Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: H+64Zq5m24GGxKSqJa2urEf9weiFRHQKHCH3IG7aMEg=
Subject key identifier: 86:0E:7A:07:0B:22:86:82:79:A1:AA:44:C5:FC:85:46:0E:F5:DE:9E
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 019A2365902C15BE391CCBF7564DE2009A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 1704
Signing time: Mon 27 Oct 2025 02:00:49 +0000
Manifest this update: Mon 27 Oct 2025 02:00:49 +0000
Manifest next update: Tue 28 Oct 2025 02:00:49 +0000
Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: IQtMsnux8/ndWjD5CCsp+zA7RP5e9raWGu3X40/HI70=)
2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:90:2c:15:be:39:1c:cb:f7:56:4d:e2:00:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Oct 27 02:00:49 2025 GMT
Not After : Oct 28 02:00:49 2025 GMT
Subject: CN=860e7a070b22868279a1aa44c5fc85460ef5de9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:91:7f:af:d0:84:4e:04:50:1c:10:3b:1d:
e6:0e:36:be:fd:8a:3b:34:4b:02:02:f8:ff:ab:70:
37:a2:71:e4:41:36:34:74:bc:4b:24:f1:b5:e7:5a:
08:b4:2c:95:91:a4:b0:1d:a5:4a:1a:9a:eb:61:46:
80:bb:c6:e0:06:1b:62:d9:93:ca:82:37:28:27:2d:
5a:6a:04:62:1b:3e:75:8c:11:aa:3a:7b:5b:39:0d:
29:cf:9e:50:74:8e:28:43:e7:31:89:5d:92:41:78:
52:61:b2:e9:9c:33:e4:63:57:ef:01:cc:6e:32:30:
5c:e9:1a:ad:99:7a:d6:b0:bf:b5:89:ca:76:dc:e1:
e4:aa:59:c1:aa:9e:d0:9e:f7:db:c8:3f:25:d6:5a:
74:e7:68:6f:a7:3f:1f:96:27:f5:7b:a8:ff:d5:94:
ca:b5:d2:6c:de:74:31:45:94:bf:97:a0:20:62:b4:
f5:f1:84:60:5d:12:72:16:7a:79:b9:84:3f:88:8e:
26:81:3e:35:93:0e:67:f3:d3:e2:f3:52:14:ed:ba:
1e:9a:9b:c0:bd:a5:1d:df:62:71:16:ab:a7:c0:45:
b9:51:07:b4:42:b8:2b:12:07:b7:eb:3d:36:85:48:
29:6e:a1:de:20:d1:69:fa:09:02:77:56:bc:e9:d2:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:7A:07:0B:22:86:82:79:A1:AA:44:C5:FC:85:46:0E:F5:DE:9E
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:e1:b1:fb:10:78:00:68:47:78:ee:99:5e:ce:75:fc:9e:
aa:03:2e:3e:00:14:8d:b9:d9:41:22:02:10:0b:21:3a:81:72:
22:6c:e9:ff:c0:bb:78:70:a2:22:f9:ed:55:bd:34:1b:28:4c:
33:07:ee:04:99:a6:78:88:0a:66:75:97:c1:31:9b:7c:a5:f5:
0e:98:a3:de:52:4e:aa:2c:bf:6a:c9:06:51:67:79:2a:a9:52:
0b:03:31:79:58:69:58:8e:40:16:5e:d3:c1:a4:7a:42:30:5f:
89:5d:7b:0d:59:69:cd:e2:68:d9:08:1f:5e:de:f5:44:fe:c4:
20:89:4c:b0:f9:00:f2:39:2b:1b:3c:88:15:f7:10:07:7c:17:
f9:31:2e:82:58:54:53:80:32:db:5b:86:58:4c:ab:39:fc:87:
f2:96:74:ee:88:61:fb:3c:81:cb:f7:cd:3f:81:be:d3:d6:0d:
1c:21:38:c1:74:f1:37:dd:41:9f:ce:b4:5b:53:67:3e:06:a7:
f3:dc:e8:6e:ec:a0:34:22:ca:d2:bb:8a:2c:a8:45:44:23:7b:
4f:81:db:89:7a:30:17:7f:a5:6f:84:28:6d:f1:cf:dc:08:89:
10:a3:84:5a:24:de:c1:3d:12:c5:fa:ae:6f:24:47:f5:60:c5:
2e:9c:61:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZZAsFb45HMv3Vk3iAJpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5
Yjg2ZDUwHhcNMjUxMDI3MDIwMDQ5WhcNMjUxMDI4MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg4NjBlN2EwNzBiMjI4NjgyNzlhMWFhNDRjNWZjODU0NjBlZjVkZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCCRf6/QhE4EUBwQOx3mDja+/Yo7
NEsCAvj/q3A3onHkQTY0dLxLJPG151oItCyVkaSwHaVKGprrYUaAu8bgBhti2ZPK
gjcoJy1aagRiGz51jBGqOntbOQ0pz55QdI4oQ+cxiV2SQXhSYbLpnDPkY1fvAcxu
MjBc6RqtmXrWsL+1icp23OHkqlnBqp7QnvfbyD8l1lp052hvpz8flif1e6j/1ZTK
tdJs3nQxRZS/l6AgYrT18YRgXRJyFnp5uYQ/iI4mgT41kw5n89Pi81IU7boempvA
vaUd32JxFqunwEW5UQe0QrgrEge36z02hUgpbqHeINFp+gkCd1a86dLSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYOegcLIoaCeaGqRMX8hUYO9d6eMB8GA1UdIwQY
MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt
ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw
LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUfhsfsQ
eABoR3jumV7OdfyeqgMuPgAUjbnZQSICEAshOoFyImzp/8C7eHCiIvntVb00GyhM
MwfuBJmmeIgKZnWXwTGbfKX1Dpij3lJOqiy/askGUWd5KqlSCwMxeVhpWI5AFl7T
waR6QjBfiV17DVlpzeJo2QgfXt71RP7EIIlMsPkA8jkrGzyIFfcQB3wX+TEuglhU
U4Ay21uGWEyrOfyH8pZ07ohh+zyBy/fNP4G+09YNHCE4wXTxN91Bn860W1NnPgan
89zobuygNCLK0ruKLKhFRCN7T4HbiXowF3+lb4QobfHP3AiJEKOEWiTewT0Sxfqu
byRH9WDFLpxhcg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:49:40 2025 by rpki-client