Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: OLf267rUR4O4U2IjEOj/WPqnwO1/MglLydYkJaHfT04=
Subject key identifier: AF:99:D9:A4:56:E3:4C:F0:B2:0E:03:52:73:51:53:09:1E:82:3F:16
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019A4EF477C5DA17873B0D600954E434ABC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: 6ZEa5kxXBG2hRdFiGdQcCapqxJPMvnAk5v2cWCNrYHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:77:c5:da:17:87:3b:0d:60:09:54:e4:34:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=af99d9a456e34cf0b20e0352735153091e823f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:0c:e9:06:a1:56:09:58:4f:ae:ac:aa:4b:
ea:51:b8:98:15:f1:84:d0:41:2a:10:41:55:fd:4e:
a0:7f:bd:be:48:9d:b0:64:b6:47:be:79:b4:8a:f2:
2b:a2:00:9d:d6:8d:40:d6:8d:74:01:38:b7:5b:2c:
ff:5f:4d:32:5a:9f:25:07:89:a2:53:15:2c:ba:e3:
2e:4d:6e:70:93:ec:21:89:31:9f:2c:d9:d2:8a:f1:
6f:9e:4e:98:70:a7:a9:cf:bf:b0:9e:3a:ee:53:3f:
04:14:30:0c:16:7b:d3:96:1c:41:f3:1f:7c:66:a1:
b5:e6:81:eb:eb:db:bb:8d:74:a6:cd:4e:fd:f9:35:
f0:3a:7c:bd:32:4b:98:14:0c:3c:e8:76:ed:f1:79:
0a:84:d3:4c:b2:fd:cf:e5:be:aa:50:4a:6a:a3:a9:
dc:b1:6c:2e:e1:ee:33:3a:65:02:d6:c0:f5:3e:a1:
58:e5:fb:a5:80:e0:90:68:90:29:c9:c3:91:e1:3d:
fd:5a:76:de:23:9d:65:6e:cd:39:d8:4a:61:60:08:
fd:b6:81:8c:42:b6:b2:52:1d:05:6b:6d:0b:85:e1:
20:86:62:0e:c9:c8:ad:13:b1:df:68:f5:99:80:c6:
b0:e1:d3:59:52:71:e4:1e:6d:8d:c6:d1:d3:94:31:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:D9:A4:56:E3:4C:F0:B2:0E:03:52:73:51:53:09:1E:82:3F:16
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:a3:1b:a3:ad:62:d3:64:7f:2a:a8:39:2c:ca:17:e0:be:
29:06:9f:6a:06:1e:86:33:9e:1a:b1:77:75:4b:6d:27:69:cf:
a0:ca:c3:6b:60:3e:2e:cd:68:5f:b3:55:35:90:5c:a2:13:21:
c0:ed:46:93:f5:ce:f2:71:38:f1:07:5b:28:21:e5:b3:cd:7c:
da:c9:0c:04:24:15:f7:77:f2:42:2b:99:ed:34:b4:46:32:10:
e9:b8:d9:dc:12:6b:58:69:a2:d6:52:eb:dc:c2:05:05:be:44:
0d:85:bc:25:08:f8:f8:4c:2f:33:30:24:61:c5:70:c1:f4:c5:
20:8f:5a:2e:fa:c5:8d:39:8d:e7:82:7e:a2:36:c7:af:f2:e4:
f5:f3:32:76:98:a6:5f:68:b2:45:46:9c:e6:a9:71:c1:97:61:
7f:32:25:c0:9f:05:63:44:d9:77:fd:5e:ff:7a:d3:4c:60:2e:
42:97:86:5a:ea:86:28:a3:a8:ca:c2:40:0b:dd:6d:48:69:b0:
52:84:8b:33:d2:2a:7c:13:27:ff:b2:d3:71:97:33:97:7f:7e:
ae:71:e5:e3:bb:2b:49:ff:e7:09:69:ca:76:4b:54:dd:f8:1d:
6f:ed:47:17:0a:82:e1:a0:a4:6a:2f:cf:d4:93:23:3d:56:ad:
03:ca:b9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HfF2heHOw1gCVTkNKvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjUxMTA0MTMwMDM1WhcNMjUxMTA1MTMwMDM1WjAzMTEwLwYDVQQD
EyhhZjk5ZDlhNDU2ZTM0Y2YwYjIwZTAzNTI3MzUxNTMwOTFlODIzZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0UM6QahVglYT66sqkvqUbiYFfGE
0EEqEEFV/U6gf72+SJ2wZLZHvnm0ivIrogCd1o1A1o10ATi3Wyz/X00yWp8lB4mi
UxUsuuMuTW5wk+whiTGfLNnSivFvnk6YcKepz7+wnjruUz8EFDAMFnvTlhxB8x98
ZqG15oHr69u7jXSmzU79+TXwOny9MkuYFAw86Hbt8XkKhNNMsv3P5b6qUEpqo6nc
sWwu4e4zOmUC1sD1PqFY5fulgOCQaJApycOR4T39WnbeI51lbs052EphYAj9toGM
QrayUh0Fa20LheEghmIOycitE7HfaPWZgMaw4dNZUnHkHm2NxtHTlDFTfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+Z2aRW40zwsg4DUnNRUwkegj8WMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYECjG6Ot
YtNkfyqoOSzKF+C+KQafagYehjOeGrF3dUttJ2nPoMrDa2A+Ls1oX7NVNZBcohMh
wO1Gk/XO8nE48QdbKCHls8182skMBCQV93fyQiuZ7TS0RjIQ6bjZ3BJrWGmi1lLr
3MIFBb5EDYW8JQj4+EwvMzAkYcVwwfTFII9aLvrFjTmN54J+ojbHr/Lk9fMydpim
X2iyRUac5qlxwZdhfzIlwJ8FY0TZd/1e/3rTTGAuQpeGWuqGKKOoysJAC91tSGmw
UoSLM9IqfBMn/7LTcZczl39+rnHl47srSf/nCWnKdktU3fgdb+1HFwqC4aCkai/P
1JMjPVatA8q59g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:50 2025 by rpki-client