Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: RITgkVcm1aZjSjr7rHi6ujBeKs8XbJrQZcyDg/8KXyE=
Subject key identifier: FB:DD:D0:1E:F7:BE:07:52:2F:21:CE:2B:CD:E5:B6:64:86:0D:36:6D
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019A54F61675CF8A38C8535BC44A21C54606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 0659
Signing time: Wed 05 Nov 2025 17:00:04 +0000
Manifest this update: Wed 05 Nov 2025 17:00:04 +0000
Manifest next update: Thu 06 Nov 2025 17:00:04 +0000
Files and hashes: 1: f1ExHnnpEtCBbKoz7AnZOPhegIQ.roa (hash: tpDqxgdQcG2Fws3Zh018Pk/IwRSbsjhgaDj2i2YW1RE=)
2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: lSqGAfqzLhyi1FAKE9NLieyOjyGvRp8wH45k9UOt/0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:16:75:cf:8a:38:c8:53:5b:c4:4a:21:c5:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Nov 5 17:00:04 2025 GMT
Not After : Nov 6 17:00:04 2025 GMT
Subject: CN=fbddd01ef7be07522f21ce2bcde5b664860d366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:86:94:29:68:ad:74:b1:ce:b9:da:01:e8:
ef:8c:c7:65:b6:18:c1:1f:2c:b8:9d:ed:80:56:1a:
4c:1d:d5:21:16:b8:f6:1b:d6:c3:ad:0e:db:47:6e:
88:a2:09:96:44:b3:ed:b6:43:1d:3d:1f:49:25:34:
16:0f:90:8e:13:ae:71:e3:b5:46:63:4c:66:a1:a8:
82:b5:38:95:0b:92:6a:f6:0c:b8:0d:a9:32:4d:7d:
7d:30:99:20:51:5f:92:18:de:67:80:e6:ec:e0:c9:
9d:ba:c2:42:f5:4d:0d:bf:15:1b:94:61:65:ef:ee:
16:d6:11:c5:7b:ee:02:bb:14:8a:1d:aa:a5:a2:00:
a2:36:be:f6:fc:83:a2:74:7f:49:5c:51:d6:2c:30:
e0:05:d6:6f:26:b0:df:c1:60:e9:22:50:f2:68:7d:
ca:b0:ca:d5:19:2d:4e:8b:9f:9e:04:26:89:91:27:
d8:99:8c:21:7d:3d:47:d0:6f:ba:e8:d3:7b:ea:81:
a8:27:56:b2:84:74:96:27:1d:9d:f6:0f:d8:61:b8:
c7:68:9e:45:ed:b6:de:89:56:31:ab:e7:b6:06:0c:
e2:73:2f:de:7c:33:f8:d9:90:57:a3:ce:dd:10:73:
d7:ae:1c:25:cc:1a:3a:72:99:d6:77:b9:1b:78:5c:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:D0:1E:F7:BE:07:52:2F:21:CE:2B:CD:E5:B6:64:86:0D:36:6D
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:06:84:2a:11:d4:ee:28:78:68:30:97:72:98:3f:10:9c:
fd:6f:83:ef:78:12:8f:f0:ac:e2:c1:1e:36:30:60:b2:96:05:
2b:84:2e:44:64:81:e0:c3:dc:e7:0c:3c:9f:b8:d8:6b:73:c4:
92:ad:94:42:c1:2a:c5:c5:ad:a1:b7:a7:c2:d8:e6:a0:07:bc:
4a:87:b9:ff:02:05:e5:92:e3:03:cc:4c:2c:68:40:11:2f:88:
10:d3:93:21:b5:52:4f:9f:1f:95:4c:a5:2e:0f:ba:9b:b8:78:
96:f7:bb:07:82:21:7b:77:f9:9a:a8:99:bb:78:d6:8c:39:f9:
91:bb:d5:d1:b7:9d:81:d9:4c:bf:ce:19:68:a7:73:a4:83:8f:
2b:9b:2c:b2:47:3d:4d:36:1e:e8:50:18:ab:6c:10:4c:11:11:
33:0c:ee:b5:ae:45:93:23:22:76:05:04:cb:91:de:e6:c6:92:
b1:a9:ad:ae:6d:1e:cd:7f:cf:89:b2:66:37:8e:21:41:95:16:
85:2c:f5:0f:fc:1f:d9:1f:6a:fa:1c:d1:3e:1f:d1:cb:96:f1:
5e:51:73:3f:34:00:ae:0f:b7:8a:b6:71:ef:6b:9d:99:00:71:
0c:cd:d7:c6:18:dd:25:67:27:89:07:29:d5:54:47:85:bf:c2:
a1:be:9a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9hZ1z4o4yFNbxEohxUYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzNmYzQwZDJlMDMzM2JiYzdiZGVhYjJiZDg1OTk1NDMw
MWMwZjEwHhcNMjUxMTA1MTcwMDA0WhcNMjUxMTA2MTcwMDA0WjAzMTEwLwYDVQQD
EyhmYmRkZDAxZWY3YmUwNzUyMmYyMWNlMmJjZGU1YjY2NDg2MGQzNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApueGlClorXSxzrnaAejvjMdlthjB
Hyy4ne2AVhpMHdUhFrj2G9bDrQ7bR26IogmWRLPttkMdPR9JJTQWD5COE65x47VG
Y0xmoaiCtTiVC5Jq9gy4DakyTX19MJkgUV+SGN5ngObs4MmdusJC9U0NvxUblGFl
7+4W1hHFe+4CuxSKHaqlogCiNr72/IOidH9JXFHWLDDgBdZvJrDfwWDpIlDyaH3K
sMrVGS1Oi5+eBCaJkSfYmYwhfT1H0G+66NN76oGoJ1ayhHSWJx2d9g/YYbjHaJ5F
7bbeiVYxq+e2Bgzicy/efDP42ZBXo87dEHPXrhwlzBo6cpnWd7kbeFyb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvd0B73vgdSLyHOK83ltmSGDTZtMB8GA1UdIwQY
MBaAFH8z/EDS4DM7vHveqyvYWZVDAcDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQt
Nzk3OTBkNjZkN2QzLzEvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQtNzk3OTBkNjZkN2Qz
LzEvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1AGhCoR
1O4oeGgwl3KYPxCc/W+D73gSj/Cs4sEeNjBgspYFK4QuRGSB4MPc5ww8n7jYa3PE
kq2UQsEqxcWtobenwtjmoAe8Soe5/wIF5ZLjA8xMLGhAES+IENOTIbVST58flUyl
Lg+6m7h4lve7B4Ihe3f5mqiZu3jWjDn5kbvV0bedgdlMv84ZaKdzpIOPK5ssskc9
TTYe6FAYq2wQTBERMwzuta5FkyMidgUEy5He5saSsamtrm0ezX/PibJmN44hQZUW
hSz1D/wf2R9q+hzRPh/Ry5bxXlFzPzQArg+3irZx72udmQBxDM3XxhjdJWcniQcp
1VRHhb/Cob6adQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:53 2025 by rpki-client