Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: zVug+4noo3qRDUJNemU/DZXogJiAr+zaiI7bdQBo7lE=
Subject key identifier: D4:2C:B0:DC:BF:D8:EE:A8:AC:96:F4:8A:BE:65:59:A8:A0:72:CE:5B
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019A4E4F439CEA7C21EF267071E96C9A674E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: 6znNS1FZ6c/uG4UJdfjAhTh5eg36PpANKXIPQtxLLZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:43:9c:ea:7c:21:ef:26:70:71:e9:6c:9a:67:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=d42cb0dcbfd8eea8ac96f48abe6559a8a072ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:16:4f:2b:56:2c:8a:7c:b2:74:39:e6:07:
e0:25:2d:8b:23:36:57:3a:04:48:5b:8f:95:dd:08:
a7:46:bc:f4:c7:96:90:6d:d6:b2:35:ee:dc:85:f7:
6a:e7:04:33:49:ab:c3:70:06:e1:d4:c3:67:7f:41:
c5:2d:0b:b4:d7:39:0e:24:d1:db:79:26:94:25:4d:
69:85:bc:fc:d6:3f:7a:32:ba:28:4b:2e:4c:99:97:
27:4d:7c:af:8a:61:d1:3d:86:31:71:03:7f:03:c2:
03:0b:58:0b:5f:82:e6:12:5e:8a:25:fa:1c:37:11:
09:18:6a:63:5b:6e:d9:a5:6c:59:ac:30:65:eb:5c:
cf:02:27:0c:50:b8:57:bb:12:e4:5b:bf:3e:c8:91:
04:87:f6:b8:5b:31:82:49:b0:cd:60:e8:ae:ad:78:
45:d8:8e:c2:58:f9:21:14:31:83:d8:a6:8e:4b:06:
c7:33:cc:d5:93:12:7d:fb:96:3d:16:d8:54:f3:8d:
27:fb:43:9a:de:20:c9:91:73:51:a4:27:34:bf:b6:
a9:d2:aa:6b:e0:32:89:1a:b3:4c:dc:97:f8:d1:55:
1c:19:c1:a5:93:43:6d:4f:5d:c9:ba:c3:17:ab:4d:
69:3e:42:23:1b:55:f1:52:4f:cf:f7:64:fe:0c:8e:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:B0:DC:BF:D8:EE:A8:AC:96:F4:8A:BE:65:59:A8:A0:72:CE:5B
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:93:b4:51:31:9c:72:f9:0f:2f:6e:f0:0b:57:7e:73:af:
31:5a:32:86:d2:48:7c:19:1e:e1:88:fe:be:a2:76:81:31:c0:
50:fe:04:c1:f9:31:a4:c0:6e:36:fe:0c:a6:df:8f:b6:da:ed:
c2:97:c7:94:f6:15:74:50:12:e5:5f:42:a6:54:4d:2d:bd:6f:
38:27:73:c6:51:16:0b:10:ee:c1:15:38:df:45:95:b8:fd:4b:
1b:00:02:62:66:04:2a:79:b8:ef:ca:49:64:f4:f5:bd:09:8a:
4f:b8:b7:97:e9:dc:c8:8e:27:a9:e2:50:0d:9b:ad:5a:60:40:
de:26:02:5e:56:f2:8a:33:21:2b:7a:76:93:1f:3b:c7:8d:50:
0b:ed:e7:35:1c:df:17:33:53:3f:2a:7d:fc:65:53:22:16:cd:
b7:20:18:f4:0b:af:b6:16:2c:c1:ae:d4:67:a5:f0:3d:66:d6:
34:2a:43:e8:70:2b:98:ca:df:dc:44:19:b8:ad:b9:f8:e0:11:
a3:bb:4a:e3:2a:f0:23:b1:81:56:43:86:47:19:35:be:c2:e0:
7a:97:0b:82:e7:54:2b:b4:80:4e:69:74:f7:3b:65:e1:7d:bc:
bb:62:3b:98:b1:3a:de:5f:b9:8f:b6:63:f9:b2:d3:6a:59:dc:
b8:6d:5c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT0Oc6nwh7yZwcelsmmdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTBlNzU5MzU0ZTgzY2MxOTMyMDM4MTEwOWRlMjJkYTBm
MWE3MDAwHhcNMjUxMTA0MTAwMDA4WhcNMjUxMTA1MTAwMDA4WjAzMTEwLwYDVQQD
EyhkNDJjYjBkY2JmZDhlZWE4YWM5NmY0OGFiZTY1NTlhOGEwNzJjZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4WTytWLIp8snQ55gfgJS2LIzZX
OgRIW4+V3QinRrz0x5aQbdayNe7chfdq5wQzSavDcAbh1MNnf0HFLQu01zkOJNHb
eSaUJU1phbz81j96MrooSy5MmZcnTXyvimHRPYYxcQN/A8IDC1gLX4LmEl6KJfoc
NxEJGGpjW27ZpWxZrDBl61zPAicMULhXuxLkW78+yJEEh/a4WzGCSbDNYOiurXhF
2I7CWPkhFDGD2KaOSwbHM8zVkxJ9+5Y9FthU840n+0Oa3iDJkXNRpCc0v7ap0qpr
4DKJGrNM3Jf40VUcGcGlk0NtT13JusMXq01pPkIjG1XxUk/P92T+DI7ICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQssNy/2O6orJb0ir5lWaigcs5bMB8GA1UdIwQY
MBaAFH/g51k1ToPMGTIDgRCd4i2g8acAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEt
YjQwMmU4YTFkOTM0LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEtYjQwMmU4YTFkOTM0
LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlKTtFEx
nHL5Dy9u8AtXfnOvMVoyhtJIfBke4Yj+vqJ2gTHAUP4EwfkxpMBuNv4Mpt+Pttrt
wpfHlPYVdFAS5V9CplRNLb1vOCdzxlEWCxDuwRU430WVuP1LGwACYmYEKnm478pJ
ZPT1vQmKT7i3l+ncyI4nqeJQDZutWmBA3iYCXlbyijMhK3p2kx87x41QC+3nNRzf
FzNTPyp9/GVTIhbNtyAY9AuvthYswa7UZ6XwPWbWNCpD6HArmMrf3EQZuK25+OAR
o7tK4yrwI7GBVkOGRxk1vsLgepcLgudUK7SATml09ztl4X28u2I7mLE63l+5j7Zj
+bLTalncuG1c6w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:43 2025 by rpki-client