Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier: uDMGosQ9AqLIIgPcT6O2wWyGYlieWt+84QabIdRE5NA=
Subject key identifier: B9:C4:42:2A:FF:41:DD:4C:2C:F2:D7:7E:EC:A3:0F:DB:8B:B4:95:E2
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 019A72264F5D6FA82746E2ACD4BD0109018C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number: 0554
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: 0ejluUeUlkZlYrVLQKXqnWML7+3aKzMN1SBZWdGX8SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4f:5d:6f:a8:27:46:e2:ac:d4:bd:01:09:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=b9c4422aff41dd4c2cf2d77eeca30fdb8bb495e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:97:e0:42:5e:1a:53:92:81:73:61:50:1d:
91:7d:77:cb:b6:02:13:3c:8f:31:6f:8a:ff:c3:c1:
cd:6b:0a:91:4f:14:40:5b:0e:ae:ec:9c:24:4b:cd:
1f:b5:6f:d9:17:bc:72:09:2f:1a:1a:66:8d:74:3f:
38:8e:48:bd:69:13:51:77:be:08:6e:77:2b:0c:d2:
d3:8a:0f:d5:e4:5f:5e:59:70:85:79:38:f9:d5:61:
4a:56:08:71:65:a8:07:ec:22:aa:a1:74:3d:66:fa:
b0:89:26:46:58:b4:fa:47:1b:5e:bd:3f:8e:0e:07:
94:46:d2:f7:f6:ae:a5:55:35:ce:74:47:fb:c1:26:
9e:8a:9a:f8:6b:68:d5:52:73:75:4d:f4:e1:c3:78:
f2:6a:70:9a:74:c1:6c:30:b1:2d:c9:3d:76:9e:b0:
35:de:57:7b:c0:cf:96:2c:49:94:31:fe:61:1a:9a:
0b:fd:a4:56:e5:6b:a5:f7:56:db:c4:8e:5e:8e:3b:
95:ea:ae:5b:c6:83:b7:2c:f0:e2:e1:aa:62:a9:d9:
b6:cd:ea:4e:6f:8d:27:78:df:d9:66:88:4f:ae:df:
8f:74:fd:8c:9e:10:bf:3f:3d:df:33:d3:17:7d:49:
c9:8f:86:bf:13:b0:49:06:f1:71:25:2e:25:44:c3:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:42:2A:FF:41:DD:4C:2C:F2:D7:7E:EC:A3:0F:DB:8B:B4:95:E2
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:7d:57:0a:38:ac:95:d7:d8:0d:49:9a:da:52:e7:6c:f9:
73:2e:29:e8:32:10:11:9c:8f:26:73:e0:a2:fc:42:de:d3:c8:
6e:fe:31:e6:4d:45:a2:0c:e9:1d:70:95:19:a4:dd:d8:bc:9d:
2c:61:cb:ff:b5:66:9e:fd:21:94:8d:8e:bc:46:4d:e7:cf:34:
a1:b7:05:b8:be:3d:07:fc:7d:b2:a2:56:af:65:6d:f5:87:06:
7a:f3:ba:65:7c:37:21:65:3e:8a:81:2e:99:56:c5:7e:95:83:
ed:35:4c:3a:92:39:c9:e9:18:d9:4a:83:67:18:88:14:70:a7:
1f:66:9d:89:83:7f:85:bf:57:cc:d0:16:3d:73:60:6a:7a:dc:
a0:6e:09:96:a8:8b:1c:c8:c8:03:18:18:92:18:dd:5f:61:9e:
81:35:0f:7c:f5:80:4a:12:fd:f2:b3:ca:a3:dc:8c:d6:82:6a:
e9:85:b1:13:e4:06:88:a2:f6:c6:a9:51:0f:69:9b:1e:d8:8e:
21:66:e4:d6:f8:28:9b:43:d5:f4:1b:b3:07:4c:29:ab:25:be:
a1:72:d9:af:1e:0e:f3:71:c3:a4:30:3d:98:58:67:e0:bc:24:
fb:2b:47:0f:22:ad:9e:33:f1:33:bc:dc:d9:6c:b7:06:47:bb:
58:0b:90:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJk9db6gnRuKs1L0BCQGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWVjN2ViYjVjYzg3M2NjNzE3OTY2MGFjZmNhODA0ZDkx
MWFiNjYwHhcNMjUxMTExMDkwMTQ0WhcNMjUxMTEyMDkwMTQ0WjAzMTEwLwYDVQQD
EyhiOWM0NDIyYWZmNDFkZDRjMmNmMmQ3N2VlY2EzMGZkYjhiYjQ5NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskOX4EJeGlOSgXNhUB2RfXfLtgIT
PI8xb4r/w8HNawqRTxRAWw6u7JwkS80ftW/ZF7xyCS8aGmaNdD84jki9aRNRd74I
bncrDNLTig/V5F9eWXCFeTj51WFKVghxZagH7CKqoXQ9ZvqwiSZGWLT6RxtevT+O
DgeURtL39q6lVTXOdEf7wSaeipr4a2jVUnN1TfThw3jyanCadMFsMLEtyT12nrA1
3ld7wM+WLEmUMf5hGpoL/aRW5Wul91bbxI5ejjuV6q5bxoO3LPDi4apiqdm2zepO
b40neN/ZZohPrt+PdP2MnhC/Pz3fM9MXfUnJj4a/E7BJBvFxJS4lRMOolwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnEQir/Qd1MLPLXfuyjD9uLtJXiMB8GA1UdIwQY
MBaAFH3ux+u1zIc8xxeWYKz8qATZEatmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmIt
N2EyYTIxNzJlYzRmLzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmItN2EyYTIxNzJlYzRm
LzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5B9Vwo4
rJXX2A1JmtpS52z5cy4p6DIQEZyPJnPgovxC3tPIbv4x5k1FogzpHXCVGaTd2Lyd
LGHL/7Vmnv0hlI2OvEZN5880obcFuL49B/x9sqJWr2Vt9YcGevO6ZXw3IWU+ioEu
mVbFfpWD7TVMOpI5yekY2UqDZxiIFHCnH2adiYN/hb9XzNAWPXNganrcoG4JlqiL
HMjIAxgYkhjdX2GegTUPfPWAShL98rPKo9yM1oJq6YWxE+QGiKL2xqlRD2mbHtiO
IWbk1vgom0PV9BuzB0wpqyW+oXLZrx4O83HDpDA9mFhn4Lwk+ytHDyKtnjPxM7zc
2Wy3Bke7WAuQ3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:59 2025 by rpki-client