Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: X3zU8WxUgPJHxuuqcxM2WkNPKy37lWlx/UaUv4RWkl4=
Subject key identifier: C4:08:29:0A:CF:98:7F:E2:D0:C2:E6:1D:7E:38:E2:E2:9D:10:17:F4
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019A51197D4BF4FDDAD32059D00D1231E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:16 +0000
Manifest this update: Tue 04 Nov 2025 23:00:16 +0000
Manifest next update: Wed 05 Nov 2025 23:00:16 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: sNKlvr/pBxsTbzrVvZcBZNMIqQUPoYTC5jX+4YF9UGs=)
2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7d:4b:f4:fd:da:d3:20:59:d0:0d:12:31:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Nov 4 23:00:16 2025 GMT
Not After : Nov 5 23:00:16 2025 GMT
Subject: CN=c408290acf987fe2d0c2e61d7e38e2e29d1017f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:72:fd:b9:e1:8b:51:86:ff:c2:fe:19:76:
81:b6:9c:3e:c4:fe:d3:aa:5d:89:bc:46:60:6c:6c:
7d:97:e0:4c:fc:7d:81:ff:ed:52:66:38:07:28:75:
90:f0:a0:1b:60:80:3b:c5:a9:0c:1d:9c:bf:b5:d9:
e0:9c:d7:64:f7:a1:e8:02:de:5c:9a:52:18:86:c6:
7d:e1:47:eb:a1:13:29:9d:3d:d6:95:7a:51:0b:a8:
eb:ea:32:e5:db:f0:1c:95:42:59:7f:7d:0d:94:18:
06:ed:5f:30:e2:ce:08:31:d7:1f:57:a8:15:2c:b2:
5b:91:20:7e:30:e0:2f:d7:b8:ac:48:35:51:4b:25:
3c:0a:43:00:fe:41:22:9d:a0:48:68:c0:6b:c3:19:
71:14:bb:23:9e:6c:b5:42:b6:94:46:6a:ef:a4:67:
b9:bf:8a:a8:65:5e:46:67:f9:77:3e:c3:90:6e:7d:
d7:c7:23:3b:86:78:de:ad:e5:67:11:a6:4a:0f:17:
7f:d3:3c:fe:14:9d:9d:a9:59:ab:08:88:05:11:14:
ee:05:b5:5a:3a:87:34:85:a0:16:79:92:94:fa:a1:
6e:9f:65:25:03:ad:65:47:29:6d:b5:2e:f8:07:dc:
da:37:d3:39:40:00:40:ad:1e:c7:22:63:81:69:e4:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:29:0A:CF:98:7F:E2:D0:C2:E6:1D:7E:38:E2:E2:9D:10:17:F4
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e0:f0:10:54:a2:b5:d3:c2:e1:2d:14:07:84:de:c0:70:43:
7e:03:96:85:aa:ff:d7:01:1a:75:6e:66:d5:d7:81:34:e7:76:
50:ae:0b:2a:f5:2d:9f:70:5c:f9:10:ea:9b:5e:6d:71:42:35:
e7:fc:f9:d5:82:ce:18:ad:2d:c6:50:30:a8:7b:d3:43:a7:62:
9b:56:58:a9:2f:e8:5e:28:f1:42:29:94:4d:80:b0:cd:b7:1e:
5a:f1:ec:b3:1b:ab:6a:76:11:da:e0:db:f8:e1:d7:d1:3c:21:
ca:8b:c0:f1:24:3c:0f:07:24:44:61:90:87:74:1f:cf:58:c7:
c0:1f:11:6e:99:1d:9d:77:51:0f:0c:53:cc:3f:e7:72:30:fd:
0a:36:37:78:04:63:56:ac:96:f3:a9:02:d6:ad:17:d1:23:c7:
f0:e6:be:eb:40:a8:31:17:75:4d:5a:2b:77:38:93:84:1a:60:
24:d3:83:07:59:55:fc:36:aa:a5:05:46:01:54:22:bd:8f:65:
e7:b8:13:7d:82:2c:04:f3:92:46:c9:a5:89:b0:cb:1a:e7:a8:
0f:48:ab:8e:aa:9b:ff:de:7a:b8:01:c1:99:49:30:f1:18:a3:
e3:a5:07:44:5d:40:56:47:5a:b7:ca:ad:39:12:17:4e:21:e5:
18:10:86:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGX1L9P3a0yBZ0A0SMeZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjUxMTA0MjMwMDE2WhcNMjUxMTA1MjMwMDE2WjAzMTEwLwYDVQQD
EyhjNDA4MjkwYWNmOTg3ZmUyZDBjMmU2MWQ3ZTM4ZTJlMjlkMTAxN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVy/bnhi1GG/8L+GXaBtpw+xP7T
ql2JvEZgbGx9l+BM/H2B/+1SZjgHKHWQ8KAbYIA7xakMHZy/tdngnNdk96HoAt5c
mlIYhsZ94UfroRMpnT3WlXpRC6jr6jLl2/AclUJZf30NlBgG7V8w4s4IMdcfV6gV
LLJbkSB+MOAv17isSDVRSyU8CkMA/kEinaBIaMBrwxlxFLsjnmy1QraURmrvpGe5
v4qoZV5GZ/l3PsOQbn3XxyM7hnjereVnEaZKDxd/0zz+FJ2dqVmrCIgFERTuBbVa
Ooc0haAWeZKU+qFun2UlA61lRylttS74B9zaN9M5QABArR7HImOBaeTHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQIKQrPmH/i0MLmHX444uKdEBf0MB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuDwEFSi
tdPC4S0UB4TewHBDfgOWhar/1wEadW5m1deBNOd2UK4LKvUtn3Bc+RDqm15tcUI1
5/z51YLOGK0txlAwqHvTQ6dim1ZYqS/oXijxQimUTYCwzbceWvHssxuranYR2uDb
+OHX0TwhyovA8SQ8DwckRGGQh3Qfz1jHwB8RbpkdnXdRDwxTzD/ncjD9CjY3eARj
VqyW86kC1q0X0SPH8Oa+60CoMRd1TVordziThBpgJNODB1lV/DaqpQVGAVQivY9l
57gTfYIsBPOSRsmlibDLGueoD0irjqqb/956uAHBmUkw8Rij46UHRF1AVkdat8qt
ORIXTiHlGBCGwQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:39 2025 by rpki-client