Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: IqvRzgj+COKhOTwVt49Wasn7AVxafhgWaSVuz+/Dk1M=
Subject key identifier: 6B:54:28:FF:FB:CB:7E:13:05:74:93:8F:88:9B:91:9F:F8:5E:C1:4E
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019A4EF5ACEE6A4C866825C89E8173C4E91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0A3F
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: f5pLn4tlj/f/BZIgdf9VI5/xZY0NYKfqVSsC4BdxqfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:ee:6a:4c:86:68:25:c8:9e:81:73:c4:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=6b5428fffbcb7e130574938f889b919ff85ec14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:ca:0a:49:2c:47:15:dc:a7:8d:f4:18:e2:
32:17:85:15:a7:19:44:80:1d:83:6c:93:ec:4c:5e:
58:36:32:f4:ac:64:89:67:f1:15:6c:66:5a:58:36:
7b:25:83:b8:d0:71:4c:67:8b:d5:90:51:01:88:ff:
58:07:55:7d:06:3f:a5:bc:8b:d2:9c:98:30:20:d5:
08:2e:03:f7:e1:22:16:96:1d:48:a0:c3:24:58:c6:
53:2b:74:3c:a4:46:49:a2:d6:15:a5:e3:36:e1:d4:
53:ac:73:0e:47:bd:fb:75:fa:51:a0:db:0f:fc:2d:
cc:9e:79:06:c4:b9:c2:82:14:54:0e:a7:3f:d8:92:
4b:00:6d:49:f0:72:75:61:3b:d2:e9:04:18:11:aa:
e7:94:9f:c2:05:d5:a8:7e:53:e0:a6:84:b1:da:1e:
b3:a8:dd:a4:71:3c:65:56:1e:31:ca:de:3b:6c:fe:
6a:8f:54:5e:21:d8:c4:ca:b1:16:ef:0f:c2:41:d0:
62:34:c9:c1:68:5e:aa:a2:0c:36:25:3d:f4:cf:2d:
bc:e9:77:0d:ed:d4:47:d0:7d:72:47:76:b3:5b:72:
36:97:71:9d:e3:64:ae:d4:1e:e1:43:dc:0e:24:87:
41:dd:93:b5:18:64:05:14:89:b5:9c:67:9e:7e:2c:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:28:FF:FB:CB:7E:13:05:74:93:8F:88:9B:91:9F:F8:5E:C1:4E
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:30:ee:13:e5:04:01:7f:05:e6:1c:7c:32:76:b3:c7:47:5a:
22:90:d0:9f:ff:5d:c8:fe:a3:4f:ca:04:be:df:41:66:f2:3c:
17:30:c7:5c:72:e2:0d:52:cc:83:36:a7:b1:c6:ba:f7:f3:95:
18:85:1c:08:53:df:01:ee:a0:e4:7d:3f:5e:21:cf:bf:dc:e6:
ce:b1:02:d6:51:3a:8d:e3:05:1c:59:ed:64:9c:c9:f5:09:6d:
72:d4:10:93:fe:73:72:a0:fe:8e:b0:6b:75:54:dd:9a:ce:6a:
f2:af:98:33:2a:56:e6:59:10:0c:26:0d:04:d0:d9:b9:1e:89:
76:e3:2c:6d:a0:2a:e0:c0:20:91:fa:ad:0f:48:06:34:b3:e4:
68:6f:6a:5e:f3:32:b1:ea:06:3d:2a:fa:91:d5:08:6c:b3:ca:
80:1f:2a:ee:be:73:e4:91:57:d3:58:1c:76:94:6a:9b:95:5b:
e0:15:57:3d:40:69:42:8d:e2:a9:78:8d:74:10:e4:0c:a2:0e:
d8:d1:0b:88:77:4c:aa:93:7d:74:5a:9f:1e:59:38:74:d3:83:
c6:6f:09:16:e9:7d:19:c8:aa:cd:80:b1:8e:e6:3b:28:b7:5e:
6d:c4:b2:96:5c:59:61:f3:e4:a1:d0:8e:39:da:da:0f:08:73:
05:5b:32:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9azuakyGaCXInoFzxOkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3
NGI2NzEwHhcNMjUxMTA0MTMwMTU0WhcNMjUxMTA1MTMwMTU0WjAzMTEwLwYDVQQD
Eyg2YjU0MjhmZmZiY2I3ZTEzMDU3NDkzOGY4ODliOTE5ZmY4NWVjMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+nKCkksRxXcp430GOIyF4UVpxlE
gB2DbJPsTF5YNjL0rGSJZ/EVbGZaWDZ7JYO40HFMZ4vVkFEBiP9YB1V9Bj+lvIvS
nJgwINUILgP34SIWlh1IoMMkWMZTK3Q8pEZJotYVpeM24dRTrHMOR737dfpRoNsP
/C3MnnkGxLnCghRUDqc/2JJLAG1J8HJ1YTvS6QQYEarnlJ/CBdWoflPgpoSx2h6z
qN2kcTxlVh4xyt47bP5qj1ReIdjEyrEW7w/CQdBiNMnBaF6qogw2JT30zy286XcN
7dRH0H1yR3azW3I2l3Gd42Su1B7hQ9wOJIdB3ZO1GGQFFIm1nGeefixpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtUKP/7y34TBXSTj4ibkZ/4XsFOMB8GA1UdIwQY
MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt
NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi
LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTDuE+UE
AX8F5hx8Mnazx0daIpDQn/9dyP6jT8oEvt9BZvI8FzDHXHLiDVLMgzansca69/OV
GIUcCFPfAe6g5H0/XiHPv9zmzrEC1lE6jeMFHFntZJzJ9QltctQQk/5zcqD+jrBr
dVTdms5q8q+YMypW5lkQDCYNBNDZuR6JduMsbaAq4MAgkfqtD0gGNLPkaG9qXvMy
seoGPSr6kdUIbLPKgB8q7r5z5JFX01gcdpRqm5Vb4BVXPUBpQo3iqXiNdBDkDKIO
2NELiHdMqpN9dFqfHlk4dNODxm8JFul9GciqzYCxjuY7KLdebcSyllxZYfPkodCO
OdraDwhzBVsyEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:47 2025 by rpki-client