Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: bSjnd7+wOLXlybBAPA5Aljunlv8+P0lwzKJJTSJyvUM=
Subject key identifier: D2:59:7E:7B:9C:B0:B0:18:08:64:F0:89:1D:D0:9A:DA:ED:2B:64:30
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019A725C720286E4B7BF316F453C625FA299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 141E
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: pd4cQ/s5ER7Grvq5kIYOFwysXTfzRtNcS/5CwdPe/Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:02:86:e4:b7:bf:31:6f:45:3c:62:5f:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=d2597e7b9cb0b0180864f0891dd09adaed2b6430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:c4:68:e1:3c:65:59:d4:e8:e2:f0:fd:ec:
d7:37:be:9e:11:ec:bd:24:17:7f:b1:a4:4d:f8:e0:
73:20:63:d0:e2:82:5c:32:7b:97:68:b0:3a:73:7f:
15:26:99:b4:c5:53:89:2e:05:a4:ab:1d:64:35:43:
59:5d:96:ae:b9:73:c0:08:23:8e:dc:0e:13:75:af:
b2:24:3e:ac:6c:b1:19:3b:c3:cd:90:70:61:76:f0:
61:e5:51:74:f6:ff:3e:74:3d:43:a3:41:ef:37:67:
6f:bd:e2:08:47:95:0b:0e:c1:ad:e3:bb:76:a8:32:
0c:02:41:01:43:31:e6:e4:1d:ed:d1:f7:d0:ea:a0:
95:a0:3e:94:a4:be:8f:88:98:f2:eb:bf:48:f4:56:
41:83:45:85:24:58:6f:56:da:46:1a:09:39:50:16:
e6:db:e6:a3:f7:db:3a:a3:4e:7d:5e:99:0b:d4:15:
7f:36:c6:cf:5b:35:0a:29:9d:6b:63:c4:7e:c4:f4:
0b:e9:fa:a0:3a:30:1a:be:ce:30:d7:8e:9a:2b:70:
62:7e:bf:f7:39:4d:d1:fa:cd:9f:a0:8e:e6:13:d9:
59:93:03:4a:9c:c6:7c:2a:11:ad:19:69:fa:c0:19:
92:0d:50:97:f0:2e:2c:e9:d7:c4:13:8a:46:a7:4d:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:7E:7B:9C:B0:B0:18:08:64:F0:89:1D:D0:9A:DA:ED:2B:64:30
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:52:24:2c:0a:61:12:9d:e5:7a:6a:88:ad:70:2b:5e:06:a9:
6c:88:24:d1:c0:0a:45:4a:1f:51:0a:4e:b8:8c:07:32:19:6d:
80:32:22:2e:ee:7c:66:74:da:d8:f1:db:fb:a2:f5:94:04:ab:
d6:89:b7:40:52:9d:81:1a:9b:80:87:c2:16:cc:7d:50:b9:ba:
0f:2c:59:4d:e5:a5:92:c1:59:9c:80:4e:08:a7:33:2e:5a:dc:
ea:e4:2d:48:aa:ba:5a:66:48:fa:4e:9d:52:bf:4a:56:5a:a8:
e1:e4:41:51:25:90:c9:de:02:6f:06:b5:be:8e:cb:5d:2c:54:
8c:91:89:e0:05:4f:05:0f:f0:c6:68:5d:c3:2f:66:5b:1c:fb:
81:bf:b2:66:24:d7:fd:1b:ce:ff:49:ed:d3:cf:a0:b2:93:0d:
04:e2:4d:f5:a8:11:d2:05:80:89:e3:a7:47:67:88:74:81:94:
89:fd:24:93:c5:b7:a6:37:ba:28:b5:3f:e0:2c:45:ff:2e:33:
ee:2f:48:3b:ff:05:69:48:ed:a5:5f:7b:b9:34:db:04:d0:9b:
c9:a8:11:3e:1f:1f:75:40:cc:96:6e:92:b1:16:01:29:ae:63:
83:98:45:c0:4c:6b:cd:18:3a:21:6c:25:6d:07:29:fc:27:be:
5c:ab:6c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHIChuS3vzFvRTxiX6KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2
YmU2YTcwHhcNMjUxMTExMTAwMDUyWhcNMjUxMTEyMTAwMDUyWjAzMTEwLwYDVQQD
EyhkMjU5N2U3YjljYjBiMDE4MDg2NGYwODkxZGQwOWFkYWVkMmI2NDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCzEaOE8ZVnU6OLw/ezXN76eEey9
JBd/saRN+OBzIGPQ4oJcMnuXaLA6c38VJpm0xVOJLgWkqx1kNUNZXZauuXPACCOO
3A4Tda+yJD6sbLEZO8PNkHBhdvBh5VF09v8+dD1Do0HvN2dvveIIR5ULDsGt47t2
qDIMAkEBQzHm5B3t0ffQ6qCVoD6UpL6PiJjy679I9FZBg0WFJFhvVtpGGgk5UBbm
2+aj99s6o059XpkL1BV/NsbPWzUKKZ1rY8R+xPQL6fqgOjAavs4w146aK3Bifr/3
OU3R+s2foI7mE9lZkwNKnMZ8KhGtGWn6wBmSDVCX8C4s6dfEE4pGp01loQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJZfnucsLAYCGTwiR3QmtrtK2QwMB8GA1UdIwQY
MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt
NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1
LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1IkLAph
Ep3lemqIrXArXgapbIgk0cAKRUofUQpOuIwHMhltgDIiLu58ZnTa2PHb+6L1lASr
1om3QFKdgRqbgIfCFsx9ULm6DyxZTeWlksFZnIBOCKczLlrc6uQtSKq6WmZI+k6d
Ur9KVlqo4eRBUSWQyd4Cbwa1vo7LXSxUjJGJ4AVPBQ/wxmhdwy9mWxz7gb+yZiTX
/RvO/0nt08+gspMNBOJN9agR0gWAieOnR2eIdIGUif0kk8W3pje6KLU/4CxF/y4z
7i9IO/8FaUjtpV97uTTbBNCbyagRPh8fdUDMlm6SsRYBKa5jg5hFwExrzRg6IWwl
bQcp/Ce+XKtswg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:34 2025 by rpki-client