Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: kZSb++Q4+QtdLzH6dT7blhABTg31SbxeQojfskNQHn8=
Subject key identifier: 68:D1:60:5F:A3:A9:D7:D4:2B:4F:50:DA:E0:13:A3:17:1F:92:A5:3F
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 019A4F62D5F22BA69B7333DDE53E9A4A762F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0D00
Signing time: Tue 04 Nov 2025 15:01:08 +0000
Manifest this update: Tue 04 Nov 2025 15:01:08 +0000
Manifest next update: Wed 05 Nov 2025 15:01:08 +0000
Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: NH8mL7bPmu9XNDYU+44zRuENXEOpLwkADf8UplswdYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d5:f2:2b:a6:9b:73:33:dd:e5:3e:9a:4a:76:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Nov 4 15:01:08 2025 GMT
Not After : Nov 5 15:01:08 2025 GMT
Subject: CN=68d1605fa3a9d7d42b4f50dae013a3171f92a53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:ea:58:3c:37:7c:0f:af:4b:72:ab:c4:f3:
ad:1a:d9:f4:de:de:5d:4e:7c:8f:6f:9e:03:69:8b:
2b:fb:60:7b:00:6b:50:ea:e9:44:42:5b:dd:9f:3a:
1c:95:81:82:65:f7:37:92:83:46:5e:44:27:b6:7b:
ab:05:73:5d:3b:73:5a:c5:34:be:06:27:a3:00:93:
87:99:2a:ce:6d:91:0b:2e:18:a7:c5:8a:1c:7d:8c:
8d:1d:f3:e5:ae:6f:82:64:ad:e4:e4:ae:0d:ee:29:
e0:42:03:5b:35:2b:08:2b:88:da:9c:1e:33:1e:11:
50:d3:d0:37:e1:1a:a6:7f:a5:8a:e4:62:8b:f3:5b:
10:a8:74:05:6e:a4:64:26:11:0b:07:7b:ee:16:79:
27:d0:7e:e6:f2:fb:5e:23:aa:06:bc:d3:9d:cb:26:
65:b0:43:e2:2e:07:29:fb:2e:80:25:29:06:c5:01:
55:2f:98:7d:58:9d:69:01:0d:2a:3f:d8:fc:71:10:
49:69:eb:52:fd:f8:27:22:84:dc:9a:c3:98:bb:26:
24:8f:c7:c0:83:df:b0:0e:67:8b:59:1f:fa:49:a6:
91:da:56:67:6c:c5:52:de:28:e0:43:35:0c:32:af:
32:3d:7f:0f:c2:32:5f:1e:80:d8:bd:be:a8:ee:f3:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:60:5F:A3:A9:D7:D4:2B:4F:50:DA:E0:13:A3:17:1F:92:A5:3F
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:81:40:9f:67:fd:bc:59:31:a4:35:ae:e0:05:78:a6:4a:b0:
e0:cd:03:0b:4d:cd:3b:d7:0b:c8:2b:8a:23:26:1c:33:0a:75:
d6:73:8e:44:17:ae:1a:0b:7d:31:69:92:62:1f:9c:b8:a8:a1:
84:7c:1a:ff:5e:b8:91:30:df:70:53:36:af:5a:8d:de:df:92:
94:10:13:87:fc:99:4b:21:ef:e0:03:59:77:57:22:e9:4e:df:
f6:f9:c5:1e:17:fc:76:47:a6:53:9e:29:72:af:be:52:49:1c:
00:a3:be:85:56:92:d9:61:cc:f2:ce:7c:5f:d3:5f:bd:e3:55:
1d:0f:65:ce:c2:a4:b7:31:76:e8:c8:ef:f0:9f:60:d6:43:5e:
f5:b3:47:02:b6:2d:b6:22:1f:b1:d1:28:84:2c:0b:0e:ef:97:
7c:69:48:b7:7b:e7:27:56:75:b9:59:4f:f7:b1:58:c1:5b:7f:
a8:ab:d8:9a:0f:c1:e4:9e:64:40:b8:5e:47:97:a3:da:c0:df:
cd:47:e1:91:01:96:5c:4d:6f:1e:51:ad:6d:98:0a:40:55:9b:
39:c7:cb:de:d6:ee:fc:01:dc:6f:2b:04:af:95:92:9d:14:97:
78:1d:2b:da:f7:34:be:94:1a:8f:b7:40:46:54:7a:54:3a:b6:
dd:70:c1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYtXyK6abczPd5T6aSnYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA5ZmVhODFlMzk4ZmVkOTMwNDlkZDdhMDA3ZWZkNjk3
MzU1NjMwHhcNMjUxMTA0MTUwMTA4WhcNMjUxMTA1MTUwMTA4WjAzMTEwLwYDVQQD
Eyg2OGQxNjA1ZmEzYTlkN2Q0MmI0ZjUwZGFlMDEzYTMxNzFmOTJhNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieXqWDw3fA+vS3KrxPOtGtn03t5d
TnyPb54DaYsr+2B7AGtQ6ulEQlvdnzoclYGCZfc3koNGXkQntnurBXNdO3NaxTS+
BiejAJOHmSrObZELLhinxYocfYyNHfPlrm+CZK3k5K4N7ingQgNbNSsIK4janB4z
HhFQ09A34Rqmf6WK5GKL81sQqHQFbqRkJhELB3vuFnkn0H7m8vteI6oGvNOdyyZl
sEPiLgcp+y6AJSkGxQFVL5h9WJ1pAQ0qP9j8cRBJaetS/fgnIoTcmsOYuyYkj8fA
g9+wDmeLWR/6SaaR2lZnbMVS3ijgQzUMMq8yPX8PwjJfHoDYvb6o7vPV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjRYF+jqdfUK09Q2uAToxcfkqU/MB8GA1UdIwQY
MBaAFH6Qn+qB45j+2TBJ3XoAfv1pc1VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYt
ODM3MDYzNzhjNTc2LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYtODM3MDYzNzhjNTc2
LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoFAn2f9
vFkxpDWu4AV4pkqw4M0DC03NO9cLyCuKIyYcMwp11nOORBeuGgt9MWmSYh+cuKih
hHwa/164kTDfcFM2r1qN3t+SlBATh/yZSyHv4ANZd1ci6U7f9vnFHhf8dkemU54p
cq++UkkcAKO+hVaS2WHM8s58X9NfveNVHQ9lzsKktzF26Mjv8J9g1kNe9bNHArYt
tiIfsdEohCwLDu+XfGlIt3vnJ1Z1uVlP97FYwVt/qKvYmg/B5J5kQLheR5ej2sDf
zUfhkQGWXE1vHlGtbZgKQFWbOcfL3tbu/AHcbysEr5WSnRSXeB0r2vc0vpQaj7dA
RlR6VDq23XDBfg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:43 2025 by rpki-client