Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: p/2Gkkm4tfut6iia+PCudTHZQwvAUt3XRfxLcW2yvyk=
Subject key identifier: A6:B4:8F:FC:D9:0C:CE:67:BE:82:CC:63:8E:4D:2C:B5:04:A1:AA:83
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 019A71B8744114AB05B632680F763A21D2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: 8AgLpzaDL0h1dumVlt3QNUC0b8g.roa (hash: dFMCTzeLz+/t3jrKpnjSyGNljO948X6d0ELCXJMhuAE=)
2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: 76Y3n0NiWECbUUpzb/jPsnP/++YP2mQ+Jz5oStcGyzE=)
4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:74:41:14:ab:05:b6:32:68:0f:76:3a:21:d2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=a6b48ffcd90cce67be82cc638e4d2cb504a1aa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:00:aa:97:08:94:55:eb:d1:e4:ff:2c:5c:
75:14:cc:b0:b0:bc:17:3b:9e:20:16:e9:0c:7d:fc:
ae:e5:e0:49:e6:b3:d2:0e:39:62:7d:e8:ac:b3:70:
4b:36:85:c0:7a:0a:7d:37:a7:80:c6:ee:25:a8:12:
a1:33:5f:99:e9:c7:d9:c4:e2:03:64:b0:a4:3a:49:
93:7a:19:73:61:8a:d9:f5:49:04:a3:f3:4c:3f:46:
fe:a1:b8:8f:e7:59:43:15:9a:14:6a:dc:39:13:ab:
03:82:5d:57:68:d6:ec:1f:03:92:b7:89:92:0b:55:
11:2f:f7:2f:58:01:f9:d0:14:6f:c2:1f:4e:0b:cd:
48:ee:a5:7c:42:4d:8d:c7:a5:3d:94:e1:3d:fa:ec:
aa:5d:3a:fe:0b:d5:9b:a6:36:00:e7:51:b4:cf:90:
42:7f:16:44:90:3a:ef:c4:26:0c:ef:bd:23:67:ac:
b1:d2:d1:b5:d4:98:b0:b6:20:b4:a6:f2:6f:14:e4:
1a:b3:ed:13:45:02:67:ce:b7:7b:66:03:c0:ad:85:
98:29:30:01:6f:9d:b5:3d:d7:a6:f8:85:1d:fd:82:
02:b7:e1:36:c8:b0:ec:05:e7:3e:dc:70:53:0f:aa:
b5:97:72:23:bc:e5:c7:3b:ea:3f:45:54:ff:b4:22:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:8F:FC:D9:0C:CE:67:BE:82:CC:63:8E:4D:2C:B5:04:A1:AA:83
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d7:d9:55:17:ac:3a:85:7c:70:0d:e7:dd:53:00:3d:64:1d:
93:dd:e0:c3:cd:a3:c6:68:29:a0:1a:75:8f:93:21:05:a7:a8:
52:f4:34:50:1f:62:55:2f:db:ff:a8:49:5e:13:22:33:74:32:
4c:4e:22:58:5d:66:ef:b4:cb:71:c5:9b:ea:97:6f:e7:c4:49:
ba:53:8b:99:66:4d:fa:7d:7f:3f:dc:7e:6d:a1:58:29:5a:41:
8a:eb:1d:06:4b:46:4b:82:f1:e8:cf:f9:b5:6f:18:95:06:dc:
cd:d7:03:7c:4d:4b:6c:a7:b2:20:cb:bc:e8:fa:d8:3d:dc:e2:
7d:ae:97:3c:75:17:4e:3d:c8:02:e4:20:ba:f0:f4:ce:7e:63:
bb:b9:a7:e6:83:72:7d:94:b6:09:df:ae:6b:1e:ca:2b:13:b1:
5e:a6:63:18:68:99:c7:c4:33:4f:b3:76:f4:07:de:c5:c4:b0:
1e:b4:50:94:74:cc:5c:e0:84:f5:1e:99:9d:97:28:f2:61:eb:
cc:98:b1:e6:56:72:ae:6f:9d:04:bb:04:30:b3:24:03:fb:28:
2c:31:29:48:76:d6:30:20:df:c1:18:b6:b1:bd:84:6e:80:e0:
d6:b0:64:05:a8:2e:2a:0a:f5:93:61:6e:cb:6f:de:48:af:7a:
07:50:9b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHRBFKsFtjJoD3Y6IdK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy
ZDE3M2YwHhcNMjUxMTExMDcwMTQ1WhcNMjUxMTEyMDcwMTQ1WjAzMTEwLwYDVQQD
EyhhNmI0OGZmY2Q5MGNjZTY3YmU4MmNjNjM4ZTRkMmNiNTA0YTFhYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXcAqpcIlFXr0eT/LFx1FMywsLwX
O54gFukMffyu5eBJ5rPSDjlifeiss3BLNoXAegp9N6eAxu4lqBKhM1+Z6cfZxOID
ZLCkOkmTehlzYYrZ9UkEo/NMP0b+obiP51lDFZoUatw5E6sDgl1XaNbsHwOSt4mS
C1URL/cvWAH50BRvwh9OC81I7qV8Qk2Nx6U9lOE9+uyqXTr+C9WbpjYA51G0z5BC
fxZEkDrvxCYM770jZ6yx0tG11JiwtiC0pvJvFOQas+0TRQJnzrd7ZgPArYWYKTAB
b521Pdem+IUd/YICt+E2yLDsBec+3HBTD6q1l3IjvOXHO+o/RVT/tCLwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa0j/zZDM5nvoLMY45NLLUEoaqDMB8GA1UdIwQY
MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt
ZTVmOThkZGFmYzk4LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4
LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtfZVRes
OoV8cA3n3VMAPWQdk93gw82jxmgpoBp1j5MhBaeoUvQ0UB9iVS/b/6hJXhMiM3Qy
TE4iWF1m77TLccWb6pdv58RJulOLmWZN+n1/P9x+baFYKVpBiusdBktGS4Lx6M/5
tW8YlQbczdcDfE1LbKeyIMu86PrYPdzifa6XPHUXTj3IAuQguvD0zn5ju7mn5oNy
fZS2Cd+uax7KKxOxXqZjGGiZx8QzT7N29AfexcSwHrRQlHTMXOCE9R6ZnZco8mHr
zJix5lZyrm+dBLsEMLMkA/soLDEpSHbWMCDfwRi2sb2EboDg1rBkBaguKgr1k2Fu
y2/eSK96B1Cbag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:27 2025 by rpki-client