Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: 1jdxb8ZoF6YRiihswzqpLYm6TVr50MshWqOBPkrg/5A=
Subject key identifier: 2B:96:1B:D3:3B:79:70:28:90:C5:EB:C0:14:97:67:45:E4:3F:B2:35
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 019A4DAA9B514039987DF24097B2C3B67284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1333
Signing time: Tue 04 Nov 2025 07:00:17 +0000
Manifest this update: Tue 04 Nov 2025 07:00:17 +0000
Manifest next update: Wed 05 Nov 2025 07:00:17 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: tNuITT+GkbKVWUofClbBq+HjM0VFaZJKn5BY6RNK+/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9b:51:40:39:98:7d:f2:40:97:b2:c3:b6:72:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Nov 4 07:00:17 2025 GMT
Not After : Nov 5 07:00:17 2025 GMT
Subject: CN=2b961bd33b79702890c5ebc014976745e43fb235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:6d:4b:cd:c8:7a:23:3a:5d:41:a4:5d:2a:
e7:1a:84:64:44:dc:f7:f0:96:95:41:fc:5f:0e:d5:
fb:45:b7:9d:a3:6e:c0:ed:23:49:6f:a6:1c:43:69:
7e:d6:81:6a:3e:f0:4d:26:61:99:3d:26:f3:50:99:
a3:98:11:f5:ab:0e:d9:fc:89:0e:d4:1b:b9:d6:73:
00:4a:43:f2:8d:a2:7a:2d:4a:ce:9e:b1:05:a5:3b:
03:41:0a:13:5f:24:6a:09:9d:67:83:8f:51:d6:f7:
45:d6:d8:49:33:5d:22:5f:14:58:f4:fa:08:3c:50:
d4:bd:2c:ac:d0:8e:0d:ac:a6:ab:c8:a6:32:7e:d5:
20:de:a3:3e:a9:ea:04:5e:d4:60:c4:4f:c1:09:02:
d8:16:49:47:af:39:cb:e9:d7:80:07:ef:b6:b8:b7:
db:58:5c:73:67:9c:a5:59:2a:a5:72:27:83:c0:c5:
d2:2e:d6:b5:a3:a3:61:3a:1e:f7:07:a5:d1:86:86:
a8:04:61:f4:2b:d1:ee:3c:77:13:1e:dc:36:40:63:
d2:15:aa:d9:77:3f:22:dc:1b:15:af:9f:bc:a5:a6:
43:38:86:09:a4:95:ae:71:a8:46:4d:9c:5f:4c:59:
43:75:0e:60:5d:54:47:9e:01:88:2f:8d:ca:ac:5c:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:1B:D3:3B:79:70:28:90:C5:EB:C0:14:97:67:45:E4:3F:B2:35
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:16:d9:dc:4f:50:e0:fd:ab:d5:e8:e1:14:af:9e:1f:65:
bd:6a:54:77:dd:e5:28:34:56:61:e5:3c:35:1f:34:ad:27:ec:
39:e8:ff:20:ac:2e:24:56:55:0b:73:10:5b:20:29:39:42:ea:
a7:21:b7:4d:34:89:6a:d0:b3:37:c3:b8:b8:5b:0e:76:be:da:
59:1f:90:c0:1b:a3:1a:3f:a4:35:2c:fc:2e:5b:97:ff:d7:71:
31:46:a3:35:35:a4:3e:4a:9f:60:02:49:86:2b:65:db:c7:23:
ea:66:6e:22:e6:c0:ca:4d:53:9d:b6:e6:14:65:f4:d1:8f:33:
e2:fe:3c:b5:11:b0:01:68:1a:39:e9:d0:9b:24:6c:f9:43:7f:
c0:62:89:74:92:72:f7:cb:21:95:b5:61:19:36:da:65:a4:3b:
f9:5a:28:fe:0a:4c:48:6b:a9:7a:d0:87:0e:8c:ff:75:f7:95:
76:94:3d:f4:5b:40:9b:54:6b:de:b8:92:8c:44:c8:a0:93:dd:
b3:14:98:c0:65:d0:11:d3:83:15:25:cc:3e:6f:1d:35:6c:e3:
6f:b3:f3:70:19:d8:14:9b:9d:47:47:9f:ef:54:d9:f4:3a:a2:
f9:0d:71:75:b0:fe:e2:de:a5:ec:58:7d:83:cc:6c:6e:48:fc:
41:95:47:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqptRQDmYffJAl7LDtnKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk
NmQ4ODMwHhcNMjUxMTA0MDcwMDE3WhcNMjUxMTA1MDcwMDE3WjAzMTEwLwYDVQQD
EygyYjk2MWJkMzNiNzk3MDI4OTBjNWViYzAxNDk3Njc0NWU0M2ZiMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCltS83IeiM6XUGkXSrnGoRkRNz3
8JaVQfxfDtX7Rbedo27A7SNJb6YcQ2l+1oFqPvBNJmGZPSbzUJmjmBH1qw7Z/IkO
1Bu51nMASkPyjaJ6LUrOnrEFpTsDQQoTXyRqCZ1ng49R1vdF1thJM10iXxRY9PoI
PFDUvSys0I4NrKaryKYyftUg3qM+qeoEXtRgxE/BCQLYFklHrznL6deAB++2uLfb
WFxzZ5ylWSqlcieDwMXSLta1o6NhOh73B6XRhoaoBGH0K9HuPHcTHtw2QGPSFarZ
dz8i3BsVr5+8paZDOIYJpJWucahGTZxfTFlDdQ5gXVRHngGIL43KrFz9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuWG9M7eXAokMXrwBSXZ0XkP7I1MB8GA1UdIwQY
MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt
N2FlYWRiNDVhMjM3LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3
LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKoW2dxP
UOD9q9Xo4RSvnh9lvWpUd93lKDRWYeU8NR80rSfsOej/IKwuJFZVC3MQWyApOULq
pyG3TTSJatCzN8O4uFsOdr7aWR+QwBujGj+kNSz8LluX/9dxMUajNTWkPkqfYAJJ
hitl28cj6mZuIubAyk1TnbbmFGX00Y8z4v48tRGwAWgaOenQmyRs+UN/wGKJdJJy
98shlbVhGTbaZaQ7+Voo/gpMSGupetCHDoz/dfeVdpQ99FtAm1Rr3riSjETIoJPd
sxSYwGXQEdODFSXMPm8dNWzjb7PzcBnYFJudR0ef71TZ9Dqi+Q1xdbD+4t6l7Fh9
g8xsbkj8QZVHnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client