Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File: F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier: QkSr3SgXKufufC0UeUwf7nNDYo0cMJutm3nz3DYbOCc=
Subject key identifier: 6A:23:68:79:50:DA:36:9B:F3:05:CD:7F:2A:1C:75:62:38:A9:22:2E
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer: /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial: 019A7226127BDBFCE09F70D72AB1F4A50B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number: 043F
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: vAK5piokCrfFvDEuNijyCcG6UEivk8fzyT9gLCUMxVA=)
2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:12:7b:db:fc:e0:9f:70:d7:2a:b1:f4:a5:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=6a23687950da369bf305cd7f2a1c756238a9222e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:6d:6d:ab:59:6d:c7:9e:45:26:55:01:50:
f3:ac:25:49:48:92:d8:08:0f:46:a4:05:f0:93:94:
a7:a5:1b:8f:f5:a6:a3:4b:cf:75:04:39:b6:d9:70:
6e:32:f0:4b:a2:71:4b:fb:27:b2:f2:8e:f9:89:35:
df:f0:eb:cb:3d:e4:07:52:67:b0:75:c6:63:38:31:
1c:02:b3:f4:36:fe:8d:45:c4:68:83:38:7a:5f:ec:
99:07:8a:36:64:fa:16:ff:dd:09:70:f5:60:06:ee:
94:c4:25:f7:5a:c6:08:67:cf:7b:01:3a:a7:18:69:
49:09:0b:45:5d:78:e9:06:9c:ea:9a:ab:1d:d9:ce:
37:3c:58:78:75:b1:33:ec:f8:76:39:39:7f:94:c2:
6a:71:ad:2f:58:76:dd:4b:5d:e2:4c:0d:42:73:8f:
20:ef:29:56:8e:7c:ba:72:81:0e:9e:fb:e2:b8:f5:
d0:a4:6e:4e:f4:76:65:23:8f:b1:64:e9:81:cc:c8:
9f:6c:c1:84:f5:84:8a:d6:09:0b:c7:fb:5f:9e:fe:
14:65:9f:de:e4:c1:fd:74:8e:f7:db:50:c3:4b:59:
3c:71:f2:92:9f:f8:7a:4d:91:d8:84:ff:b5:02:a9:
a0:57:ba:29:28:ce:ee:56:e5:52:22:dc:23:18:2a:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:68:79:50:DA:36:9B:F3:05:CD:7F:2A:1C:75:62:38:A9:22:2E
X509v3 Authority Key Identifier:
keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f7:8d:a7:cc:b6:83:f2:ed:a4:ef:39:9a:1d:42:5f:7c:ab:
30:d3:3b:eb:e9:b5:fb:8b:1c:cd:0c:da:ef:51:44:15:f0:36:
0c:1b:28:10:c5:16:c4:4d:ec:b6:ea:6b:f4:1b:4e:ae:73:ea:
ef:ca:1e:69:f6:dc:06:22:34:68:e4:83:07:3b:d5:ad:1c:56:
53:06:f7:f7:8c:1d:f8:e5:92:c4:1d:4c:50:11:77:c2:2a:a7:
25:36:00:5f:15:9d:ab:c0:11:3d:7e:1f:d4:1a:96:cb:b0:56:
70:31:2e:c8:cd:22:73:e0:a7:04:c4:7c:f4:4e:2c:cf:31:ea:
39:f6:b8:af:a8:2a:29:64:a2:ce:9c:3b:22:ca:de:bf:87:30:
ad:96:af:48:49:89:c1:8d:12:92:87:f2:c8:0e:34:56:95:69:
fb:f3:ff:33:b4:a0:35:90:36:6c:11:90:03:c5:2c:eb:45:48:
69:c0:04:ea:c7:c6:3c:57:27:8d:e9:a9:83:c7:78:27:dc:ac:
09:e3:0a:91:36:c7:11:a1:f1:91:c5:8d:05:ae:1a:ba:02:37:
78:e6:93:e3:fc:84:80:28:63:0d:14:3a:eb:d4:28:54:ab:20:
2e:08:d7:55:de:7c:c0:79:cf:96:be:12:06:ef:b9:ff:37:03:
da:8b:32:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhJ72/zgn3DXKrH0pQuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OWViODdiZGMzMjc5M2RiZmVkMTg0YTZmZmJjMTRlZDE1
ZDMyYTQwHhcNMjUxMTExMDkwMTI4WhcNMjUxMTEyMDkwMTI4WjAzMTEwLwYDVQQD
Eyg2YTIzNjg3OTUwZGEzNjliZjMwNWNkN2YyYTFjNzU2MjM4YTkyMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7dtbatZbceeRSZVAVDzrCVJSJLY
CA9GpAXwk5SnpRuP9aajS891BDm22XBuMvBLonFL+yey8o75iTXf8OvLPeQHUmew
dcZjODEcArP0Nv6NRcRogzh6X+yZB4o2ZPoW/90JcPVgBu6UxCX3WsYIZ897ATqn
GGlJCQtFXXjpBpzqmqsd2c43PFh4dbEz7Ph2OTl/lMJqca0vWHbdS13iTA1Cc48g
7ylWjny6coEOnvviuPXQpG5O9HZlI4+xZOmBzMifbMGE9YSK1gkLx/tfnv4UZZ/e
5MH9dI7321DDS1k8cfKSn/h6TZHYhP+1AqmgV7opKM7uVuVSItwjGCr4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGojaHlQ2jab8wXNfyocdWI4qSIuMB8GA1UdIwQY
MBaAFBeeuHvcMnk9v+0YSm/7wU7RXTKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUt
ZWYxNTkxYWZhYTg2LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUtZWYxNTkxYWZhYTg2
LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPeNp8y2
g/LtpO85mh1CX3yrMNM76+m1+4sczQza71FEFfA2DBsoEMUWxE3stupr9BtOrnPq
78oeafbcBiI0aOSDBzvVrRxWUwb394wd+OWSxB1MUBF3wiqnJTYAXxWdq8ARPX4f
1BqWy7BWcDEuyM0ic+CnBMR89E4szzHqOfa4r6gqKWSizpw7Isrev4cwrZavSEmJ
wY0SkofyyA40VpVp+/P/M7SgNZA2bBGQA8Us60VIacAE6sfGPFcnjempg8d4J9ys
CeMKkTbHEaHxkcWNBa4augI3eOaT4/yEgChjDRQ669QoVKsgLgjXVd58wHnPlr4S
Bu+5/zcD2osyNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:45 2025 by rpki-client