Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 2LyWSOeX09D9IZUQuG5oujHAZeq2y+kHzRMQOx5/aOs=
Subject key identifier: B6:04:2C:82:48:7C:99:CA:A8:CB:5E:5E:C3:7D:99:DC:86:B7:8D:9F
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019A164E4A76FDAAC83DD043C4A77617B197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 11B6
Signing time: Fri 24 Oct 2025 13:00:20 +0000
Manifest this update: Fri 24 Oct 2025 13:00:20 +0000
Manifest next update: Sat 25 Oct 2025 13:00:20 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: /iTEq3JfpcoTuj9hFEUUbWx2ANy4U6nC0g/evU5Zshs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:4a:76:fd:aa:c8:3d:d0:43:c4:a7:76:17:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Oct 24 13:00:20 2025 GMT
Not After : Oct 25 13:00:20 2025 GMT
Subject: CN=b6042c82487c99caa8cb5e5ec37d99dc86b78d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:98:e6:85:70:76:d2:67:3d:ae:81:2e:7b:
ab:36:dc:19:a9:5e:4f:ee:a5:6b:5b:18:6e:da:e7:
d3:5a:b2:90:51:40:e7:27:2f:04:49:68:bd:77:21:
5b:c4:68:2a:4c:72:fd:5c:56:da:7e:45:48:ce:a5:
62:5f:18:d7:d6:c9:08:be:d1:fc:f6:13:5d:28:16:
6a:11:92:0d:85:8d:8e:77:bd:55:f4:cf:c0:45:c4:
ac:ca:ac:ec:31:5c:f7:f0:1c:20:75:70:c5:e6:38:
02:ae:33:d0:bb:9f:f6:eb:16:ff:13:22:96:15:02:
06:b8:96:5f:18:f7:f8:54:12:65:0b:df:7c:7f:27:
37:c4:10:72:77:7e:7e:f5:cc:c4:50:a3:2b:f0:63:
ae:02:22:46:d1:12:94:f5:60:24:8e:bb:dd:67:4a:
f7:8d:71:a1:83:72:cf:1e:6f:58:c1:14:3c:aa:9d:
52:8d:9f:fb:ab:4c:c5:c9:e3:39:52:1a:ae:12:75:
6a:3b:e2:e5:4e:a9:7f:d6:3b:a0:a4:d2:35:dc:f8:
89:cd:38:42:a9:7b:9e:2e:a9:e2:68:1a:8c:a5:e6:
79:10:19:a1:90:49:2d:4b:1f:0a:d0:9f:57:59:bd:
61:b7:54:12:9a:3d:81:b0:5e:da:29:3c:33:d0:eb:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:04:2C:82:48:7C:99:CA:A8:CB:5E:5E:C3:7D:99:DC:86:B7:8D:9F
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:e0:2c:3b:34:17:2d:9b:ba:f4:a4:69:7f:47:eb:b8:4b:
d6:f8:a1:84:40:4c:62:86:40:7c:52:c8:4f:8c:e4:52:2f:76:
a3:1d:1c:b9:68:bc:17:1e:06:85:71:c6:c2:76:49:e0:5e:6f:
2c:62:1a:4d:cf:a3:81:17:85:89:42:ad:18:9e:7a:e2:ef:fb:
d8:bd:3c:88:46:5a:54:95:b5:02:56:ff:96:2f:b4:c3:58:3c:
68:9a:f4:f8:eb:fe:15:c5:63:a2:b0:34:9a:99:d4:fc:cb:35:
db:9f:ea:87:6d:ec:b2:ff:37:bd:7d:fb:bb:ab:b8:c3:17:8f:
86:3f:37:be:4a:cf:ec:8f:76:bf:40:0a:c2:5c:3e:05:c1:81:
48:5d:c2:94:b0:69:63:cc:c2:10:4b:33:79:02:1b:70:2f:fa:
a9:28:d5:7d:ea:24:a1:a1:f1:e7:8e:c9:73:47:f5:b0:03:31:
4d:66:3e:f6:70:7e:76:67:c3:b7:69:50:8a:68:e3:e7:c6:4b:
c9:3a:00:3d:63:27:e4:33:2a:45:1e:f7:e7:ba:96:22:93:1e:
56:42:a5:ae:d3:da:78:4e:f5:8c:9c:a3:49:be:a9:3b:eb:e5:
76:cb:39:be:cc:fc:9b:fc:ca:94:25:f1:09:cc:19:b6:c5:0d:
8e:9f:30:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWTkp2/arIPdBDxKd2F7GXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz
NmExZDEwHhcNMjUxMDI0MTMwMDIwWhcNMjUxMDI1MTMwMDIwWjAzMTEwLwYDVQQD
EyhiNjA0MmM4MjQ4N2M5OWNhYThjYjVlNWVjMzdkOTlkYzg2Yjc4ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvKY5oVwdtJnPa6BLnurNtwZqV5P
7qVrWxhu2ufTWrKQUUDnJy8ESWi9dyFbxGgqTHL9XFbafkVIzqViXxjX1skIvtH8
9hNdKBZqEZINhY2Od71V9M/ARcSsyqzsMVz38BwgdXDF5jgCrjPQu5/26xb/EyKW
FQIGuJZfGPf4VBJlC998fyc3xBByd35+9czEUKMr8GOuAiJG0RKU9WAkjrvdZ0r3
jXGhg3LPHm9YwRQ8qp1SjZ/7q0zFyeM5UhquEnVqO+LlTql/1jugpNI13PiJzThC
qXueLqniaBqMpeZ5EBmhkEktSx8K0J9XWb1ht1QSmj2BsF7aKTwz0OvJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYELIJIfJnKqMteXsN9mdyGt42fMB8GA1UdIwQY
MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct
ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1
LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpbgLDs0
Fy2buvSkaX9H67hL1vihhEBMYoZAfFLIT4zkUi92ox0cuWi8Fx4GhXHGwnZJ4F5v
LGIaTc+jgReFiUKtGJ564u/72L08iEZaVJW1Alb/li+0w1g8aJr0+Ov+FcVjorA0
mpnU/Ms125/qh23ssv83vX37u6u4wxePhj83vkrP7I92v0AKwlw+BcGBSF3ClLBp
Y8zCEEszeQIbcC/6qSjVfeokoaHx547Jc0f1sAMxTWY+9nB+dmfDt2lQimjj58ZL
yToAPWMn5DMqRR7357qWIpMeVkKlrtPaeE71jJyjSb6pO+vldss5vsz8m/zKlCXx
CcwZtsUNjp8wEQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 21:09:16 2025 by rpki-client