Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: iOG+69L1z/QanUaQfobLW+gZUtIa2BdCPAvIO7EdYsg=
Subject key identifier: 82:4F:05:C9:0E:04:C7:44:17:29:74:84:CB:DA:CB:D6:42:C3:99:13
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019A72257CB13B7249330ACAE070362AA05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: Chr1qhCMIJxhwHK9TVedGMbWV9MVIIjJjG9n5HHky30=)
2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7c:b1:3b:72:49:33:0a:ca:e0:70:36:2a:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=824f05c90e04c74417297484cbdacbd642c39913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:6d:9b:44:6a:19:f0:2d:77:f9:c2:7b:14:
d1:c3:b4:44:fb:6a:6c:e0:07:66:f5:9c:e2:d9:41:
14:d2:65:92:26:f2:8f:3f:12:f7:1e:b4:d8:ef:14:
da:95:ac:62:42:06:c5:2f:f0:58:48:aa:b8:0a:d9:
50:29:c3:72:ec:77:a2:21:79:7d:44:80:c1:62:fb:
00:f3:5c:ba:c4:b1:f1:1f:35:a2:f8:74:82:a2:16:
e1:4b:11:38:90:78:ac:10:fa:51:76:10:8b:9b:8f:
47:71:f1:c0:f7:44:cc:56:aa:89:1f:3f:c7:43:b7:
79:50:eb:87:0b:a8:5c:09:21:02:54:8f:8c:99:20:
89:07:3f:4c:5a:85:4b:5e:fb:f7:e7:cb:32:dd:b8:
07:88:dd:2c:96:1f:cd:34:c1:35:69:9b:7b:1b:e5:
f3:e9:bc:ad:dd:34:f8:79:b2:cf:ea:ac:b7:0b:91:
ac:eb:24:a2:d5:60:7a:67:33:30:44:a1:51:b9:a2:
61:ab:1b:93:64:d0:7f:3e:d9:06:8c:2c:95:9f:30:
dd:3f:1d:84:8d:8c:90:9a:a9:5b:1d:9c:ea:0a:23:
1d:7e:24:4a:23:bb:1d:f5:1f:81:51:5c:1b:60:74:
4c:1c:3d:76:8c:8e:f6:90:6e:13:f4:bb:6e:60:1d:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:05:C9:0E:04:C7:44:17:29:74:84:CB:DA:CB:D6:42:C3:99:13
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:db:43:92:ea:a9:50:e0:38:93:bb:3b:47:09:09:4b:e1:
79:6f:f5:24:ce:23:21:a2:85:bd:0f:b5:8c:a0:85:b4:67:59:
cf:c6:6c:64:1e:7d:8a:d1:c3:a9:3f:b6:c5:0c:8e:20:2d:20:
c2:a6:1b:39:0c:cd:17:79:d7:14:21:0c:8e:28:b1:19:88:80:
ef:a8:8b:be:75:67:45:8d:ea:ec:7f:ba:38:58:e1:a5:b0:27:
ee:eb:0b:b1:c0:fe:4c:43:2e:6b:94:98:20:c8:4d:fd:c4:82:
23:df:2d:1b:88:73:b6:6f:67:ca:81:ee:32:fb:fb:a0:a5:ff:
f9:9f:5e:08:29:07:4d:47:3f:6f:d6:78:13:59:8c:59:a4:b7:
da:67:2d:23:39:10:ea:c4:7c:f6:9b:e9:44:ce:59:d6:19:42:
8b:70:df:12:3e:bd:3d:c5:2f:98:9e:4e:cb:ff:3e:e6:33:86:
b7:58:13:82:b0:67:c3:10:4d:cf:3a:5b:91:09:58:3d:68:30:
de:d5:dc:81:a0:ea:2e:88:1b:e8:1b:6e:7a:af:f0:1f:f1:3e:
8b:11:b1:a0:7c:58:8e:a6:86:ca:10:53:bd:7a:49:d2:48:be:
c5:f5:b9:7a:a7:29:5d:d7:08:ad:8f:30:b0:66:38:5b:e8:eb:
8d:e6:8f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJXyxO3JJMwrK4HA2KqBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx
ZDllMzYwHhcNMjUxMTExMDkwMDUwWhcNMjUxMTEyMDkwMDUwWjAzMTEwLwYDVQQD
Eyg4MjRmMDVjOTBlMDRjNzQ0MTcyOTc0ODRjYmRhY2JkNjQyYzM5OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfFtm0RqGfAtd/nCexTRw7RE+2ps
4Adm9Zzi2UEU0mWSJvKPPxL3HrTY7xTalaxiQgbFL/BYSKq4CtlQKcNy7HeiIXl9
RIDBYvsA81y6xLHxHzWi+HSCohbhSxE4kHisEPpRdhCLm49HcfHA90TMVqqJHz/H
Q7d5UOuHC6hcCSECVI+MmSCJBz9MWoVLXvv358sy3bgHiN0slh/NNME1aZt7G+Xz
6byt3TT4ebLP6qy3C5Gs6ySi1WB6ZzMwRKFRuaJhqxuTZNB/PtkGjCyVnzDdPx2E
jYyQmqlbHZzqCiMdfiRKI7sd9R+BUVwbYHRMHD12jI72kG4T9LtuYB0/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJPBckOBMdEFyl0hMvay9ZCw5kTMB8GA1UdIwQY
MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt
MDI4NWMxNWZjNTFlLzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl
LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgvbQ5Lq
qVDgOJO7O0cJCUvheW/1JM4jIaKFvQ+1jKCFtGdZz8ZsZB59itHDqT+2xQyOIC0g
wqYbOQzNF3nXFCEMjiixGYiA76iLvnVnRY3q7H+6OFjhpbAn7usLscD+TEMua5SY
IMhN/cSCI98tG4hztm9nyoHuMvv7oKX/+Z9eCCkHTUc/b9Z4E1mMWaS32mctIzkQ
6sR89pvpRM5Z1hlCi3DfEj69PcUvmJ5Oy/8+5jOGt1gTgrBnwxBNzzpbkQlYPWgw
3tXcgaDqLogb6Btueq/wH/E+ixGxoHxYjqaGyhBTvXpJ0ki+xfW5eqcpXdcIrY8w
sGY4W+jrjeaPtw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:13 2025 by rpki-client