Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier: OlxDHuOJ7kZ4TNTjeBVkhum7/OXGTLzuqGOgtSWFryk=
Subject key identifier: D7:FD:B0:8B:68:6C:8E:B3:40:11:6C:60:49:FF:FD:AB:CF:02:42:7F
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019A27E6E4BEAC76AF5F0ABA5463D4E13638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number: 0142
Signing time: Mon 27 Oct 2025 23:00:34 +0000
Manifest this update: Mon 27 Oct 2025 23:00:34 +0000
Manifest next update: Tue 28 Oct 2025 23:00:34 +0000
Files and hashes: 1: C93S1dgJ4_A0KrqfhcJ2wbpt_r8.roa (hash: msQwNZJRyoBH47m4enHwmGpM3uJN0VQWiUcpw8JNFl4=)
2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: KyWf4tJZQkaLC1BHVXdz4rQy7Jjw3V8NHtvWzEgdax4=)
3: VQlcAscFdh0J4xPTNEltNmOm0pM.roa (hash: FpJBUNA/PxvqCTcDhgg5jBSXRUYz8a5StP5dcgti0hc=)
4: wcv6Vtvj_8KzJMQubxYX_mtNkA0.roa (hash: 0NzmIEPG+guESJal/NU9sf3xAOXj6eL+XwYUVrhagog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:e4:be:ac:76:af:5f:0a:ba:54:63:d4:e1:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Oct 27 23:00:34 2025 GMT
Not After : Oct 28 23:00:34 2025 GMT
Subject: CN=d7fdb08b686c8eb340116c6049fffdabcf02427f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:ac:10:99:34:67:43:65:d7:10:67:c7:78:
27:cd:24:52:1a:6a:69:23:c3:2b:c0:49:1c:6d:97:
56:8d:14:f4:e2:3b:00:18:01:4f:d8:5f:20:7b:20:
dd:aa:8d:d9:aa:8f:10:4f:15:0b:29:56:ce:c9:8d:
3e:b4:df:60:59:15:60:d8:a7:a6:9e:8a:93:5d:cc:
91:95:c4:35:30:23:ce:52:24:36:49:2b:d2:6e:91:
b9:3c:ac:77:9f:1c:dd:80:5c:8a:41:9c:d9:72:13:
50:82:11:20:57:58:c7:c3:5b:4e:31:e2:f2:4b:7a:
b8:51:5a:b3:ee:cc:37:2e:5d:be:5a:db:be:e7:ff:
8d:69:81:e9:f3:87:f7:a9:b8:19:b4:b0:ef:bb:4e:
b8:e4:92:94:ab:a5:b6:49:67:28:01:bc:17:db:b3:
7b:3d:20:6b:77:96:51:36:e6:5f:3c:91:de:d3:74:
b4:c8:9b:94:3b:d7:3c:7d:8c:f0:e2:4d:3c:8c:f9:
78:2d:d4:ea:b9:e2:30:71:32:ba:ad:6c:59:6c:cb:
f2:25:c6:1c:0a:6b:ba:13:d3:be:ec:7f:c1:b1:55:
e7:9e:e0:ea:54:b3:1b:96:9e:d2:01:55:81:7d:39:
c1:c5:c5:5c:3e:04:7e:44:4c:ec:ea:ec:0c:d1:94:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:B0:8B:68:6C:8E:B3:40:11:6C:60:49:FF:FD:AB:CF:02:42:7F
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:36:18:2b:f5:53:a1:e2:b0:9e:21:d2:8c:0b:fc:b8:94:
01:9e:13:be:71:a8:2a:44:c8:37:8c:5a:7a:08:b5:a5:70:4b:
12:e9:33:95:bb:12:81:45:67:5b:5c:0b:e7:c8:ad:4b:83:84:
c2:ad:d7:05:ab:78:5c:01:df:8f:4f:ce:71:a4:e7:e2:23:c8:
71:80:3b:2a:aa:00:ef:62:56:80:c8:96:ec:46:37:22:13:23:
f9:d7:23:b9:e4:e8:07:88:ce:74:b5:30:af:5c:f0:22:b1:15:
a3:56:09:6f:0c:44:e9:63:74:4e:22:48:34:97:68:54:34:5e:
1a:3e:be:ae:8e:05:54:5e:11:d4:45:fa:fa:80:b1:0b:a6:61:
b9:9c:1d:cc:98:73:5b:78:84:25:bb:3e:db:4d:19:12:8c:3d:
b7:7c:98:24:06:ec:70:55:10:d2:6b:4a:e8:c5:51:02:2f:7e:
94:58:9c:eb:18:82:56:45:7e:ab:7e:90:b8:1c:e6:86:f0:4f:
70:66:e5:f5:32:a4:7a:c8:c9:86:77:69:8a:ea:ec:40:09:51:
52:c5:63:e3:ad:6e:5d:7c:3c:3f:59:cc:2f:78:73:a1:9c:38:
22:2c:3e:eb:14:fd:43:5c:10:e3:20:3c:6e:18:f5:1c:bc:ea:
34:26:76:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZon5uS+rHavXwq6VGPU4TY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0
YmI0MWYwHhcNMjUxMDI3MjMwMDM0WhcNMjUxMDI4MjMwMDM0WjAzMTEwLwYDVQQD
EyhkN2ZkYjA4YjY4NmM4ZWIzNDAxMTZjNjA0OWZmZmRhYmNmMDI0MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK+sEJk0Z0Nl1xBnx3gnzSRSGmpp
I8MrwEkcbZdWjRT04jsAGAFP2F8geyDdqo3Zqo8QTxULKVbOyY0+tN9gWRVg2Kem
noqTXcyRlcQ1MCPOUiQ2SSvSbpG5PKx3nxzdgFyKQZzZchNQghEgV1jHw1tOMeLy
S3q4UVqz7sw3Ll2+Wtu+5/+NaYHp84f3qbgZtLDvu0645JKUq6W2SWcoAbwX27N7
PSBrd5ZRNuZfPJHe03S0yJuUO9c8fYzw4k08jPl4LdTqueIwcTK6rWxZbMvyJcYc
Cmu6E9O+7H/BsVXnnuDqVLMblp7SAVWBfTnBxcVcPgR+REzs6uwM0ZT5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf9sItobI6zQBFsYEn//avPAkJ/MB8GA1UdIwQY
MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt
OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx
LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkU2GCv1
U6HisJ4h0owL/LiUAZ4TvnGoKkTIN4xaegi1pXBLEukzlbsSgUVnW1wL58itS4OE
wq3XBat4XAHfj0/OcaTn4iPIcYA7KqoA72JWgMiW7EY3IhMj+dcjueToB4jOdLUw
r1zwIrEVo1YJbwxE6WN0TiJINJdoVDReGj6+ro4FVF4R1EX6+oCxC6ZhuZwdzJhz
W3iEJbs+200ZEow9t3yYJAbscFUQ0mtK6MVRAi9+lFic6xiCVkV+q36QuBzmhvBP
cGbl9TKkesjJhndpiursQAlRUsVj461uXXw8P1nML3hzoZw4Iiw+6xT9Q1wQ4yA8
bhj1HLzqNCZ2Og==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:48:49 2025 by rpki-client