Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: rtfJ+4olIW7hJGuZA6VvJxitfLwrfYurtE4bkYPulhU=
Subject key identifier: 0F:4C:38:59:C4:B7:97:D1:A5:80:01:E5:2A:80:68:7F:6B:71:09:40
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 019A4DE19C33B7E7637EE75BF909FBC22566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: U72psLDZpu6Ja6HFIGds+NNfVcKgtLKm9DYkEmmpAX8=)
2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9c:33:b7:e7:63:7e:e7:5b:f9:09:fb:c2:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=0f4c3859c4b797d1a58001e52a80687f6b710940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:59:98:5e:99:fe:91:73:5f:75:f3:20:c8:
33:af:80:47:6b:9d:aa:d0:48:9c:0e:de:fa:18:d2:
6a:df:2a:60:ea:99:34:d6:75:03:f4:a2:27:88:8e:
f4:88:72:0b:43:48:b1:78:c4:ad:f1:95:a4:72:99:
78:8a:ac:50:81:9e:49:de:ac:e7:5d:ac:7f:e3:e2:
65:a7:1f:cd:42:01:ab:9d:0a:4d:74:b7:3a:d4:64:
5b:71:85:06:65:0c:08:f2:c1:eb:36:d7:df:aa:55:
9d:37:d6:83:ea:f5:3f:84:33:4d:e7:f5:e3:87:13:
cd:84:02:3f:5e:ba:b6:d3:51:d7:9c:7e:9b:62:ac:
b7:db:1d:d5:06:16:c0:3d:08:15:d4:02:57:d2:cb:
83:8a:7f:77:c1:85:59:c4:99:a9:de:e2:3b:7a:14:
3e:1e:21:82:e7:f8:a0:7d:47:b4:b3:06:23:fd:9f:
87:d9:8c:9a:4d:45:8e:82:37:9f:ac:69:7a:07:f7:
1a:5b:a1:b7:99:ce:a9:50:7f:c3:d8:d0:2b:32:91:
ac:90:4f:8d:a8:42:fb:43:8a:c0:b9:6d:53:db:ac:
05:fd:8b:5b:36:f4:28:1e:a8:2c:cd:16:95:81:0b:
ae:94:33:74:c7:67:fb:3f:7c:45:ad:ea:58:6d:99:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:38:59:C4:B7:97:D1:A5:80:01:E5:2A:80:68:7F:6B:71:09:40
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:5d:99:10:f4:ae:42:9c:34:c5:5a:fa:0b:23:d5:43:80:
be:5f:dc:01:7e:6b:93:c8:36:39:04:1d:6e:db:42:e1:29:67:
ef:bb:b6:cb:ee:4d:58:b0:4f:45:31:c3:54:33:3a:5b:3c:56:
3c:a7:c0:91:39:0f:28:c5:43:37:5d:3a:40:3a:3d:63:97:58:
64:ea:bd:72:ba:2a:bb:99:1f:6a:a4:03:e2:c2:f5:cb:1b:8c:
58:45:4b:b7:42:ec:80:16:44:79:cc:75:30:58:9a:88:57:1b:
0c:74:3e:88:21:40:48:67:37:d2:7b:a3:9c:83:a3:e1:e3:b1:
b4:1b:36:a7:d7:5e:4b:cc:82:ca:0d:94:7d:fc:1e:79:42:15:
bd:29:f6:3c:72:a9:5c:00:f7:92:e5:00:15:eb:c3:8f:8c:3a:
7f:8f:f3:ac:29:6a:f4:97:06:e1:39:89:bf:57:c4:d0:e3:cf:
03:1b:7d:6e:94:b5:a0:d5:ec:1e:7d:1b:cb:4c:ce:7a:20:a1:
83:be:d8:f6:14:62:2f:54:ec:7c:d5:36:33:d8:a2:43:72:88:
d4:9c:07:71:68:20:e9:05:55:5d:06:0b:0f:95:7b:be:1a:33:
95:df:31:e5:d2:11:d6:92:40:49:4d:50:4e:5f:2f:58:0d:83:
67:46:b1:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Zwzt+djfudb+Qn7wiVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5
Yjg2ZDUwHhcNMjUxMTA0MDgwMDIyWhcNMjUxMTA1MDgwMDIyWjAzMTEwLwYDVQQD
EygwZjRjMzg1OWM0Yjc5N2QxYTU4MDAxZTUyYTgwNjg3ZjZiNzEwOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq1ZmF6Z/pFzX3XzIMgzr4BHa52q
0EicDt76GNJq3ypg6pk01nUD9KIniI70iHILQ0ixeMSt8ZWkcpl4iqxQgZ5J3qzn
Xax/4+Jlpx/NQgGrnQpNdLc61GRbcYUGZQwI8sHrNtffqlWdN9aD6vU/hDNN5/Xj
hxPNhAI/Xrq201HXnH6bYqy32x3VBhbAPQgV1AJX0suDin93wYVZxJmp3uI7ehQ+
HiGC5/igfUe0swYj/Z+H2YyaTUWOgjefrGl6B/caW6G3mc6pUH/D2NArMpGskE+N
qEL7Q4rAuW1T26wF/YtbNvQoHqgszRaVgQuulDN0x2f7P3xFrepYbZn6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9MOFnEt5fRpYAB5SqAaH9rcQlAMB8GA1UdIwQY
MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt
ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw
LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqD9dmRD0
rkKcNMVa+gsj1UOAvl/cAX5rk8g2OQQdbttC4Sln77u2y+5NWLBPRTHDVDM6WzxW
PKfAkTkPKMVDN106QDo9Y5dYZOq9croqu5kfaqQD4sL1yxuMWEVLt0LsgBZEecx1
MFiaiFcbDHQ+iCFASGc30nujnIOj4eOxtBs2p9deS8yCyg2UffweeUIVvSn2PHKp
XAD3kuUAFevDj4w6f4/zrClq9JcG4TmJv1fE0OPPAxt9bpS1oNXsHn0by0zOeiCh
g77Y9hRiL1TsfNU2M9iiQ3KI1JwHcWgg6QVVXQYLD5V7vhozld8x5dIR1pJASU1Q
Tl8vWA2DZ0axLg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:51 2025 by rpki-client