Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: zOj07QHGNoRGBTAEzVMfhWodDhLlbikMaR0fHZoncgU=
Subject key identifier: ED:0B:36:E9:56:BF:BF:C4:20:22:FF:79:6B:29:7A:C8:43:87:05:3D
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019A72260155796322BAA6B270E8BA50471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: iJ2PtQIUR3+fY3m/md0NdUPR1sVbT2r2oLhQDtda1RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:01:55:79:63:22:ba:a6:b2:70:e8:ba:50:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=ed0b36e956bfbfc42022ff796b297ac84387053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:30:42:76:6c:e2:78:37:48:56:93:cc:b0:
f2:28:ca:7b:ef:f5:24:17:4b:33:5d:f9:87:fd:6e:
fd:22:83:98:2c:70:15:63:08:28:aa:e3:02:9f:2e:
26:82:86:9d:6a:f4:54:ec:2e:41:d9:df:5b:f9:61:
d3:06:6b:ad:72:47:2e:c8:cd:f8:ec:e0:67:06:61:
e3:90:0b:48:a0:a6:2b:14:10:bf:1c:58:eb:77:a6:
a9:96:7b:03:9e:71:0c:e7:a3:05:54:71:eb:db:59:
b4:e9:d5:81:41:40:34:f5:cb:8f:80:ce:09:c1:56:
d1:d6:3c:dc:23:fd:11:b9:11:e3:ad:56:11:c7:15:
e8:f8:05:4d:d8:96:8b:bb:95:a8:78:f8:97:f1:bc:
04:76:5d:8b:c7:fc:16:11:5a:45:6e:e5:8a:87:50:
52:d2:46:91:27:96:14:39:42:08:11:da:39:96:aa:
5b:e4:28:c9:3b:a4:49:d0:2b:14:f6:e9:e9:d3:21:
9a:fb:18:25:a1:13:80:68:ed:99:8d:77:0c:a4:58:
49:fa:ca:56:57:f8:c8:de:20:f7:2c:a0:3d:7d:c3:
d4:9a:07:c2:78:68:c0:93:da:c5:5d:8d:a1:ca:d0:
79:d2:24:4b:a5:4e:34:32:87:6e:3d:b4:36:6c:47:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:36:E9:56:BF:BF:C4:20:22:FF:79:6B:29:7A:C8:43:87:05:3D
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:33:02:d1:87:6e:52:db:51:45:b8:f4:0c:96:b5:18:8a:
6a:78:16:44:35:c7:1b:0d:41:c9:3c:6f:d7:3a:83:1e:29:7a:
16:86:5e:b3:65:2d:01:1f:40:39:96:d2:63:48:55:73:7d:11:
da:18:50:90:b2:bd:d5:42:a8:4d:3f:48:df:2f:22:9c:3e:00:
af:17:3d:0c:f2:48:74:ca:a8:1b:71:35:49:3c:cf:e4:3f:9f:
a7:db:f9:92:75:50:64:f9:6f:dc:a7:12:9c:b1:a6:36:31:a6:
da:d7:79:0c:d4:fc:0e:bd:31:07:ff:50:5d:39:38:c8:ce:05:
e4:e0:d8:77:d6:46:e9:70:dc:5c:95:f5:92:8e:a5:5e:65:e3:
f1:8d:02:cd:3a:5a:0e:16:40:48:a9:29:6f:b0:2e:e0:81:63:
65:83:e1:b5:d3:ad:8e:ce:43:20:57:da:4a:ff:87:1a:72:06:
0f:8a:9b:f4:05:12:07:d3:f8:83:c4:c3:07:2b:98:1f:5b:bf:
30:0d:67:3c:a3:de:e6:64:e0:34:74:d6:4d:f6:89:52:bc:00:
a7:27:8d:30:bb:eb:1b:26:87:24:a4:59:bf:6a:7a:8b:a2:28:
af:cd:c1:37:99:3b:cc:89:0b:b2:ba:25:c0:9e:17:e0:60:91:
d5:17:8e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgFVeWMiuqaycOi6UEcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz
MzMwN2UwHhcNMjUxMTExMDkwMTI0WhcNMjUxMTEyMDkwMTI0WjAzMTEwLwYDVQQD
EyhlZDBiMzZlOTU2YmZiZmM0MjAyMmZmNzk2YjI5N2FjODQzODcwNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBEwQnZs4ng3SFaTzLDyKMp77/Uk
F0szXfmH/W79IoOYLHAVYwgoquMCny4mgoadavRU7C5B2d9b+WHTBmutckcuyM34
7OBnBmHjkAtIoKYrFBC/HFjrd6aplnsDnnEM56MFVHHr21m06dWBQUA09cuPgM4J
wVbR1jzcI/0RuRHjrVYRxxXo+AVN2JaLu5WoePiX8bwEdl2Lx/wWEVpFbuWKh1BS
0kaRJ5YUOUIIEdo5lqpb5CjJO6RJ0CsU9unp0yGa+xgloROAaO2ZjXcMpFhJ+spW
V/jI3iD3LKA9fcPUmgfCeGjAk9rFXY2hytB50iRLpU40ModuPbQ2bEdkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0LNulWv7/EICL/eWspeshDhwU9MB8GA1UdIwQY
MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt
MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi
LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFozAtGH
blLbUUW49AyWtRiKangWRDXHGw1ByTxv1zqDHil6FoZes2UtAR9AOZbSY0hVc30R
2hhQkLK91UKoTT9I3y8inD4Arxc9DPJIdMqoG3E1STzP5D+fp9v5knVQZPlv3KcS
nLGmNjGm2td5DNT8Dr0xB/9QXTk4yM4F5ODYd9ZG6XDcXJX1ko6lXmXj8Y0CzTpa
DhZASKkpb7Au4IFjZYPhtdOtjs5DIFfaSv+HGnIGD4qb9AUSB9P4g8TDByuYH1u/
MA1nPKPe5mTgNHTWTfaJUrwApyeNMLvrGyaHJKRZv2p6i6Ior83BN5k7zIkLsrol
wJ4X4GCR1ReOJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client