Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: A47Rlo1OBgGldkwmMAr5KKFg2FmHDJpFTh9nRgqqaDg=
Subject key identifier: DD:65:62:2A:F6:DE:E0:30:86:42:4C:A0:FF:07:39:56:43:26:24:7B
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019A73014266FB981C8FB095AA6EAADAC6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:53 +0000
Manifest this update: Tue 11 Nov 2025 13:00:53 +0000
Manifest next update: Wed 12 Nov 2025 13:00:53 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: 3Wk+RaNVMbSH5aMye3vxW28N1nrDTAl3nHahExIe00E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:42:66:fb:98:1c:8f:b0:95:aa:6e:aa:da:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Nov 11 13:00:53 2025 GMT
Not After : Nov 12 13:00:53 2025 GMT
Subject: CN=dd65622af6dee03086424ca0ff0739564326247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:c1:2c:b8:49:15:85:38:7a:6a:3c:22:86:
89:38:f6:d7:f9:f1:e1:26:f6:67:2b:25:d1:94:55:
97:53:84:91:42:db:1b:ed:ff:3f:f5:4b:7c:ac:d7:
bd:c9:d2:ea:a4:89:e4:65:bc:48:ab:86:93:af:e1:
14:5f:69:1e:e6:f5:7f:75:ec:b3:1c:c2:41:a2:2c:
67:e5:56:26:9e:c9:29:54:c6:8a:bb:db:54:26:60:
66:ab:b2:47:d9:37:d5:71:84:ea:08:cb:5b:fb:b7:
4b:db:e0:7b:9d:d5:89:6e:6e:c8:31:e4:5c:a7:80:
e6:32:43:c1:77:af:51:48:64:78:8d:cd:4a:dc:81:
55:e5:d8:af:02:35:8f:a6:72:ef:4c:d5:4d:09:bc:
1e:c9:cb:7d:8f:60:21:5e:2f:d2:28:73:2d:62:d2:
3b:3b:91:d2:9a:0e:17:6e:c2:71:31:0a:6c:c1:63:
e1:26:3f:19:6e:eb:ae:66:51:6e:9f:c5:53:a3:20:
41:22:0b:b7:a5:f7:1a:a0:70:b9:63:35:3d:b3:69:
86:18:1d:93:15:02:26:fa:fd:55:72:91:f4:2c:31:
64:5f:d9:14:c1:04:a4:d8:4e:9c:54:cb:b0:a9:e5:
f5:f2:be:31:c0:c6:68:fc:8b:73:c5:71:dc:a3:ee:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:62:2A:F6:DE:E0:30:86:42:4C:A0:FF:07:39:56:43:26:24:7B
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e8:33:d8:33:ed:c3:06:40:ef:b2:81:e2:e3:bc:d3:12:79:
50:cc:22:18:e2:4f:26:cb:fc:24:71:7b:3c:6d:be:fa:5c:78:
d7:e1:0b:5b:17:1c:5b:8c:6f:de:3c:6a:0b:bd:94:94:c5:62:
8e:13:4c:dd:35:30:8b:85:e6:a3:ea:fa:b4:05:a2:60:41:89:
db:b5:31:b4:a0:71:c4:16:68:4e:36:64:53:e8:29:09:cc:3e:
2b:07:a9:cd:ab:f5:e4:d2:08:d1:ae:7c:99:9e:83:38:36:04:
3b:60:4a:f2:c1:7f:d9:91:c6:74:60:b3:a4:36:33:ad:f6:7d:
00:55:d5:12:93:49:d2:aa:57:43:09:78:93:0a:a6:ac:45:3a:
12:2f:c4:57:cc:14:94:43:9f:f9:a4:97:50:50:42:51:34:6f:
0b:d2:f6:13:7b:df:b4:c8:c4:86:8f:e2:08:da:c4:6d:d4:7d:
ad:5b:09:d5:dd:d7:4f:9b:70:25:37:88:03:4a:29:8d:ee:72:
f0:08:d9:84:69:be:d7:ce:4f:8a:63:14:37:0b:3b:dd:7b:81:
08:b3:0a:23:41:33:eb:7b:b2:70:d5:fb:c0:b3:73:18:07:96:
c2:04:f0:8a:46:1a:9f:a3:df:9a:5d:e9:32:9a:7d:b8:1a:b5:
51:3f:87:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAUJm+5gcj7CVqm6q2sbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUxMTExMTMwMDUzWhcNMjUxMTEyMTMwMDUzWjAzMTEwLwYDVQQD
EyhkZDY1NjIyYWY2ZGVlMDMwODY0MjRjYTBmZjA3Mzk1NjQzMjYyNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjvBLLhJFYU4emo8IoaJOPbX+fHh
JvZnKyXRlFWXU4SRQtsb7f8/9Ut8rNe9ydLqpInkZbxIq4aTr+EUX2ke5vV/deyz
HMJBoixn5VYmnskpVMaKu9tUJmBmq7JH2TfVcYTqCMtb+7dL2+B7ndWJbm7IMeRc
p4DmMkPBd69RSGR4jc1K3IFV5divAjWPpnLvTNVNCbweyct9j2AhXi/SKHMtYtI7
O5HSmg4XbsJxMQpswWPhJj8ZbuuuZlFun8VToyBBIgu3pfcaoHC5YzU9s2mGGB2T
FQIm+v1VcpH0LDFkX9kUwQSk2E6cVMuwqeX18r4xwMZo/ItzxXHco+6oQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1lYir23uAwhkJMoP8HOVZDJiR7MB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdugz2DPt
wwZA77KB4uO80xJ5UMwiGOJPJsv8JHF7PG2++lx41+ELWxccW4xv3jxqC72UlMVi
jhNM3TUwi4Xmo+r6tAWiYEGJ27UxtKBxxBZoTjZkU+gpCcw+Kwepzav15NII0a58
mZ6DODYEO2BK8sF/2ZHGdGCzpDYzrfZ9AFXVEpNJ0qpXQwl4kwqmrEU6Ei/EV8wU
lEOf+aSXUFBCUTRvC9L2E3vftMjEho/iCNrEbdR9rVsJ1d3XT5twJTeIA0opje5y
8AjZhGm+185PimMUNws73XuBCLMKI0Ez63uycNX7wLNzGAeWwgTwikYan6Pfml3p
Mpp9uBq1UT+Hxg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:42 2025 by rpki-client