Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: yd5ogs2G+1bGXfuzjCe6k8ulpOJfcJ0eequgS7ShLWI=
Subject key identifier: A3:F8:D1:C7:9B:69:D9:BE:49:05:7D:38:E6:52:5F:F7:F5:09:AD:1F
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019A7225A18C85AB42CEE267D6CCEB2C32BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0F79
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: OKy0L/Me4H2PbSvCJw8SzphRPQXhBoBaAyOY01wiUQ8=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a1:8c:85:ab:42:ce:e2:67:d6:cc:eb:2c:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=a3f8d1c79b69d9be49057d38e6525ff7f509ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:30:8c:04:74:dd:c4:4e:f4:e6:2f:ad:fc:
00:b5:33:55:9c:40:dc:fb:6e:05:51:93:67:0e:16:
ea:a8:3a:f4:aa:d7:fc:ee:a7:e1:4b:62:2d:e9:27:
5e:80:f9:96:23:41:9e:00:3e:63:18:95:57:18:d1:
c2:f0:eb:2a:e3:e4:ba:c0:b9:f5:c3:91:c1:3e:e9:
0d:26:20:28:8d:f3:68:3a:cf:27:ec:32:88:78:49:
37:db:5a:c6:c0:7d:89:dc:58:bb:b7:19:e5:5a:85:
51:c9:51:72:ff:8a:8c:b0:16:c9:74:17:ef:4c:00:
bd:83:e9:de:48:d5:fa:ee:bf:92:21:e9:58:d7:5b:
da:ae:4e:e3:12:51:9a:cd:de:4b:66:15:75:32:14:
93:20:f2:7f:28:37:5f:4e:c2:c1:67:ef:0d:f4:b7:
01:ec:de:7e:0f:99:9c:1a:4d:dd:3d:cc:22:a9:9c:
b4:0d:6b:f0:66:7e:e7:99:91:70:13:26:92:cb:51:
7d:63:b0:88:61:a7:bf:22:4f:28:ec:df:6f:bd:08:
fa:bd:2d:89:80:b2:05:6a:35:de:10:68:be:f0:96:
3d:6d:1c:29:42:29:88:e3:1f:24:e4:a7:53:20:6f:
11:08:02:04:04:09:4c:34:b4:b2:79:a8:f6:d3:7e:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:D1:C7:9B:69:D9:BE:49:05:7D:38:E6:52:5F:F7:F5:09:AD:1F
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ef:08:24:92:d7:2a:06:59:bc:89:b0:ba:c5:ba:99:b5:37:
d0:22:77:94:12:34:cf:b2:32:67:2e:64:89:7c:ca:36:9e:30:
e5:ec:e9:a7:e2:99:08:a4:ca:4f:ab:5f:35:4c:d8:74:e3:0a:
8d:4a:4d:50:d4:bc:35:78:89:0f:47:6b:8a:c3:a6:4b:f2:87:
34:a0:5c:d2:f8:76:e4:2f:55:67:11:91:e8:8a:b6:32:1e:9e:
c2:c6:eb:04:ad:db:a6:95:f8:56:47:bc:ce:fa:52:8e:a4:53:
97:ef:8a:86:04:98:5c:2a:1e:0b:c2:16:21:88:69:d0:66:0f:
ac:74:fa:1d:66:a3:9a:05:3f:19:5b:92:53:e0:0d:cd:cf:4b:
51:1e:98:a8:af:ac:18:b3:44:26:b5:c1:19:e4:28:d4:a9:5b:
41:88:f5:1f:93:af:29:e2:e7:5d:c4:e9:d1:b5:42:90:fc:98:
05:87:54:22:47:8f:0d:24:c9:37:5f:ab:b1:e8:79:08:8c:25:
e1:57:39:d1:1d:f0:35:92:3c:f5:fe:21:f2:d6:5b:4c:be:74:
db:86:d1:9a:1a:c2:69:0e:fe:5e:9c:e9:bd:25:db:d3:9e:56:
55:fe:af:80:6d:37:2a:51:3e:25:c1:71:a9:52:7b:1b:09:81:
db:24:a1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJaGMhatCzuJn1szrLDK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi
NjEwZGYwHhcNMjUxMTExMDkwMDU5WhcNMjUxMTEyMDkwMDU5WjAzMTEwLwYDVQQD
EyhhM2Y4ZDFjNzliNjlkOWJlNDkwNTdkMzhlNjUyNWZmN2Y1MDlhZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4UwjAR03cRO9OYvrfwAtTNVnEDc
+24FUZNnDhbqqDr0qtf87qfhS2It6SdegPmWI0GeAD5jGJVXGNHC8Osq4+S6wLn1
w5HBPukNJiAojfNoOs8n7DKIeEk321rGwH2J3Fi7txnlWoVRyVFy/4qMsBbJdBfv
TAC9g+neSNX67r+SIelY11vark7jElGazd5LZhV1MhSTIPJ/KDdfTsLBZ+8N9LcB
7N5+D5mcGk3dPcwiqZy0DWvwZn7nmZFwEyaSy1F9Y7CIYae/Ik8o7N9vvQj6vS2J
gLIFajXeEGi+8JY9bRwpQimI4x8k5KdTIG8RCAIEBAlMNLSyeaj2037RkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP40cebadm+SQV9OOZSX/f1Ca0fMB8GA1UdIwQY
MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt
MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi
LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu8IJJLX
KgZZvImwusW6mbU30CJ3lBI0z7IyZy5kiXzKNp4w5ezpp+KZCKTKT6tfNUzYdOMK
jUpNUNS8NXiJD0drisOmS/KHNKBc0vh25C9VZxGR6Iq2Mh6ewsbrBK3bppX4Vke8
zvpSjqRTl++KhgSYXCoeC8IWIYhp0GYPrHT6HWajmgU/GVuSU+ANzc9LUR6YqK+s
GLNEJrXBGeQo1KlbQYj1H5OvKeLnXcTp0bVCkPyYBYdUIkePDSTJN1+rseh5CIwl
4Vc50R3wNZI89f4h8tZbTL5024bRmhrCaQ7+XpzpvSXb055WVf6vgG03KlE+JcFx
qVJ7GwmB2yShkw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client