Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File: F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier: K7fMmAcOU2aPtEy0gdRwyr3dQn9INGEcSe7awgehI64=
Subject key identifier: D5:E5:07:A8:FA:B6:21:3B:8D:1C:4E:80:86:A5:05:B2:28:87:FE:E3
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 019A4EF44A8A665F259365F7167D1C5E0C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number: 124C
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: +3qj1+AK+HNHhGpEVf1+RZTsFscLyRAry/InHhEEEEM=)
2: HBsNTRQXWcPQbzWUzkWwFIJ-NiY.roa (hash: 8k01+u0bD23piBX5SKFalRiJFYskfuHtxEUxOGIwUkM=)
3: fGbepzb9A-L4azmxjWxp1naTF6A.roa (hash: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=)
4: i5Z-UkQ8_GCMdTDvdRVzZJd1s3E.roa (hash: hFp0HQZXTf6e9rwGzdmb+2RH6Ma6X1h19nbiCrFmx6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4a:8a:66:5f:25:93:65:f7:16:7d:1c:5e:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=d5e507a8fab6213b8d1c4e8086a505b22887fee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:03:b0:f2:fc:38:6b:93:be:ae:3f:bc:15:
b3:68:47:b4:db:c0:a4:b0:ff:03:82:e1:95:34:fe:
7a:f9:57:61:d1:7a:2e:28:9e:7e:eb:a5:1b:a9:fe:
97:0c:d3:d2:a4:1a:bb:41:42:c8:48:a8:22:c7:16:
e5:78:b9:dd:ff:d8:59:99:dc:eb:e3:7b:69:27:34:
f3:09:c1:82:3f:d4:15:de:f5:05:bb:d1:5c:67:f5:
56:14:de:71:09:04:67:1b:81:79:07:67:b1:b5:ec:
f2:10:ff:a0:e7:79:59:b1:64:4b:17:28:17:eb:65:
5d:5a:b0:6b:ec:b4:8b:6c:3a:1d:7d:9e:2e:f4:e1:
9a:09:3f:8e:ca:39:8c:f8:26:27:a1:06:20:57:ed:
e4:de:d4:bb:d5:e3:00:fb:bc:0b:7a:84:91:96:56:
9b:df:63:40:3b:79:f7:1d:5f:58:e3:40:61:f1:68:
b9:21:4c:fa:64:b2:e8:98:47:9e:c9:ef:75:f5:ac:
07:34:76:c3:6f:b9:45:fc:5c:e8:e9:b6:b7:36:3e:
41:bf:a6:01:ff:ef:ab:8a:52:9f:4c:2c:c3:d2:26:
32:c6:74:c6:dd:31:48:54:50:73:7f:25:10:25:a1:
35:4b:a0:af:aa:be:4d:03:d3:a5:76:c5:c8:0d:90:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:07:A8:FA:B6:21:3B:8D:1C:4E:80:86:A5:05:B2:28:87:FE:E3
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:10:92:cc:37:ac:9d:f1:e2:8e:99:1d:62:a7:77:c0:18:aa:
cc:5c:1a:a9:6c:6d:f2:2c:64:e6:20:8a:19:50:17:49:6e:de:
c7:06:ea:8c:00:a1:d4:df:12:08:d7:9f:07:69:31:d2:dc:13:
0a:39:46:62:0e:11:4e:eb:cd:de:ae:45:86:b3:70:d8:91:0d:
1f:c7:3d:46:2e:06:18:3a:a3:00:2a:d7:2b:32:24:17:7a:be:
0a:cc:78:4c:2c:9f:46:1d:ae:00:35:38:5d:b6:93:a7:32:e9:
ff:83:4f:5f:28:00:df:23:c5:8c:18:4b:bd:af:13:94:cb:7f:
fb:c4:a7:96:e3:65:c8:fb:62:ee:73:aa:4b:79:af:05:a5:50:
8e:ea:a9:0f:69:67:df:7f:d2:00:5a:84:04:2d:07:99:06:0e:
33:3e:6a:3e:e6:eb:af:e9:fd:0f:74:63:5f:c1:20:db:cb:51:
27:49:37:4e:e0:05:ba:fa:13:50:79:7b:e2:7e:84:7c:d3:69:
f9:dd:ed:13:b9:68:32:ec:9a:81:29:63:c8:f6:bd:65:9d:0c:
a6:45:0d:46:f0:03:a1:66:5b:01:08:3f:b0:82:17:1b:93:cd:
86:3e:21:02:9a:16:03:d4:7a:d7:f8:86:cb:31:4a:be:62:73:
30:c1:9d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EqKZl8lk2X3Fn0cXgxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OGM4ZjIwYzkzOWFhYTljODBjY2U2YTBkMTU2NzE4M2Nh
MWM1OTkwHhcNMjUxMTA0MTMwMDIzWhcNMjUxMTA1MTMwMDIzWjAzMTEwLwYDVQQD
EyhkNWU1MDdhOGZhYjYyMTNiOGQxYzRlODA4NmE1MDViMjI4ODdmZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus0DsPL8OGuTvq4/vBWzaEe028Ck
sP8DguGVNP56+Vdh0XouKJ5+66Ubqf6XDNPSpBq7QULISKgixxbleLnd/9hZmdzr
43tpJzTzCcGCP9QV3vUFu9FcZ/VWFN5xCQRnG4F5B2extezyEP+g53lZsWRLFygX
62VdWrBr7LSLbDodfZ4u9OGaCT+OyjmM+CYnoQYgV+3k3tS71eMA+7wLeoSRllab
32NAO3n3HV9Y40Bh8Wi5IUz6ZLLomEeeye919awHNHbDb7lF/Fzo6ba3Nj5Bv6YB
/++rilKfTCzD0iYyxnTG3TFIVFBzfyUQJaE1S6Cvqr5NA9OldsXIDZBpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXlB6j6tiE7jRxOgIalBbIoh/7jMB8GA1UdIwQY
MBaAFBeMjyDJOaqpyAzOag0VZxg8ocWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTIt
NGNkMTFlOGI3NDk3LzEvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTItNGNkMTFlOGI3NDk3
LzEvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBCSzDes
nfHijpkdYqd3wBiqzFwaqWxt8ixk5iCKGVAXSW7exwbqjACh1N8SCNefB2kx0twT
CjlGYg4RTuvN3q5FhrNw2JENH8c9Ri4GGDqjACrXKzIkF3q+Csx4TCyfRh2uADU4
XbaTpzLp/4NPXygA3yPFjBhLva8TlMt/+8SnluNlyPti7nOqS3mvBaVQjuqpD2ln
33/SAFqEBC0HmQYOMz5qPubrr+n9D3RjX8Eg28tRJ0k3TuAFuvoTUHl74n6EfNNp
+d3tE7loMuyagSljyPa9ZZ0MpkUNRvADoWZbAQg/sIIXG5PNhj4hApoWA9R61/iG
yzFKvmJzMMGdeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:18 2025 by rpki-client