Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: aq03YkHcuicCXMnvIyqt3z8kT+fm6CMv6HTgXLQatQo=
Subject key identifier: 6F:69:C2:AA:49:AB:56:16:C7:27:8A:79:D3:34:3F:C3:38:7D:04:F0
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019A4DE2175C4ACF4E43A01C29ED60BCF60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: bTN5wzTGYdXkHzGKU9Tb+hsW/1UbuU2RN3m9rDGEQG8=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:17:5c:4a:cf:4e:43:a0:1c:29:ed:60:bc:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=6f69c2aa49ab5616c7278a79d3343fc3387d04f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:c8:94:07:43:77:9f:8a:43:82:c0:4c:c2:
13:6a:06:89:d5:30:7b:4f:32:7e:26:e3:85:96:67:
0d:a7:0e:52:df:71:a1:43:ad:f1:33:d8:fd:c1:f0:
ff:d2:a7:88:0a:4a:f9:30:e1:bb:a0:be:d7:23:c9:
58:cb:72:63:ca:76:6b:c5:e4:e3:dc:00:7c:d4:d1:
01:9e:44:89:99:12:d9:42:d3:df:47:b7:a4:d2:44:
12:27:f7:e7:56:ca:94:35:79:4e:28:59:4f:28:0c:
d5:8e:b9:be:06:f0:e3:38:cd:d8:c0:c9:b3:c8:1f:
99:b2:09:3d:74:48:d1:b8:20:77:45:f2:65:cc:3f:
6d:1b:7e:00:e5:b5:ef:0a:26:95:b3:68:ea:e2:25:
2e:a7:85:a3:80:7f:52:15:52:25:7a:4f:8a:37:45:
25:1e:b5:8c:5d:ef:81:72:ab:75:1a:a1:a0:4a:37:
2d:8a:74:f6:de:c1:4c:9e:e0:1f:62:f3:9a:be:f6:
64:33:f2:66:1b:0f:f7:7d:6f:02:1d:6d:77:14:f6:
72:94:d8:d0:4c:f0:da:e9:fe:a8:8e:32:b2:05:51:
6f:2c:f8:b5:b6:a1:39:4c:e4:6c:9c:f7:cb:47:15:
94:08:ec:15:8d:31:36:21:ac:db:61:18:6f:fa:69:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:C2:AA:49:AB:56:16:C7:27:8A:79:D3:34:3F:C3:38:7D:04:F0
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:f4:d3:7e:b9:45:c5:30:4c:ea:df:29:1d:2b:96:08:44:
2f:fe:0e:5d:19:5c:b4:1b:c5:11:64:20:20:36:97:6b:e3:31:
e4:8c:52:62:5a:2c:56:a2:04:fb:6d:92:57:bc:14:29:a7:fa:
5b:08:c7:c9:e1:00:71:25:07:75:fa:c8:21:68:00:8b:02:7a:
dd:0e:b5:63:9a:d0:ca:34:aa:a0:2c:0a:f0:72:04:9a:cb:f5:
1f:c4:d6:f2:df:34:81:1c:ee:d0:f8:d8:68:0f:78:8b:fd:66:
07:dc:ed:89:5b:52:b0:43:a3:0d:0d:54:df:01:58:e6:23:2f:
ce:e5:79:77:c7:6c:ce:a1:e1:81:99:14:b9:49:d6:cb:78:96:
26:0f:86:be:0c:13:52:63:4e:93:51:24:e2:b8:84:b8:79:d0:
78:b6:8a:06:d5:d2:65:0f:17:7c:94:64:03:dd:f2:f3:8a:44:
2e:9d:3e:6d:a0:59:d2:45:a2:3d:52:cd:58:a5:04:3a:3d:50:
f1:d2:fa:b1:d4:1b:0c:ed:df:c7:bb:50:ff:67:e6:13:cd:32:
8d:69:76:42:28:47:c3:b6:95:7c:00:34:bd:c2:1b:ea:a0:40:
f8:82:7e:fd:16:08:b5:23:20:66:56:ea:5c:fb:2b:52:dd:0c:
41:30:7f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hdcSs9OQ6AcKe1gvPYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUxMTA0MDgwMDU0WhcNMjUxMTA1MDgwMDU0WjAzMTEwLwYDVQQD
Eyg2ZjY5YzJhYTQ5YWI1NjE2YzcyNzhhNzlkMzM0M2ZjMzM4N2QwNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEjIlAdDd5+KQ4LATMITagaJ1TB7
TzJ+JuOFlmcNpw5S33GhQ63xM9j9wfD/0qeICkr5MOG7oL7XI8lYy3JjynZrxeTj
3AB81NEBnkSJmRLZQtPfR7ek0kQSJ/fnVsqUNXlOKFlPKAzVjrm+BvDjOM3YwMmz
yB+Zsgk9dEjRuCB3RfJlzD9tG34A5bXvCiaVs2jq4iUup4WjgH9SFVIlek+KN0Ul
HrWMXe+Bcqt1GqGgSjctinT23sFMnuAfYvOavvZkM/JmGw/3fW8CHW13FPZylNjQ
TPDa6f6ojjKyBVFvLPi1tqE5TORsnPfLRxWUCOwVjTE2IazbYRhv+mnEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9pwqpJq1YWxyeKedM0P8M4fQTwMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFD00365
RcUwTOrfKR0rlghEL/4OXRlctBvFEWQgIDaXa+Mx5IxSYlosVqIE+22SV7wUKaf6
WwjHyeEAcSUHdfrIIWgAiwJ63Q61Y5rQyjSqoCwK8HIEmsv1H8TW8t80gRzu0PjY
aA94i/1mB9ztiVtSsEOjDQ1U3wFY5iMvzuV5d8dszqHhgZkUuUnWy3iWJg+GvgwT
UmNOk1Ek4riEuHnQeLaKBtXSZQ8XfJRkA93y84pELp0+baBZ0kWiPVLNWKUEOj1Q
8dL6sdQbDO3fx7tQ/2fmE80yjWl2QihHw7aVfAA0vcIb6qBA+IJ+/RYItSMgZlbq
XPsrUt0MQTB/Lw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:27 2025 by rpki-client