Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: swPJxvh7EVzx3oQlaDlTwGup7Ea+4QqKed7yGLvUFQI=
Subject key identifier: 48:76:FD:E1:9E:C1:5D:14:C6:C5:09:65:53:DE:6C:33:ED:8C:6C:8B
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 019A71B80E42CB811757330B2961DC8D1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 11BD
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: GPf1XoSOE31H7t3FzjfOYToVBUxbxfJ1lSmwBFjMQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0e:42:cb:81:17:57:33:0b:29:61:dc:8d:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=4876fde19ec15d14c6c5096553de6c33ed8c6c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:46:cf:3c:57:b1:fc:dc:11:ee:a8:7f:51:
45:0b:3d:7e:f0:cc:b3:e0:45:93:54:e1:9c:ae:cd:
1e:98:a8:df:49:8a:a7:10:d3:df:6a:47:3f:f3:07:
70:28:0b:aa:e9:01:37:91:90:d2:db:36:1a:30:86:
ca:89:ae:8e:0c:48:b2:8b:f7:9e:56:2f:db:5f:ca:
89:8c:6b:25:d2:1b:bc:c1:58:12:64:df:0e:c0:e2:
f6:1b:b2:64:34:a3:79:2a:dd:7e:b0:88:17:22:39:
10:9b:2f:9e:c7:0b:f1:4d:15:8d:32:cd:c0:3a:30:
ff:14:ee:7c:cb:8b:bb:db:dd:c3:e0:1b:2d:6f:7f:
6c:32:d7:9f:0b:e7:1d:51:81:27:c8:6c:1b:bd:d4:
3c:04:c5:e8:94:2e:95:59:97:1b:7a:b9:2e:21:f7:
74:ea:1f:34:b3:4b:81:6d:1a:56:bc:31:31:0d:f6:
a8:ef:c0:46:b7:7b:e1:16:e1:d9:04:dc:b1:48:a0:
ea:4d:67:ff:7d:fb:3b:3e:8d:28:a9:e2:51:34:5c:
88:b7:d9:4e:6e:20:9b:d1:cd:b1:09:ec:33:57:ad:
40:8b:0a:ab:11:aa:e8:c3:ff:02:f9:75:2a:16:cf:
a8:2f:76:8e:42:1c:ed:5d:32:93:c8:b0:9d:bf:6a:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:FD:E1:9E:C1:5D:14:C6:C5:09:65:53:DE:6C:33:ED:8C:6C:8B
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:a0:8a:d4:e7:39:47:2a:cb:9a:f6:f9:23:98:0b:8c:4d:
64:b4:ce:82:8a:83:d8:e3:9b:64:01:49:f9:54:50:56:34:f6:
73:7a:ed:dc:44:ea:43:e4:c7:09:de:0b:29:29:b6:9f:c5:e2:
c3:dc:5a:5b:a0:db:fa:59:20:ab:a1:fc:8f:73:d0:9c:af:24:
05:b8:eb:fe:48:ea:ed:de:04:70:64:25:f5:79:8b:8c:ca:8f:
0b:23:ee:f9:bb:e8:de:7b:3a:23:35:ba:f1:49:00:f1:77:a9:
98:64:c9:73:53:26:fb:eb:9b:7a:8e:4f:4d:58:13:5a:c3:7e:
7a:5e:86:6f:75:55:9e:68:f7:f5:e1:2b:f3:16:d7:36:6f:ee:
85:98:4c:ea:e9:76:60:b5:8c:2d:cb:2d:52:be:00:44:28:35:
48:2d:8e:71:7e:ea:4c:a7:74:12:47:03:7f:5d:d2:68:fa:ca:
bd:bb:7d:0a:8a:c7:77:99:2a:96:6d:92:e5:93:3c:97:b7:58:
88:82:75:6c:89:1b:b4:37:08:07:a1:e4:90:d9:9e:8e:ef:77:
1d:51:cd:32:65:cf:cc:83:30:61:c8:62:b3:62:b2:c1:1b:1a:
b5:15:1a:9b:25:b1:ca:0c:ca:f9:65:7f:3d:35:b3:96:11:21:
5d:38:d5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuA5Cy4EXVzMLKWHcjRBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzlmOTY0Y2Q0ODlmY2QyNTAwYjM3NjgxZDU4NDc5ZDU1
M2M4YWIwHhcNMjUxMTExMDcwMTE4WhcNMjUxMTEyMDcwMTE4WjAzMTEwLwYDVQQD
Eyg0ODc2ZmRlMTllYzE1ZDE0YzZjNTA5NjU1M2RlNmMzM2VkOGM2YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVGzzxXsfzcEe6of1FFCz1+8Myz
4EWTVOGcrs0emKjfSYqnENPfakc/8wdwKAuq6QE3kZDS2zYaMIbKia6ODEiyi/ee
Vi/bX8qJjGsl0hu8wVgSZN8OwOL2G7JkNKN5Kt1+sIgXIjkQmy+exwvxTRWNMs3A
OjD/FO58y4u7293D4Bstb39sMtefC+cdUYEnyGwbvdQ8BMXolC6VWZcberkuIfd0
6h80s0uBbRpWvDExDfao78BGt3vhFuHZBNyxSKDqTWf/ffs7Po0oqeJRNFyIt9lO
biCb0c2xCewzV61AiwqrEarow/8C+XUqFs+oL3aOQhztXTKTyLCdv2rnfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh2/eGewV0UxsUJZVPebDPtjGyLMB8GA1UdIwQY
MBaAFBc5+WTNSJ/NJQCzdoHVhHnVU8irMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTIt
NzJkMWZmZTI1YmQzLzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTItNzJkMWZmZTI1YmQz
LzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazegitTn
OUcqy5r2+SOYC4xNZLTOgoqD2OObZAFJ+VRQVjT2c3rt3ETqQ+THCd4LKSm2n8Xi
w9xaW6Db+lkgq6H8j3PQnK8kBbjr/kjq7d4EcGQl9XmLjMqPCyPu+bvo3ns6IzW6
8UkA8XepmGTJc1Mm++ubeo5PTVgTWsN+el6Gb3VVnmj39eEr8xbXNm/uhZhM6ul2
YLWMLcstUr4ARCg1SC2OcX7qTKd0EkcDf13SaPrKvbt9CorHd5kqlm2S5ZM8l7dY
iIJ1bIkbtDcIB6HkkNmeju93HVHNMmXPzIMwYchis2KywRsatRUamyWxygzK+WV/
PTWzlhEhXTjVIA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:29 2025 by rpki-client