Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: U2TxOwE4HsG5LUY8OiuJOLgfD8xBlNA+b0wf/R6iG1c=
Subject key identifier: B1:45:14:6C:0B:DD:BD:F8:A1:A6:0E:22:FA:87:FA:FD:72:CD:04:2B
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 019A71EEE1C877BBE41D3E82AD59D6C684D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: ctfs6xppG61DbOwh9Hcl6gkQ2rEEY/O5i/w+gZqPQM8=)
3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e1:c8:77:bb:e4:1d:3e:82:ad:59:d6:c6:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=b145146c0bddbdf8a1a60e22fa87fafd72cd042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:ee:e2:55:c6:95:77:7d:48:69:7e:bc:01:
72:11:54:c0:6d:c6:3a:a6:3a:29:4f:0e:79:eb:3d:
b5:36:76:0a:8e:e1:72:42:d6:1b:fd:d1:dc:aa:74:
13:34:a5:7c:f1:a0:24:b4:b5:61:ef:48:06:ee:d2:
bc:99:85:26:d9:59:da:34:c6:72:f9:fd:a7:b3:a1:
6f:e1:d1:f4:c7:58:9b:1e:ac:57:a6:dc:e0:40:77:
90:64:cb:51:06:03:78:fa:cd:89:75:fd:20:d5:b3:
f5:16:e9:90:9b:8b:7d:69:3d:df:51:06:25:02:9d:
db:fd:65:0d:6b:a0:08:5e:03:a0:45:46:0e:7e:79:
31:60:e9:2d:86:e1:55:37:f0:f6:d7:a0:2c:58:ab:
cf:51:bf:c3:a4:77:aa:4f:22:f3:e5:b1:1a:0c:5e:
7e:12:33:13:2e:72:93:ab:47:64:bc:04:71:c2:54:
ec:b5:c4:a6:58:84:0f:eb:e7:be:fd:d8:6f:b3:ac:
f2:22:aa:ba:1d:96:7b:96:e3:08:0b:7a:5a:69:ca:
ed:8d:b3:1e:31:87:1b:65:c8:59:dd:2c:c3:d3:4e:
de:2e:b2:40:0d:fc:d8:3a:69:f8:3a:ca:dd:f5:8b:
00:eb:fa:05:e3:ae:f0:e3:25:c8:c9:59:14:33:f0:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:14:6C:0B:DD:BD:F8:A1:A6:0E:22:FA:87:FA:FD:72:CD:04:2B
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:52:f3:b5:2c:7f:7a:79:db:a4:6e:aa:27:45:83:21:da:a0:
82:c9:a4:18:cb:4a:b0:f3:63:77:6d:29:aa:b3:1d:29:a3:85:
a8:51:fe:c0:0a:47:13:3a:89:96:83:bf:b8:27:9c:1a:49:68:
e1:1a:90:da:17:e3:fd:ec:09:a9:24:3e:09:3b:0d:5c:f4:12:
77:e5:96:a2:8f:2a:f0:f8:fb:1b:9a:35:10:6e:9e:39:61:95:
96:7e:0b:e3:67:e4:58:b5:bd:fb:8f:b5:71:c7:ef:32:5f:8d:
93:f1:14:9e:42:eb:ff:2a:0e:a4:3b:fb:b3:59:07:f9:fb:4b:
e3:93:47:8f:ba:2e:35:83:b8:d0:55:1f:15:ec:bb:f3:33:f7:
d3:c8:17:38:f5:4b:7e:db:93:28:d4:a9:d1:bc:67:34:2c:08:
e8:0f:1f:0e:c6:b5:f9:63:d4:63:80:58:52:41:40:85:ea:43:
1a:ca:a8:d4:16:36:27:48:66:6a:a0:a5:e3:72:f4:50:9d:f9:
79:b4:af:fb:f9:e6:be:77:d6:e5:79:09:fc:87:96:5b:0f:12:
39:e8:c4:33:69:07:7c:de:0c:5c:2e:be:c5:9a:a9:1b:32:ff:
f7:bf:90:5a:40:46:3b:df:9f:55:ad:69:e1:e4:3b:59:52:8c:
5e:9d:7b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uHId7vkHT6CrVnWxoTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjhiZWI1NTVkYWZhODJjM2Q2YWEzMzY5MDlhZTVhZGUz
NWE4M2QwHhcNMjUxMTExMDgwMTEyWhcNMjUxMTEyMDgwMTEyWjAzMTEwLwYDVQQD
EyhiMTQ1MTQ2YzBiZGRiZGY4YTFhNjBlMjJmYTg3ZmFmZDcyY2QwNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDfu4lXGlXd9SGl+vAFyEVTAbcY6
pjopTw556z21NnYKjuFyQtYb/dHcqnQTNKV88aAktLVh70gG7tK8mYUm2VnaNMZy
+f2ns6Fv4dH0x1ibHqxXptzgQHeQZMtRBgN4+s2Jdf0g1bP1FumQm4t9aT3fUQYl
Ap3b/WUNa6AIXgOgRUYOfnkxYOkthuFVN/D216AsWKvPUb/DpHeqTyLz5bEaDF5+
EjMTLnKTq0dkvARxwlTstcSmWIQP6+e+/dhvs6zyIqq6HZZ7luMIC3paacrtjbMe
MYcbZchZ3SzD007eLrJADfzYOmn4Osrd9YsA6/oF467w4yXIyVkUM/DLVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFFFGwL3b34oaYOIvqH+v1yzQQrMB8GA1UdIwQY
MBaAFBe4vrVV2vqCw9aqM2kJrlreNag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAt
N2UyNDI2NzRkZWZjLzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAtN2UyNDI2NzRkZWZj
LzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFLztSx/
ennbpG6qJ0WDIdqggsmkGMtKsPNjd20pqrMdKaOFqFH+wApHEzqJloO/uCecGklo
4RqQ2hfj/ewJqSQ+CTsNXPQSd+WWoo8q8Pj7G5o1EG6eOWGVln4L42fkWLW9+4+1
ccfvMl+Nk/EUnkLr/yoOpDv7s1kH+ftL45NHj7ouNYO40FUfFey78zP308gXOPVL
ftuTKNSp0bxnNCwI6A8fDsa1+WPUY4BYUkFAhepDGsqo1BY2J0hmaqCl43L0UJ35
ebSv+/nmvnfW5XkJ/IeWWw8SOejEM2kHfN4MXC6+xZqpGzL/97+QWkBGO9+fVa1p
4eQ7WVKMXp17RA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:14 2025 by rpki-client