Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: HvCT/v2NAvaAQqilvQv7m3KGmnaWpgu3y64FfJbslcU=
Subject key identifier: 09:0F:DB:D8:89:53:95:FE:2E:2B:D1:29:FC:B2:EA:A4:55:4E:74:02
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019A706E2C9BEB67C818BDD6D1923FA18EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: RXiKX4t9Xev1TkfxDyvuLp6vpHDStoO6/foNnrRK23Y=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2c:9b:eb:67:c8:18:bd:d6:d1:92:3f:a1:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=090fdbd8895395fe2e2bd129fcb2eaa4554e7402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:a6:01:3b:71:ea:e2:d6:11:a4:e0:da:9c:
ca:86:0e:4a:2e:1a:64:97:5a:a8:42:0b:3a:00:83:
12:2d:52:a2:bc:51:62:a2:df:de:30:10:b0:41:b0:
7a:01:f1:cf:82:77:8a:39:f9:e2:a9:91:31:93:c2:
44:56:2f:1e:10:89:d5:a8:e3:a9:97:b3:2e:2b:31:
43:8d:87:1f:25:ca:ca:39:d5:bf:59:d3:56:a1:3b:
61:9e:25:d7:96:bf:10:61:f3:f8:a4:7f:c1:ec:8a:
ac:84:7e:20:3b:64:8d:64:b4:34:d1:14:1e:19:e9:
af:59:38:34:4e:8e:e8:bb:a2:bf:58:1c:0b:02:84:
e4:94:74:c2:a7:95:09:ca:70:c6:11:8a:2b:b2:71:
8d:83:eb:63:f1:8a:5f:2a:2b:df:6e:b4:e9:61:df:
bc:56:c8:3d:1c:62:db:fb:db:7c:f6:2d:e4:ec:63:
b2:c9:dc:d2:22:43:54:b9:d5:90:f0:9b:8d:d7:8e:
61:d1:56:8e:61:58:79:29:d9:80:87:0f:14:2b:02:
e3:58:5a:28:d5:a8:0a:df:79:af:c6:ab:9b:28:1c:
95:6e:31:6c:ae:bb:dd:01:1d:ca:1d:ae:34:30:7a:
9d:d4:09:6c:f2:3f:ee:f7:dd:12:dd:b2:0a:d3:0f:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:DB:D8:89:53:95:FE:2E:2B:D1:29:FC:B2:EA:A4:55:4E:74:02
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:96:31:21:a5:53:bd:43:1c:cb:2a:da:4a:72:59:fd:d8:49:
dc:d9:cb:bd:70:b2:c2:66:1b:31:66:da:19:98:32:0d:b1:60:
50:35:7d:65:2a:e3:aa:53:3f:43:1d:86:af:5c:66:eb:01:33:
8b:ab:ec:f6:8d:fb:49:af:cd:13:e3:2b:de:aa:6f:b6:26:bb:
9e:3d:0a:21:51:32:72:1b:39:1c:f3:62:97:f6:b2:7a:b9:59:
94:24:89:33:93:89:b6:3d:bb:06:25:25:55:35:54:24:e8:89:
49:dd:c8:41:e2:40:a5:70:1d:43:df:df:59:91:24:3c:bf:a5:
1c:a2:31:c2:f3:b1:80:45:1b:4f:7c:97:be:85:9e:f7:db:8a:
09:51:9e:fe:e1:a8:f7:da:59:41:a8:fc:20:8b:a5:68:33:27:
2c:da:5c:2c:50:0e:1d:23:12:4c:26:04:0a:27:ee:41:fd:7c:
03:5b:1b:9a:f4:15:8d:eb:bd:48:e1:a2:e7:ec:d3:9f:9b:57:
02:bd:0d:79:71:b9:ad:58:bc:91:47:d3:d0:55:0b:25:0b:43:
9c:6c:50:54:d4:dc:07:df:c9:a5:f5:99:68:6e:d6:38:c5:5f:
bc:05:52:5e:77:39:e6:8c:21:b0:1e:d8:51:f6:39:5e:4b:90:
65:bb:92:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbiyb62fIGL3W0ZI/oY6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3
NWFkNzIwHhcNMjUxMTExMDEwMDU5WhcNMjUxMTEyMDEwMDU5WjAzMTEwLwYDVQQD
EygwOTBmZGJkODg5NTM5NWZlMmUyYmQxMjlmY2IyZWFhNDU1NGU3NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q6mATtx6uLWEaTg2pzKhg5KLhpk
l1qoQgs6AIMSLVKivFFiot/eMBCwQbB6AfHPgneKOfniqZExk8JEVi8eEInVqOOp
l7MuKzFDjYcfJcrKOdW/WdNWoTthniXXlr8QYfP4pH/B7IqshH4gO2SNZLQ00RQe
GemvWTg0To7ou6K/WBwLAoTklHTCp5UJynDGEYorsnGNg+tj8YpfKivfbrTpYd+8
Vsg9HGLb+9t89i3k7GOyydzSIkNUudWQ8JuN145h0VaOYVh5KdmAhw8UKwLjWFoo
1agK33mvxqubKByVbjFsrrvdAR3KHa40MHqd1Als8j/u990S3bIK0w9YAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkP29iJU5X+LivRKfyy6qRVTnQCMB8GA1UdIwQY
MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt
NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh
LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpYxIaVT
vUMcyyraSnJZ/dhJ3NnLvXCywmYbMWbaGZgyDbFgUDV9ZSrjqlM/Qx2Gr1xm6wEz
i6vs9o37Sa/NE+Mr3qpvtia7nj0KIVEychs5HPNil/ayerlZlCSJM5OJtj27BiUl
VTVUJOiJSd3IQeJApXAdQ9/fWZEkPL+lHKIxwvOxgEUbT3yXvoWe99uKCVGe/uGo
99pZQaj8IIulaDMnLNpcLFAOHSMSTCYECifuQf18A1sbmvQVjeu9SOGi5+zTn5tX
Ar0NeXG5rVi8kUfT0FULJQtDnGxQVNTcB9/JpfWZaG7WOMVfvAVSXnc55owhsB7Y
UfY5XkuQZbuS3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:37 2025 by rpki-client