Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: 7L0ZvTSxN109oYbNf1tBUsdBZVAPAl0iy+9rKjdtHhA=
Subject key identifier: 46:77:15:A0:C0:11:89:ED:E8:15:B0:9E:A8:2C:0E:03:9B:CF:2B:EB
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019A725CD4B4A7EC327D85CB7C6ED1F666EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: D2yl3VG2BYNi4QPGfeJ7H5hre5iwU85MRlsgXQvo3GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d4:b4:a7:ec:32:7d:85:cb:7c:6e:d1:f6:66:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=467715a0c01189ede815b09ea82c0e039bcf2beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:72:23:74:85:c9:aa:a6:d6:cb:a3:98:17:
af:ce:3f:eb:bc:f9:89:f5:16:e0:78:47:0e:05:60:
05:50:55:9d:11:2c:58:e7:40:3f:b5:2f:22:b2:22:
c5:cf:5a:d4:fb:6d:7f:9a:4f:de:c1:b7:28:10:31:
6e:4f:e7:92:00:de:23:1b:c7:b9:f9:ec:5e:9d:d3:
e8:62:34:9b:77:35:62:59:df:b9:2b:91:90:db:9a:
23:98:3e:d6:8d:c4:a7:77:00:2c:7e:93:f2:48:eb:
30:3b:a5:64:e6:13:6e:d6:66:8c:f8:2b:cd:7e:ec:
2e:7b:9b:c4:02:c6:8a:b4:06:87:b1:c3:35:d7:62:
89:70:72:5c:7d:18:af:86:8b:58:b9:a6:10:1e:1a:
53:60:d3:2f:0b:77:3d:6b:75:89:4b:38:2c:cd:69:
2a:d0:8c:a6:07:99:c1:71:62:fb:71:1d:60:4f:55:
4c:4b:5f:f3:04:22:93:35:ed:49:9c:db:0a:cd:65:
59:4f:eb:23:0e:2b:61:37:74:35:4b:1e:1b:89:3d:
ed:2f:72:cf:01:a7:30:65:33:6a:29:3e:4c:e8:77:
65:83:fe:18:33:f5:12:fc:96:e6:b7:04:5b:96:4c:
34:d1:8f:00:f1:84:aa:49:4d:4e:8b:e4:e6:06:59:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:15:A0:C0:11:89:ED:E8:15:B0:9E:A8:2C:0E:03:9B:CF:2B:EB
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9d:42:38:5f:42:d1:8f:db:4c:e4:58:b7:0f:32:ee:c8:45:
68:c6:2e:9f:fa:f9:9a:86:66:c0:36:a2:ca:3e:bd:62:76:6a:
f0:75:4b:19:de:d7:44:2a:24:3d:a0:38:5b:0b:62:ad:75:89:
4f:57:28:ec:20:6f:29:a5:d2:a0:de:98:a7:f8:c5:20:2e:e5:
ac:d3:6b:6d:ad:23:af:ab:4c:81:31:80:18:cd:81:da:3d:37:
19:98:b1:81:e8:76:bf:51:66:23:90:c3:e7:26:29:0d:1e:8c:
4a:6d:aa:e0:66:68:34:50:4d:f6:d7:db:90:6b:9e:31:4b:22:
02:61:85:f9:dc:06:45:b4:2d:62:fa:46:c9:ca:03:29:31:2b:
1f:64:02:6b:be:4a:bd:18:aa:1c:3f:7b:e2:63:98:3b:63:51:
01:d8:a2:ed:2e:11:3b:4c:41:ee:ab:ca:e8:95:f1:bf:1a:f5:
3a:eb:47:26:eb:cf:fb:5c:2b:67:2c:6c:4f:2f:64:2b:47:02:
65:93:f2:8e:e2:cd:b6:4c:42:71:52:1d:f1:3c:d5:0d:a4:33:
37:c6:3c:94:36:e1:9e:c7:b6:ee:f4:0d:4f:99:73:70:3c:04:
e9:ef:ae:25:ec:48:fc:96:87:03:20:aa:8f:0f:7a:3d:5b:3f:
1a:2e:45:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNS0p+wyfYXLfG7R9mbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjYwMjVkOTM5ZTBjN2IxY2Y0NmMwMjE5ZWNmYTI1YTE5
NTM4MjUwHhcNMjUxMTExMTAwMTE3WhcNMjUxMTEyMTAwMTE3WjAzMTEwLwYDVQQD
Eyg0Njc3MTVhMGMwMTE4OWVkZTgxNWIwOWVhODJjMGUwMzliY2YyYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFyI3SFyaqm1sujmBevzj/rvPmJ
9RbgeEcOBWAFUFWdESxY50A/tS8isiLFz1rU+21/mk/ewbcoEDFuT+eSAN4jG8e5
+exendPoYjSbdzViWd+5K5GQ25ojmD7WjcSndwAsfpPySOswO6Vk5hNu1maM+CvN
fuwue5vEAsaKtAaHscM112KJcHJcfRivhotYuaYQHhpTYNMvC3c9a3WJSzgszWkq
0IymB5nBcWL7cR1gT1VMS1/zBCKTNe1JnNsKzWVZT+sjDithN3Q1Sx4biT3tL3LP
AacwZTNqKT5M6Hdlg/4YM/US/JbmtwRblkw00Y8A8YSqSU1Oi+TmBlldowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ3FaDAEYnt6BWwnqgsDgObzyvrMB8GA1UdIwQY
MBaAFBdmAl2Tngx7HPRsAhns+iWhlTglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1Yjct
ZTI4MzUyZTc5ZjdkLzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1YjctZTI4MzUyZTc5Zjdk
LzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ1COF9C
0Y/bTORYtw8y7shFaMYun/r5moZmwDaiyj69YnZq8HVLGd7XRCokPaA4WwtirXWJ
T1co7CBvKaXSoN6Yp/jFIC7lrNNrba0jr6tMgTGAGM2B2j03GZixgeh2v1FmI5DD
5yYpDR6MSm2q4GZoNFBN9tfbkGueMUsiAmGF+dwGRbQtYvpGycoDKTErH2QCa75K
vRiqHD974mOYO2NRAdii7S4RO0xB7qvK6JXxvxr1OutHJuvP+1wrZyxsTy9kK0cC
ZZPyjuLNtkxCcVId8TzVDaQzN8Y8lDbhnse27vQNT5lzcDwE6e+uJexI/JaHAyCq
jw96PVs/Gi5F1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client