Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier: IktKBsS8VDfigiIjB0GuysUvO2Hvir8gWvFAob+URHQ=
Subject key identifier: C6:9D:6D:2C:80:31:72:FF:32:4C:5A:8C:EA:B3:82:A2:70:23:3E:04
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 019A71EE95210CEDAEE4391223CFADC1C8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: FKpXKFUgeQI+cGT0NeFJyiG9Gj8BbHq6QuF05+dkw+k=)
2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:95:21:0c:ed:ae:e4:39:12:23:cf:ad:c1:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=c69d6d2c803172ff324c5a8ceab382a270233e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:eb:b7:3f:e3:10:04:a9:81:0f:f1:03:4e:
02:f5:c5:86:c0:00:f2:c6:aa:68:5c:46:e5:cd:02:
ff:77:8e:03:67:aa:3d:b8:36:60:e4:58:b7:da:c3:
a7:5d:81:dd:e9:c1:8d:26:dc:45:34:41:52:f3:90:
60:7c:d9:e7:d1:0c:51:25:83:5e:53:5b:d7:eb:a8:
fa:16:51:c7:bb:bc:05:06:2b:9e:fd:76:7a:18:f0:
ca:94:2b:32:8f:80:cc:09:6f:01:c4:50:02:9a:f9:
84:d4:67:02:e7:f4:ff:bd:41:c0:6c:f0:2c:b1:cc:
cc:1d:37:f5:be:67:3b:5b:5a:70:84:8d:5e:67:58:
6f:a5:09:78:3e:6c:da:76:cb:4e:3f:06:34:0c:a2:
84:2a:ad:f1:51:c1:c8:1d:a5:4b:17:ec:18:95:10:
81:1e:94:69:fb:ca:f4:d0:c8:bf:c6:e5:00:9c:a2:
55:67:11:66:22:99:fc:4e:a6:79:1b:07:77:97:e3:
3f:63:76:c0:51:9a:df:94:64:b6:61:02:3f:14:43:
5b:ad:7a:60:a0:c3:38:16:b7:b7:79:b9:45:4b:a1:
1e:2f:1f:97:ed:ff:d6:c2:d2:29:4a:77:1c:24:58:
b8:c9:0e:e0:d4:7c:43:96:9b:97:70:d8:4f:ab:1a:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:6D:2C:80:31:72:FF:32:4C:5A:8C:EA:B3:82:A2:70:23:3E:04
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:e0:2e:9b:a0:9d:0f:1e:5b:ee:2a:12:0c:92:03:91:db:
db:18:1d:b1:d4:24:6d:f5:4f:49:8f:9b:d3:68:4f:ee:2f:0b:
a8:b9:a2:22:25:06:7a:94:6f:0c:df:5c:a7:71:ee:c7:93:73:
b2:e7:c9:9e:50:6b:81:c7:e7:52:3a:d3:8a:91:1f:7a:7d:ab:
8c:43:f7:5f:49:45:d0:05:28:48:3d:64:ad:f8:b7:46:a6:32:
44:99:67:9e:61:f9:fa:64:92:5e:ec:cd:2f:58:44:91:e1:95:
f4:91:ab:95:0d:be:cb:5e:41:c1:2b:b3:c3:ec:7f:23:ae:75:
e7:2c:82:91:01:2d:4a:6f:fd:8a:f1:20:19:ce:53:bc:1c:e7:
4f:c4:9c:8a:0e:1a:3f:5c:ad:76:ad:62:fd:5d:56:39:fd:9a:
b8:87:26:0d:47:a0:b6:bc:60:07:55:b6:cd:6c:25:bf:b7:1d:
69:32:de:35:eb:97:60:c4:4d:9e:e7:93:70:94:1b:4e:e5:0b:
00:0f:18:e4:8a:06:d4:83:ce:b0:0a:8d:8e:ad:30:c7:73:a7:
c7:64:26:36:1c:88:01:76:04:20:93:93:98:37:e2:cf:73:80:
e3:d7:af:b3:e3:10:9a:6d:d7:3b:16:be:96:58:80:99:6b:6c:
c7:5a:bb:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pUhDO2u5DkSI8+twcjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZTU2ODQxN2Y1OWEyMTEyOWZiMjQ4N2Y1ZTU3YmMxNzE2
MzFmN2IwHhcNMjUxMTExMDgwMDUyWhcNMjUxMTEyMDgwMDUyWjAzMTEwLwYDVQQD
EyhjNjlkNmQyYzgwMzE3MmZmMzI0YzVhOGNlYWIzODJhMjcwMjMzZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXrtz/jEASpgQ/xA04C9cWGwADy
xqpoXEblzQL/d44DZ6o9uDZg5Fi32sOnXYHd6cGNJtxFNEFS85BgfNnn0QxRJYNe
U1vX66j6FlHHu7wFBiue/XZ6GPDKlCsyj4DMCW8BxFACmvmE1GcC5/T/vUHAbPAs
sczMHTf1vmc7W1pwhI1eZ1hvpQl4PmzadstOPwY0DKKEKq3xUcHIHaVLF+wYlRCB
HpRp+8r00Mi/xuUAnKJVZxFmIpn8TqZ5Gwd3l+M/Y3bAUZrflGS2YQI/FENbrXpg
oMM4Fre3eblFS6EeLx+X7f/WwtIpSnccJFi4yQ7g1HxDlpuXcNhPqxqerwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMadbSyAMXL/MkxajOqzgqJwIz4EMB8GA1UdIwQY
MBaAFBflaEF/WaIRKfskh/Xle8FxYx97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYt
OWUzZTlhYWZiY2U0LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYtOWUzZTlhYWZiY2U0
LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmfgLpug
nQ8eW+4qEgySA5Hb2xgdsdQkbfVPSY+b02hP7i8LqLmiIiUGepRvDN9cp3Hux5Nz
sufJnlBrgcfnUjrTipEfen2rjEP3X0lF0AUoSD1krfi3RqYyRJlnnmH5+mSSXuzN
L1hEkeGV9JGrlQ2+y15BwSuzw+x/I6515yyCkQEtSm/9ivEgGc5TvBznT8Scig4a
P1ytdq1i/V1WOf2auIcmDUegtrxgB1W2zWwlv7cdaTLeNeuXYMRNnueTcJQbTuUL
AA8Y5IoG1IPOsAqNjq0wx3Onx2QmNhyIAXYEIJOTmDfiz3OA49evs+MQmm3XOxa+
lliAmWtsx1q7YQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client