Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier: dr1MG7Q6E4WD5deKxIO2nctLeHaRcig9Mi0WDdOEkxI=
Subject key identifier: AA:9A:24:A8:3C:25:ED:E7:A8:65:4F:1C:A9:F5:F4:21:20:E9:B3:C7
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial: 019A4F993BAD43092488D34CB789BD98EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number: 0DA0
Signing time: Tue 04 Nov 2025 16:00:33 +0000
Manifest this update: Tue 04 Nov 2025 16:00:33 +0000
Manifest next update: Wed 05 Nov 2025 16:00:33 +0000
Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: ulJM6CiCW42fhCBnieJZkR0sxahkmr51aX422QnQmvg=)
2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3b:ad:43:09:24:88:d3:4c:b7:89:bd:98:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
Validity
Not Before: Nov 4 16:00:33 2025 GMT
Not After : Nov 5 16:00:33 2025 GMT
Subject: CN=aa9a24a83c25ede7a8654f1ca9f5f42120e9b3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:1b:64:1d:ff:29:f0:ae:cf:7d:3c:a0:fd:
fa:55:9f:0c:1b:9b:29:3e:34:82:68:3b:6e:fa:f8:
31:eb:86:50:10:68:7c:66:48:6c:95:b6:ad:97:9f:
83:ad:16:c8:fd:83:5a:90:1f:5a:18:60:24:2c:13:
e2:8a:e4:a7:e9:89:f6:9f:ca:d6:14:27:9a:fe:d1:
1c:d4:11:a0:1d:16:ee:2a:5f:97:d2:99:89:d0:bf:
c8:87:23:6a:89:ee:23:44:19:2d:21:ea:f9:de:cf:
9c:09:1b:bd:9c:5b:8d:22:bb:35:2b:b1:f4:32:0d:
65:69:97:4a:a8:fa:b8:5d:80:d3:d7:95:24:5f:8d:
1e:1b:2a:dc:5c:6c:1a:52:95:1c:da:75:6f:0e:ee:
b6:88:a1:c5:8f:92:f4:0b:de:cb:af:58:2b:df:74:
bf:64:d6:7e:88:bc:c0:5b:cc:da:10:41:de:66:25:
42:2a:18:ea:60:f4:07:4d:71:d4:2a:66:89:89:72:
de:c9:3c:39:cb:45:e3:b7:05:a4:bb:9c:d2:2a:fd:
e8:d9:4c:50:96:31:45:22:a2:86:6a:1e:2b:79:ee:
19:2b:b4:85:36:d4:c2:fa:8b:f0:9a:49:a8:bc:61:
81:28:b3:1c:ce:41:f4:98:c3:62:09:4c:ff:37:4b:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:24:A8:3C:25:ED:E7:A8:65:4F:1C:A9:F5:F4:21:20:E9:B3:C7
X509v3 Authority Key Identifier:
keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:54:76:19:bb:5a:b3:84:17:ce:7e:fe:0f:f9:59:6a:7b:0b:
a1:eb:27:06:ea:de:79:bc:c7:7f:42:0e:08:f1:a1:48:c4:12:
af:8d:dd:58:58:b3:42:ef:d5:4d:ac:2b:c9:0f:37:cf:bb:e0:
5b:4a:aa:9f:0f:3c:1f:e5:c5:62:86:a1:80:94:f6:fd:8e:10:
29:2a:3e:cb:3d:5f:b7:ca:4b:d5:40:d1:cb:0a:d6:ef:1e:b2:
48:97:c5:3c:68:c8:29:95:f4:e1:c9:49:1b:e3:31:b2:3f:71:
32:9f:29:ef:08:c1:cc:a9:99:6b:fd:e0:f6:3d:7b:84:7e:45:
7b:97:1c:6b:02:54:c2:64:d9:b1:a2:26:f3:59:85:73:e6:ff:
b3:86:f5:d1:fc:1c:52:c7:52:5a:0d:d6:4f:2d:4c:c5:93:7c:
49:d9:49:ed:17:89:b8:d4:56:43:e5:15:7f:21:aa:bb:c4:c9:
8b:41:79:e0:3f:54:49:34:dd:48:3a:dc:d8:88:b1:be:4d:5b:
bc:90:58:ec:40:f8:e5:af:f9:48:ec:27:42:03:1a:dc:2a:2c:
7a:45:b3:3c:f4:bf:79:64:92:e7:b8:eb:47:6b:34:1e:7b:b7:
b2:16:f7:dc:3f:88:c9:2d:32:90:42:b7:0f:b6:27:72:77:6e:
a2:5e:9d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmTutQwkkiNNMt4m9mO3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3
OTIzMDIwHhcNMjUxMTA0MTYwMDMzWhcNMjUxMTA1MTYwMDMzWjAzMTEwLwYDVQQD
EyhhYTlhMjRhODNjMjVlZGU3YTg2NTRmMWNhOWY1ZjQyMTIwZTliM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr0bZB3/KfCuz308oP36VZ8MG5sp
PjSCaDtu+vgx64ZQEGh8Zkhslbatl5+DrRbI/YNakB9aGGAkLBPiiuSn6Yn2n8rW
FCea/tEc1BGgHRbuKl+X0pmJ0L/IhyNqie4jRBktIer53s+cCRu9nFuNIrs1K7H0
Mg1laZdKqPq4XYDT15UkX40eGyrcXGwaUpUc2nVvDu62iKHFj5L0C97Lr1gr33S/
ZNZ+iLzAW8zaEEHeZiVCKhjqYPQHTXHUKmaJiXLeyTw5y0XjtwWku5zSKv3o2UxQ
ljFFIqKGah4ree4ZK7SFNtTC+ovwmkmovGGBKLMczkH0mMNiCUz/N0swBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqaJKg8Je3nqGVPHKn19CEg6bPHMB8GA1UdIwQY
MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt
Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1
LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFR2Gbta
s4QXzn7+D/lZansLoesnBureebzHf0IOCPGhSMQSr43dWFizQu/VTawryQ83z7vg
W0qqnw88H+XFYoahgJT2/Y4QKSo+yz1ft8pL1UDRywrW7x6ySJfFPGjIKZX04clJ
G+Mxsj9xMp8p7wjBzKmZa/3g9j17hH5Fe5ccawJUwmTZsaIm81mFc+b/s4b10fwc
UsdSWg3WTy1MxZN8SdlJ7ReJuNRWQ+UVfyGqu8TJi0F54D9USTTdSDrc2Iixvk1b
vJBY7ED45a/5SOwnQgMa3CosekWzPPS/eWSS57jrR2s0Hnu3shb33D+IyS0ykEK3
D7Yncnduol6dPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:25 2025 by rpki-client