Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: wqiNdrHpgUlIejBrDUl3aUcS09Li6MxRT8q4pmJNk/I=
Subject key identifier: 4D:84:92:25:6B:E8:0A:A7:79:28:28:A8:A7:8E:2C:49:7A:DF:7C:74
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 019A71135166A010A260740D1D8811DE7CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0D50
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: 5sCkK7bklit8UCUa80RZqIi-t9k.roa (hash: x447DPcTaj4M634Ku+wuq5YFVtP2ChxFRDLcvpSmPLg=)
2: B2JmCPoyhnai-DrPu98QS4-q4eY.roa (hash: woSQjHInZQrl0IFraZgxQZSnFc0QedADaWjQdsYiLbY=)
3: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: 3sqm1iejSNGpku9IHNUievVdk1N5A9yQ918naz6tovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:51:66:a0:10:a2:60:74:0d:1d:88:11:de:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=4d8492256be80aa7792828a8a78e2c497adf7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:d0:0c:52:9b:c1:58:bf:8d:eb:1c:4b:6e:
ef:36:19:f4:2c:6b:5c:dc:4f:5e:d9:d7:4f:5a:95:
cd:49:2b:a8:72:18:5c:71:6b:03:f1:cb:80:92:4e:
58:24:75:06:b7:26:8c:01:7e:40:02:b9:79:7b:8e:
15:fa:83:e7:c4:89:d5:9f:7b:23:2b:b1:ef:0b:1a:
fe:fe:1f:9a:64:38:a8:31:f6:bc:56:bd:30:bb:fe:
0c:2b:f6:6b:12:ec:47:55:f2:74:9b:9d:e3:58:df:
1a:3c:e4:fa:17:98:95:90:22:ea:e5:9d:51:a0:86:
0f:7c:4c:6f:fb:14:6f:26:96:fc:3a:74:71:6e:56:
b0:26:30:44:a8:69:98:aa:d4:78:79:20:06:41:24:
3a:d8:08:ff:ea:c6:8b:d6:d3:cd:08:8f:27:b6:3d:
4c:1a:e9:d8:3b:41:97:4f:69:ef:1f:bc:c4:60:36:
3a:fd:c3:31:5b:56:7a:fb:07:83:84:97:82:66:44:
a9:51:e3:ec:e7:38:55:da:84:c6:e4:d9:d3:16:6f:
d4:90:88:5a:dc:c5:65:1f:b7:d2:a9:61:ed:e4:2b:
25:d2:3f:cf:fa:61:f5:15:9f:59:c3:20:e3:fb:ac:
ed:9e:e6:40:b4:4d:58:cd:f0:29:44:8b:c4:3c:fa:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:92:25:6B:E8:0A:A7:79:28:28:A8:A7:8E:2C:49:7A:DF:7C:74
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:30:56:3c:d3:25:b2:8c:19:83:e4:4d:5e:70:bf:81:38:50:
f5:97:34:41:a7:ee:5c:6f:22:88:f2:d0:c4:65:82:b7:ea:43:
b5:e3:22:ce:e9:f5:e5:b6:e7:43:c8:8e:b9:50:35:79:2f:c4:
dd:05:4d:c7:51:18:3d:53:1d:cb:f3:0c:3e:c1:bc:aa:d7:fc:
8f:fb:dc:69:2f:36:80:6b:7a:9f:fa:35:2b:25:3d:2c:f9:4e:
42:56:06:26:45:14:3d:09:ee:62:1a:39:f5:13:9e:49:18:7d:
f8:15:47:c7:15:e6:be:c0:46:d4:61:15:aa:04:1e:82:85:ff:
1b:c2:77:1e:ea:27:eb:ad:fe:73:ba:95:92:66:21:05:ee:ec:
c4:3b:2c:4a:55:99:e1:a0:8d:bf:87:39:b7:9c:96:bb:a0:7f:
f2:1f:c1:5c:c8:c8:8f:ab:9f:8e:d7:37:0d:45:fd:0c:25:ac:
4e:54:f3:be:f8:de:b9:e0:67:f4:ef:d2:dc:d8:90:60:e7:b5:
cd:33:e1:5c:dc:d6:e1:45:c9:ec:9e:58:ef:2a:e5:50:59:3b:
e2:f5:c0:f5:b2:2f:c3:65:3d:45:16:8c:9d:63:2d:c7:64:39:
5c:6f:d6:13:c4:8e:ff:4f:d4:23:96:93:af:d2:6c:d6:48:e4:
77:89:3e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1FmoBCiYHQNHYgR3ny2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl
NDU5ZTYwHhcNMjUxMTExMDQwMTIyWhcNMjUxMTEyMDQwMTIyWjAzMTEwLwYDVQQD
Eyg0ZDg0OTIyNTZiZTgwYWE3NzkyODI4YThhNzhlMmM0OTdhZGY3Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mzQDFKbwVi/jescS27vNhn0LGtc
3E9e2ddPWpXNSSuochhccWsD8cuAkk5YJHUGtyaMAX5AArl5e44V+oPnxInVn3sj
K7HvCxr+/h+aZDioMfa8Vr0wu/4MK/ZrEuxHVfJ0m53jWN8aPOT6F5iVkCLq5Z1R
oIYPfExv+xRvJpb8OnRxblawJjBEqGmYqtR4eSAGQSQ62Aj/6saL1tPNCI8ntj1M
GunYO0GXT2nvH7zEYDY6/cMxW1Z6+weDhJeCZkSpUePs5zhV2oTG5NnTFm/UkIha
3MVlH7fSqWHt5Csl0j/P+mH1FZ9ZwyDj+6ztnuZAtE1YzfApRIvEPPpN3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2EkiVr6AqneSgoqKeOLEl633x0MB8GA1UdIwQY
MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt
YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl
LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTBWPNMl
sowZg+RNXnC/gThQ9Zc0QafuXG8iiPLQxGWCt+pDteMizun15bbnQ8iOuVA1eS/E
3QVNx1EYPVMdy/MMPsG8qtf8j/vcaS82gGt6n/o1KyU9LPlOQlYGJkUUPQnuYho5
9ROeSRh9+BVHxxXmvsBG1GEVqgQegoX/G8J3Huon663+c7qVkmYhBe7sxDssSlWZ
4aCNv4c5t5yWu6B/8h/BXMjIj6ufjtc3DUX9DCWsTlTzvvjeueBn9O/S3NiQYOe1
zTPhXNzW4UXJ7J5Y7yrlUFk74vXA9bIvw2U9RRaMnWMtx2Q5XG/WE8SO/0/UI5aT
r9Js1kjkd4k+Cg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client