7:51:a1:3b:9b:1e:c9:9f:
3c:7f:e6:49:0c:a5:cb:d7:d2:36:da:42:a1:a6:fb:
a6:d5:b5:de:38:1e:d6:62:8e:d1:c3:4d:27:3d:21:
5a:0c:b6:e1:ff:fa:f3:11:26:3a:5a:a4:1a:6a:08:
d2:ea:e2:9e:20:23:63:dc:ac:c6:e9:00:95:79:ed:
49:72:95:37:3f:e9:ed:ba:68:e1:76:d5:c8:21:75:
0f:f2:df:3f:d0:dd:c9:76:7b:a6:de:9d:89:8d:ea:
e7:9b:3b:9b:a2:41:81:ca:47:4e:fa:58:4f:52:29:
a0:64:1d:88:11:08:dd:b4:12:06:03:1a:ce:93:78:
2b:e3:09:58:a6:62:d9:1e:f0:98:45:8d:19:af:14:
96:db:f9:72:cc:60:61:56:bc:b9:7f:75:eb:71:3f:
b3:60:ef:6a:8f:61:1f:85:e5:e7:b4:19:47:2b:fe:
c1:33:f2:fb:63:10:a7:25:eb:cd:f0:15:35:10:da:
66:b9:01:35:04:53:27:e5:e3:f0:bb:e6:d3:f1:f8:
40:29:41:24:11:0a:ab:b9:2e:bc:8d:77:f3:ff:df:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:86:42:CB:04:21:F2:3D:06:9E:AB:E2:C3:65:28:8D:8D:A9:75:BC
X509v3 Authority Key Identifier:
keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:91:25:3e:f5:30:80:55:4e:40:a1:8b:91:41:07:ca:22:
92:6e:2f:d9:a7:33:fe:81:d4:49:09:ad:5e:9d:be:2d:a8:79:
83:18:4c:61:2a:73:82:33:14:f1:14:c8:b2:a8:13:d8:8f:b2:
42:ce:df:4b:f6:f5:c4:c6:5d:ae:fb:8a:37:44:e9:77:f7:05:
ef:31:db:ef:cd:8d:67:a6:57:7b:d3:9d:4a:f7:c6:52:e5:8d:
da:76:69:60:56:d4:8c:4f:1f:73:23:fc:94:83:a2:b0:cf:91:
4a:65:36:a9:c7:95:e2:b8:c9:e8:4f:92:7b:b2:26:09:56:62:
e5:54:c3:a0:6c:8b:32:af:cd:83:48:26:2e:41:6f:01:55:c0:
9b:01:d5:ae:c5:65:26:3f:f4:a9:79:61:eb:7d:d3:bc:0e:9c:
7c:84:25:b9:a5:2e:b3:15:d8:36:bb:52:2e:fe:4d:75:48:0f:
0c:3d:66:8f:ce:6d:ea:98:ab:86:b9:9e:2f:ac:a0:4a:0e:d0:
16:4b:cc:0b:1d:78:1b:a5:4b:74:87:96:1f:e2:aa:ff:aa:e4:
3b:6e:16:3c:68:32:c6:5f:07:6e:77:0e:44:ed:07:fb:87:fd:
e0:a8:d0:03:1e:91:45:b6:56:1d:48:59:c7:9c:73:56:58:ed:
2e:b4:3b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEv6DRoClMocKdbMv407MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MWU2YzNkYzVkNjc1NGZlNGY2MGE4MmIxY2M1NTFhYjc4
MGRmOGIwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
Eyg3Zjg2NDJjYjA0MjFmMjNkMDY5ZWFiZTJjMzY1Mjg4ZDhkYTk3NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9l8RWbUE0p/kAmBqMVaPg572/5
2ZtpggNPaOMHIRx+Qbeh11GhO5seyZ88f+ZJDKXL19I22kKhpvum1bXeOB7WYo7R
w00nPSFaDLbh//rzESY6WqQaagjS6uKeICNj3KzG6QCVee1JcpU3P+ntumjhdtXI
IXUP8t8/0N3Jdnum3p2JjernmzubokGBykdO+lhPUimgZB2IEQjdtBIGAxrOk3gr
4wlYpmLZHvCYRY0ZrxSW2/lyzGBhVry5f3XrcT+zYO9qj2EfheXntBlHK/7BM/L7
YxCnJevN8BU1ENpmuQE1BFMn5ePwu+bT8fhAKUEkEQqruS68jXfz/9/ITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+GQssEIfI9Bp6r4sNlKI2NqXW8MB8GA1UdIwQY
MBaAFBUebD3F1nVP5PYKgrHMVRq3gN+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGIt
NGEyYWFkNzk2ZmMxLzEvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGItNGEyYWFkNzk2ZmMx
LzEvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARquRJT71
MIBVTkChi5FBB8oikm4v2acz/oHUSQmtXp2+Lah5gxhMYSpzgjMU8RTIsqgT2I+y
Qs7fS/b1xMZdrvuKN0Tpd/cF7zHb782NZ6ZXe9OdSvfGUuWN2nZpYFbUjE8fcyP8
lIOisM+RSmU2qceV4rjJ6E+Se7ImCVZi5VTDoGyLMq/Ng0gmLkFvAVXAmwHVrsVl
Jj/0qXlh633TvA6cfIQluaUusxXYNrtSLv5NdUgPDD1mj85t6pirhrmeL6ygSg7Q
FkvMCx14G6VLdIeWH+Kq/6rkO24WPGgyxl8HbncORO0H+4f94KjQAx6RRbZWHUhZ
x5xzVljtLrQ7Fg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:59 2025 by rpki-client