Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: XQm00PZ7wD7L22NeGVm+jPzmMuAU7xLmljjtkLv4LaE=
Subject key identifier: 7E:BD:BB:ED:B5:4F:C0:FA:71:2F:AD:BC:56:25:5C:7B:51:86:3B:E5
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019A71B84B7803CB7EDAC7584A3FDFD0D8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 09F8
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: iy5bKlqpEtpPt3BO6JQdFQ72QTtEoLP6sjq5/itjK4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:78:03:cb:7e:da:c7:58:4a:3f:df:d0:d8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=7ebdbbedb54fc0fa712fadbc56255c7b51863be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:60:8a:fc:8f:74:8e:fd:14:14:e2:91:eb:
e5:fc:12:a6:8b:74:46:49:ae:fa:82:db:cd:dc:30:
15:2b:de:e2:03:d4:4d:b5:da:9c:fb:3d:70:51:b3:
2b:a6:ee:04:47:17:15:d3:cb:95:57:7c:6d:6c:3b:
db:0f:b0:58:be:22:c7:38:94:45:fb:c9:ed:9e:f7:
f6:1d:82:2d:81:1f:3a:d3:ad:33:57:f1:da:b7:1e:
d2:32:93:f6:f6:7c:50:2e:90:28:fe:61:27:9e:7b:
04:18:d0:c7:20:29:62:32:15:4e:33:14:26:1a:e4:
6d:5b:3d:bb:7e:da:3a:62:b7:8a:0d:25:b9:c4:29:
db:44:4e:4d:cb:5f:58:5a:62:06:dd:8f:aa:83:be:
0e:90:3c:b3:0b:d2:c9:49:ad:a3:07:88:99:29:86:
a9:40:aa:f4:48:97:1a:4f:79:20:e1:51:63:5b:01:
9c:45:0b:63:58:06:b3:9e:9a:f9:f8:34:3b:36:90:
be:ab:d1:65:aa:a8:9f:95:12:e4:5c:bd:34:db:d3:
fb:79:a9:43:e9:52:cd:6e:1a:50:4c:64:90:b5:50:
76:c7:e1:6a:37:9c:f6:3f:cc:6c:5a:0e:18:e5:69:
b4:7a:02:5f:56:cc:8e:cb:ae:eb:eb:8d:3e:a3:4f:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:BB:ED:B5:4F:C0:FA:71:2F:AD:BC:56:25:5C:7B:51:86:3B:E5
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:55:a6:a8:42:00:09:12:6f:01:b1:95:ce:0a:a1:f8:2c:
ed:ac:1d:c4:34:ee:94:59:7b:1c:57:cb:24:85:53:e0:6f:e6:
1c:38:5f:23:0e:a0:6f:3c:7f:07:22:c9:e3:99:89:6b:f9:2a:
b9:3f:a7:31:f3:04:4a:49:7b:b3:eb:7a:c9:b1:e9:9c:84:9b:
bf:1f:3f:14:85:d4:34:c9:d1:21:d9:64:1a:5d:88:26:6c:6a:
74:d7:7e:6c:8b:69:4d:1a:80:d2:0e:0c:27:99:5c:57:98:d4:
47:09:0e:ed:33:f8:2f:9d:8c:1f:f8:5a:b9:82:74:e8:85:b9:
a7:bb:73:de:b5:04:f1:e8:45:58:21:7a:8f:fc:02:29:98:61:
9b:e3:a7:e8:a8:17:85:30:d1:7f:b6:15:8e:2f:d1:41:b9:f6:
4c:01:93:d8:ed:9c:9f:1f:f2:33:02:30:dc:ab:67:48:54:d9:
32:ee:b0:4b:bc:ea:f7:62:2b:84:8b:81:ce:cd:81:54:6a:93:
78:4e:a7:b6:8c:2b:9c:4c:c1:b9:c1:4a:d8:06:bb:ab:a5:9c:
5a:56:f6:d4:d6:c7:77:56:d9:34:f5:8e:4f:a3:32:96:8b:ba:
24:84:2e:47:c0:96:4c:05:48:20:ce:80:bc:27:4a:52:db:aa:
de:40:47:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEt4A8t+2sdYSj/f0NimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjYxMzBkOTlhZjkzMjA3NzVhZDYwYjBmNGM5ODllM2U1
OTc3YzkwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
Eyg3ZWJkYmJlZGI1NGZjMGZhNzEyZmFkYmM1NjI1NWM3YjUxODYzYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vJgivyPdI79FBTikevl/BKmi3RG
Sa76gtvN3DAVK97iA9RNtdqc+z1wUbMrpu4ERxcV08uVV3xtbDvbD7BYviLHOJRF
+8ntnvf2HYItgR86060zV/Hatx7SMpP29nxQLpAo/mEnnnsEGNDHICliMhVOMxQm
GuRtWz27fto6YreKDSW5xCnbRE5Ny19YWmIG3Y+qg74OkDyzC9LJSa2jB4iZKYap
QKr0SJcaT3kg4VFjWwGcRQtjWAaznpr5+DQ7NpC+q9FlqqiflRLkXL0029P7ealD
6VLNbhpQTGSQtVB2x+FqN5z2P8xsWg4Y5Wm0egJfVsyOy67r640+o0+1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH69u+21T8D6cS+tvFYlXHtRhjvlMB8GA1UdIwQY
MBaAFBX2Ew2Zr5Mgd1rWCw9MmJ4+WXfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEt
MWY4Njc2ZjRjMTdiLzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEtMWY4Njc2ZjRjMTdi
LzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuRVpqhC
AAkSbwGxlc4Kofgs7awdxDTulFl7HFfLJIVT4G/mHDhfIw6gbzx/ByLJ45mJa/kq
uT+nMfMESkl7s+t6ybHpnISbvx8/FIXUNMnRIdlkGl2IJmxqdNd+bItpTRqA0g4M
J5lcV5jURwkO7TP4L52MH/hauYJ06IW5p7tz3rUE8ehFWCF6j/wCKZhhm+On6KgX
hTDRf7YVji/RQbn2TAGT2O2cnx/yMwIw3KtnSFTZMu6wS7zq92IrhIuBzs2BVGqT
eE6ntowrnEzBucFK2Aa7q6WcWlb21NbHd1bZNPWOT6Mylou6JIQuR8CWTAVIIM6A
vCdKUtuq3kBHFg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:27 2025 by rpki-client