Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: ZjUwpONACq2w7vSLFthlzEO5FOL6vXsJB/+OOay8ZBg=
Subject key identifier: D9:84:C0:10:2E:0B:88:9A:90:C0:9F:51:AF:54:2B:E0:B4:AF:4C:D6
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019A4DE17E0D822573AC4876F45DE9B84493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 05D4
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 3WxSN078LF8D9qWXgj+McWM6t566FH+cqtH3UnAcRvo=)
2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7e:0d:82:25:73:ac:48:76:f4:5d:e9:b8:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=d984c0102e0b889a90c09f51af542be0b4af4cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:02:18:fe:bc:88:55:f4:2f:82:99:a0:30:
dd:2a:9e:66:b8:65:26:27:91:15:5f:20:d5:38:f6:
2c:08:81:ea:ce:3d:84:4e:86:94:3a:e4:01:57:e4:
e4:fd:e6:67:33:9a:db:3f:83:e9:d9:15:5b:3f:df:
17:a3:c4:ec:76:03:a2:a4:2e:e3:d9:39:af:c5:bd:
b9:50:c3:83:3d:d7:51:60:41:33:37:a8:47:01:78:
b5:6c:9e:3a:83:32:b5:d4:15:7c:ab:95:45:f3:7e:
65:70:60:dc:e1:56:f3:de:bf:43:13:de:41:4c:27:
8a:cd:fa:56:34:91:3c:54:b9:17:bd:a3:c7:2a:b4:
74:47:a7:12:6f:c9:bb:5f:ff:7d:ef:eb:a1:8f:f1:
c7:5d:bf:7d:a3:55:4a:a7:c8:ac:55:32:f9:d2:52:
43:61:11:ea:25:2e:8b:39:04:dd:62:f4:4b:b7:f9:
0f:31:23:fb:e4:a9:62:f5:3d:cd:f2:50:d5:65:42:
34:66:63:93:c1:b7:65:59:d8:03:64:5a:c7:86:74:
38:76:5e:f1:66:55:00:f8:cd:b2:16:ca:85:02:94:
4a:15:9e:60:81:a5:d7:62:80:5e:85:9c:23:35:d9:
11:cc:71:50:77:52:86:62:b9:d5:40:25:e3:b7:e7:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:C0:10:2E:0B:88:9A:90:C0:9F:51:AF:54:2B:E0:B4:AF:4C:D6
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c6:da:5c:95:24:e5:6c:7d:8e:2a:34:74:a5:d5:6e:44:56:
f6:f1:b2:93:13:6e:75:59:ab:d6:99:8e:0a:18:43:de:19:a5:
af:c8:5a:e3:53:fd:99:d6:7a:5b:59:a8:18:41:26:d7:dc:fe:
b7:e4:ed:01:6b:c6:0b:73:b9:b0:17:a5:45:9e:04:80:10:b6:
46:20:ac:68:59:2b:6e:9d:4d:6f:6f:7b:a9:0c:b6:66:0d:56:
d4:d0:de:c8:9b:44:15:35:56:03:7d:d6:7f:2f:1e:de:10:60:
cb:69:92:46:65:95:35:6b:71:6f:ff:07:ab:52:cb:82:3f:29:
05:b7:c7:63:59:3a:8d:ee:5a:d0:c2:3b:b5:77:a4:5e:22:c9:
52:7e:c1:34:1f:4c:d2:5a:03:91:ca:e6:6e:4d:30:35:de:45:
28:ec:87:44:c4:6c:62:0a:8c:b3:c0:9d:cf:0f:7c:3b:c6:31:
4e:7e:7b:9c:66:c3:b9:af:2e:b0:68:f3:de:ce:0a:08:75:fa:
2c:9e:7d:a0:ad:36:e7:51:ec:1a:bb:57:94:a8:db:4c:76:e8:
bb:e5:ee:10:7f:ba:30:86:82:38:2b:30:5f:bf:35:08:02:53:
17:75:ca:65:f3:3e:75:0c:19:fe:7e:ff:5b:22:78:68:42:e0:
bd:ae:32:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4X4NgiVzrEh29F3puESTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUxMTA0MDgwMDE0WhcNMjUxMTA1MDgwMDE0WjAzMTEwLwYDVQQD
EyhkOTg0YzAxMDJlMGI4ODlhOTBjMDlmNTFhZjU0MmJlMGI0YWY0Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YCGP68iFX0L4KZoDDdKp5muGUm
J5EVXyDVOPYsCIHqzj2EToaUOuQBV+Tk/eZnM5rbP4Pp2RVbP98Xo8TsdgOipC7j
2Tmvxb25UMODPddRYEEzN6hHAXi1bJ46gzK11BV8q5VF835lcGDc4Vbz3r9DE95B
TCeKzfpWNJE8VLkXvaPHKrR0R6cSb8m7X/997+uhj/HHXb99o1VKp8isVTL50lJD
YRHqJS6LOQTdYvRLt/kPMSP75Kli9T3N8lDVZUI0ZmOTwbdlWdgDZFrHhnQ4dl7x
ZlUA+M2yFsqFApRKFZ5ggaXXYoBehZwjNdkRzHFQd1KGYrnVQCXjt+c0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmEwBAuC4iakMCfUa9UK+C0r0zWMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8baXJUk
5Wx9jio0dKXVbkRW9vGykxNudVmr1pmOChhD3hmlr8ha41P9mdZ6W1moGEEm19z+
t+TtAWvGC3O5sBelRZ4EgBC2RiCsaFkrbp1Nb297qQy2Zg1W1NDeyJtEFTVWA33W
fy8e3hBgy2mSRmWVNWtxb/8Hq1LLgj8pBbfHY1k6je5a0MI7tXekXiLJUn7BNB9M
0loDkcrmbk0wNd5FKOyHRMRsYgqMs8Cdzw98O8YxTn57nGbDua8usGjz3s4KCHX6
LJ59oK0251HsGrtXlKjbTHbou+XuEH+6MIaCOCswX781CAJTF3XKZfM+dQwZ/n7/
WyJ4aELgva4yyw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:43 2025 by rpki-client