Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: 3GzayC1ikU36VaVA2yRfNNKjeEWW3sVXRLZfZ04s6ZA=
Subject key identifier: 6F:D1:79:6D:8B:92:C3:DB:2D:14:E9:12:DA:27:A3:48:83:F7:D4:3F
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019A5262ED128F3FAC4B60D79FD5DD2202EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 05:00:05 +0000
Manifest this update: Wed 05 Nov 2025 05:00:05 +0000
Manifest next update: Thu 06 Nov 2025 05:00:05 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: XxD5WLT47MvrVs3hEGZ0+jubi5MiXjD1xcX1zuQ0Ufw=)
2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:ed:12:8f:3f:ac:4b:60:d7:9f:d5:dd:22:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Nov 5 05:00:05 2025 GMT
Not After : Nov 6 05:00:05 2025 GMT
Subject: CN=6fd1796d8b92c3db2d14e912da27a34883f7d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:e8:64:d7:9b:76:38:5a:ce:c6:6e:9a:95:
35:90:9c:e0:00:3c:4c:eb:d4:8c:74:83:b7:0c:d2:
22:2b:ad:86:ec:96:d5:8e:98:62:ce:ed:e7:f0:de:
b5:c4:b6:7e:2f:7e:c7:b0:a6:0d:ef:47:cb:cd:12:
77:35:1b:37:f2:a6:a2:6d:1e:d9:fc:c8:1c:a4:00:
3b:0e:a8:6b:4d:cb:e1:49:1e:00:47:09:7f:30:2f:
b8:16:0f:a7:03:ce:d9:27:11:40:93:5e:d2:59:58:
0d:34:e3:be:69:ed:83:ca:14:e9:5e:d5:a4:2b:ab:
cc:8f:e6:e4:d6:c5:a7:68:4d:a8:b1:08:f2:ce:41:
99:aa:82:44:db:d5:a5:3d:7c:e8:e6:29:69:dd:43:
0f:5c:de:da:00:ae:1f:6e:aa:a9:7f:09:5e:7b:51:
7c:04:12:a5:ac:3c:64:f4:68:8f:d7:de:0c:4d:f7:
16:94:af:63:d5:5d:9d:1a:b7:94:37:c8:2b:b1:73:
bd:7a:a0:fb:3f:d0:2a:97:bc:2f:71:ee:e6:70:cb:
eb:9f:68:52:fa:6e:65:19:e2:8d:4f:5e:bb:2f:c2:
16:0f:81:d3:7f:3b:a6:77:8e:7b:ee:40:fb:72:72:
8a:be:e4:e9:38:dd:72:07:03:34:e9:30:6d:36:13:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:79:6D:8B:92:C3:DB:2D:14:E9:12:DA:27:A3:48:83:F7:D4:3F
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e0:4a:aa:1b:b8:7b:dc:d4:51:d7:18:95:13:e5:10:1e:67:
e5:6a:ee:93:9b:ea:2e:51:49:ba:4e:e4:c0:80:06:3e:5f:2c:
ee:8c:be:99:54:eb:ee:3f:fc:c8:3e:40:f0:3e:80:e6:5a:cf:
de:ce:74:93:81:3f:39:97:1b:e3:b6:97:b1:06:10:15:1a:47:
38:77:dc:ae:05:21:a7:d2:19:47:5a:b6:08:55:98:d1:a3:9f:
3e:72:4b:91:5f:63:2f:1b:3e:f5:21:aa:40:2d:d6:e9:ac:cc:
1d:1c:15:5f:14:37:dd:bc:c2:ef:fe:5e:1e:cd:3b:3a:04:62:
3a:c1:40:c0:9c:3d:0c:23:3e:ac:a1:4d:f7:a3:d7:0b:bf:db:
cf:a4:e2:81:3c:ea:4e:de:c3:fb:2d:a5:6c:d2:46:d4:d5:75:
bd:25:09:e9:c9:6f:76:2b:52:fa:4b:8e:85:81:91:89:b5:bb:
7a:94:b1:48:a5:8f:d0:04:42:92:7c:4e:66:89:a5:1d:49:b7:
28:00:31:91:ae:7f:ab:96:71:5e:81:2b:2e:37:5b:87:f7:cf:
75:14:85:2f:e8:ff:f9:6b:95:d7:1a:2a:0d:cc:ca:da:77:1d:
fa:62:ef:74:2c:dd:91:51:cf:fc:46:ad:07:a1:58:3f:db:3c:
5b:b1:d1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYu0Sjz+sS2DXn9XdIgLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDZiNGY5ZmQ1MTY4ZWI3NzgxZTgyNGIxNDUzZTk5ZjVl
NjU1M2MwHhcNMjUxMTA1MDUwMDA1WhcNMjUxMTA2MDUwMDA1WjAzMTEwLwYDVQQD
Eyg2ZmQxNzk2ZDhiOTJjM2RiMmQxNGU5MTJkYTI3YTM0ODgzZjdkNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7noZNebdjhazsZumpU1kJzgADxM
69SMdIO3DNIiK62G7JbVjphizu3n8N61xLZ+L37HsKYN70fLzRJ3NRs38qaibR7Z
/MgcpAA7DqhrTcvhSR4ARwl/MC+4Fg+nA87ZJxFAk17SWVgNNOO+ae2DyhTpXtWk
K6vMj+bk1sWnaE2osQjyzkGZqoJE29WlPXzo5ilp3UMPXN7aAK4fbqqpfwlee1F8
BBKlrDxk9GiP194MTfcWlK9j1V2dGreUN8grsXO9eqD7P9Aql7wvce7mcMvrn2hS
+m5lGeKNT167L8IWD4HTfzumd4577kD7cnKKvuTpON1yBwM06TBtNhM+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/ReW2LksPbLRTpEtono0iD99Q/MB8GA1UdIwQY
MBaAFBQGtPn9UWjrd4HoJLFFPpn15lU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAt
YzE2MTI0NmM4MjVhLzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAtYzE2MTI0NmM4MjVh
LzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeBKqhu4
e9zUUdcYlRPlEB5n5Wruk5vqLlFJuk7kwIAGPl8s7oy+mVTr7j/8yD5A8D6A5lrP
3s50k4E/OZcb47aXsQYQFRpHOHfcrgUhp9IZR1q2CFWY0aOfPnJLkV9jLxs+9SGq
QC3W6azMHRwVXxQ33bzC7/5eHs07OgRiOsFAwJw9DCM+rKFN96PXC7/bz6TigTzq
Tt7D+y2lbNJG1NV1vSUJ6clvditS+kuOhYGRibW7epSxSKWP0ARCknxOZomlHUm3
KAAxka5/q5ZxXoErLjdbh/fPdRSFL+j/+WuV1xoqDczK2ncd+mLvdCzdkVHP/Eat
B6FYP9s8W7HR4Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:38 2025 by rpki-client