Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File: F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier: Ch5nDV6deylUZKpqpDPTPwKY7evN9fcdRoJ44Q8kQcU=
Subject key identifier: 48:23:E3:F4:A7:89:F3:C3:E3:E8:9C:AC:0C:6E:11:F6:90:BC:0F:FF
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 019A725C5B7AD123A165AF3EBA4C50FDD94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: Wl4Ej6BSGbAzRkn1kQ3qlUOxVCAIYmUSgK7sybnCAws=)
2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5b:7a:d1:23:a1:65:af:3e:ba:4c:50:fd:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=4823e3f4a789f3c3e3e89cac0c6e11f690bc0fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:d3:0d:de:52:d2:38:58:5c:7d:e5:9c:81:
7b:eb:f7:a5:fe:24:bd:89:7f:66:ba:48:b4:ef:57:
d3:ac:ec:ad:77:c1:89:5f:11:0c:63:4d:3d:45:6d:
28:a9:23:10:38:8c:7a:71:2d:18:e2:ef:dd:f2:0f:
66:81:0d:80:c5:34:92:f1:70:21:72:0e:40:ea:49:
d6:d3:27:2f:84:e4:02:b7:50:2a:2b:3c:95:5e:bc:
46:59:d6:41:92:50:5b:fa:cd:7b:04:c4:fe:1d:db:
9a:77:83:d4:6c:ef:0d:ac:a4:45:af:fa:f4:de:17:
c4:9b:21:8a:af:cd:57:61:9a:89:13:7e:38:85:a7:
e7:bf:f1:b0:70:8e:bc:71:78:74:30:c3:c6:12:d9:
22:ff:7a:ba:f7:84:54:da:b7:62:49:6e:15:1b:e1:
f1:15:52:77:9a:21:18:c7:f7:bd:f7:8b:ae:35:4f:
d5:fa:7c:ce:5e:05:0f:1a:6c:e9:3c:1b:60:89:9a:
e1:31:f9:b7:cf:70:b5:1c:87:5d:59:e7:2e:9f:4b:
bf:58:99:cb:d1:a5:e9:57:24:21:db:f1:12:f9:50:
7a:8f:51:bf:d2:59:3a:94:f7:4a:a1:7f:bc:83:b7:
af:e8:f1:95:2a:80:f7:5e:64:2e:a5:c1:19:fa:5d:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:23:E3:F4:A7:89:F3:C3:E3:E8:9C:AC:0C:6E:11:F6:90:BC:0F:FF
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e3:32:fa:a0:3f:4c:59:74:11:10:2c:98:32:bd:8c:39:06:
f0:43:44:d7:ae:56:e9:0d:1d:5d:a0:7c:73:9c:d3:a1:f5:fb:
ca:de:43:ba:d6:18:6d:b6:f1:01:7e:38:6d:87:41:6f:3c:40:
1b:21:5f:a1:c5:03:8d:16:b6:dc:b5:e1:39:f0:48:fe:15:89:
75:83:cc:6c:9a:a7:67:4b:fa:b8:c2:33:9c:87:35:97:7b:66:
58:f9:02:e9:b6:e1:14:29:21:9b:62:28:ca:5c:96:e3:42:79:
eb:63:45:85:63:f1:6f:4e:af:62:b9:cc:22:ce:23:cc:f4:94:
0d:ab:f3:83:50:11:45:06:48:84:77:24:18:a3:60:41:f3:1b:
0c:04:6d:e8:74:ed:29:6e:b8:c9:ab:0f:6d:12:29:16:73:2d:
54:cf:06:a5:73:f8:ae:f0:95:f4:25:b5:23:8a:42:fc:b7:c1:
6b:d5:56:eb:c9:6d:56:08:d8:4e:82:ec:ad:cd:55:cd:c6:b4:
90:cc:79:b4:45:dd:a6:bc:80:7a:44:ac:dc:ce:6c:1f:62:49:
00:68:64:81:aa:d8:25:d4:10:1d:ed:4e:09:87:63:e3:d6:09:
9b:ef:af:ff:f9:ce:52:f8:db:a8:f1:17:86:9c:91:70:f4:05:
81:61:90:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXFt60SOhZa8+ukxQ/dlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm
MGU3ZjMwHhcNMjUxMTExMTAwMDQ2WhcNMjUxMTEyMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg0ODIzZTNmNGE3ODlmM2MzZTNlODljYWMwYzZlMTFmNjkwYmMwZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFPTDd5S0jhYXH3lnIF76/el/iS9
iX9muki071fTrOytd8GJXxEMY009RW0oqSMQOIx6cS0Y4u/d8g9mgQ2AxTSS8XAh
cg5A6knW0ycvhOQCt1AqKzyVXrxGWdZBklBb+s17BMT+Hduad4PUbO8NrKRFr/r0
3hfEmyGKr81XYZqJE344hafnv/GwcI68cXh0MMPGEtki/3q694RU2rdiSW4VG+Hx
FVJ3miEYx/e994uuNU/V+nzOXgUPGmzpPBtgiZrhMfm3z3C1HIddWecun0u/WJnL
0aXpVyQh2/ES+VB6j1G/0lk6lPdKoX+8g7ev6PGVKoD3XmQupcEZ+l2pDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgj4/SnifPD4+icrAxuEfaQvA//MB8GA1UdIwQY
MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt
M2YzOWQ3NjQyNGZiLzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi
LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuMy+qA/
TFl0ERAsmDK9jDkG8ENE165W6Q0dXaB8c5zTofX7yt5DutYYbbbxAX44bYdBbzxA
GyFfocUDjRa23LXhOfBI/hWJdYPMbJqnZ0v6uMIznIc1l3tmWPkC6bbhFCkhm2Io
ylyW40J562NFhWPxb06vYrnMIs4jzPSUDavzg1ARRQZIhHckGKNgQfMbDARt6HTt
KW64yasPbRIpFnMtVM8GpXP4rvCV9CW1I4pC/LfBa9VW68ltVgjYToLsrc1Vzca0
kMx5tEXdpryAekSs3M5sH2JJAGhkgarYJdQQHe1OCYdj49YJm++v//nOUvjbqPEX
hpyRcPQFgWGQMg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:26 2025 by rpki-client