Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: ZP3jmvd194AYMiuZvFpzxxzwo49mPk5FY7WkPr5CnWs=
Subject key identifier: AA:F9:40:B3:32:D5:9E:F9:F1:0A:C4:C7:D2:8A:DF:D9:B5:1B:AE:61
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019A4F620DDED32BB726A8828CF879FB6ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0F67
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: 8bBceMe5vsIQfrTqLHDof4Fk61qtP/utvCuLRCGU9Yg=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0d:de:d3:2b:b7:26:a8:82:8c:f8:79:fb:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=aaf940b332d59ef9f10ac4c7d28adfd9b51bae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:34:48:f3:10:8d:7d:46:e7:03:aa:0f:23:
3a:a4:da:03:4b:68:40:60:c5:b7:4c:72:11:2b:0c:
db:47:c2:81:c7:f1:9c:de:d7:b0:55:09:56:7a:ff:
8d:9d:c4:9a:7a:46:26:80:2d:ce:97:c7:69:b6:ad:
eb:7c:79:05:eb:8b:8d:24:88:13:33:0f:ef:5b:61:
1f:4f:86:d6:4f:bc:14:6b:bf:10:35:8a:b9:11:ae:
bd:6b:79:bc:47:8a:69:70:8f:9b:21:84:ba:e0:87:
f5:16:a5:87:21:a9:37:d3:c4:bd:a4:7c:eb:22:0b:
a2:49:77:6c:7f:f6:a5:23:12:ff:77:82:1d:02:c7:
0b:d0:bf:80:8c:ce:93:59:e0:90:c4:c9:5a:53:4c:
7b:1a:27:87:74:9b:91:df:dd:b7:4c:28:bd:cf:93:
7c:5e:b4:a0:95:80:9f:0c:3a:c0:3d:d8:73:f8:49:
3c:8e:f9:8f:ed:f6:c4:85:d6:d4:60:3f:bf:ef:fd:
2d:cd:82:2a:0d:6b:39:bd:11:7f:38:12:10:0e:c7:
f3:6b:b0:c4:dc:b7:40:04:d6:e8:ed:cb:7f:e1:e3:
16:d0:e3:89:46:af:04:3f:36:17:69:db:19:08:c4:
54:11:25:92:a7:bd:18:7b:fd:ad:1d:6d:8f:68:12:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:40:B3:32:D5:9E:F9:F1:0A:C4:C7:D2:8A:DF:D9:B5:1B:AE:61
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:c5:1f:df:31:94:68:6b:4a:96:34:77:62:f6:95:33:70:
c3:ad:46:21:2b:39:0f:ab:e7:5f:1b:0a:3c:e7:6b:13:17:97:
70:1b:66:a7:2c:c5:f2:24:e9:f8:5b:a1:9e:a2:e8:c1:c3:38:
f2:75:40:e6:9a:51:3e:ea:8c:4b:39:4d:cd:27:20:51:b0:a8:
28:51:d6:9b:6f:84:fe:75:37:58:f3:b9:84:49:0a:57:ee:3d:
71:38:d7:22:d6:d5:1c:fd:4f:fc:9a:36:95:76:9c:aa:c3:ad:
d7:74:11:f5:c8:15:c1:7b:8b:9c:54:ff:9c:92:6c:16:41:78:
18:d2:fd:93:05:ab:ca:ba:c5:5f:4c:81:fa:90:7d:21:06:88:
96:b7:9d:16:df:bf:9f:9f:b1:38:e3:42:82:6e:ad:25:57:a9:
fd:31:5d:1d:05:c0:2d:a4:fb:b4:38:e4:03:16:14:4e:47:e6:
1c:2e:a5:18:a0:bc:f4:f0:63:27:65:70:ed:60:29:50:7c:92:
38:c5:d6:7a:05:be:84:b3:26:35:f7:aa:1f:8e:05:83:e7:59:
75:37:29:cf:66:d5:70:0c:3d:23:b5:57:e7:73:96:4f:72:62:
78:a5:43:bd:38:4d:86:e9:b6:8b:36:cc:8a:1e:57:f2:22:93:
fb:2c:4f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYg3e0yu3JqiCjPh5+2reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi
NjEwZGYwHhcNMjUxMTA0MTUwMDE3WhcNMjUxMTA1MTUwMDE3WjAzMTEwLwYDVQQD
EyhhYWY5NDBiMzMyZDU5ZWY5ZjEwYWM0YzdkMjhhZGZkOWI1MWJhZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8k0SPMQjX1G5wOqDyM6pNoDS2hA
YMW3THIRKwzbR8KBx/Gc3tewVQlWev+NncSaekYmgC3Ol8dptq3rfHkF64uNJIgT
Mw/vW2EfT4bWT7wUa78QNYq5Ea69a3m8R4ppcI+bIYS64If1FqWHIak308S9pHzr
IguiSXdsf/alIxL/d4IdAscL0L+AjM6TWeCQxMlaU0x7GieHdJuR3923TCi9z5N8
XrSglYCfDDrAPdhz+Ek8jvmP7fbEhdbUYD+/7/0tzYIqDWs5vRF/OBIQDsfza7DE
3LdABNbo7ct/4eMW0OOJRq8EPzYXadsZCMRUESWSp70Ye/2tHW2PaBJ0UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr5QLMy1Z758QrEx9KK39m1G65hMB8GA1UdIwQY
MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt
MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi
LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0nFH98x
lGhrSpY0d2L2lTNww61GISs5D6vnXxsKPOdrExeXcBtmpyzF8iTp+FuhnqLowcM4
8nVA5ppRPuqMSzlNzScgUbCoKFHWm2+E/nU3WPO5hEkKV+49cTjXItbVHP1P/Jo2
lXacqsOt13QR9cgVwXuLnFT/nJJsFkF4GNL9kwWryrrFX0yB+pB9IQaIlredFt+/
n5+xOONCgm6tJVep/TFdHQXALaT7tDjkAxYUTkfmHC6lGKC89PBjJ2Vw7WApUHyS
OMXWegW+hLMmNfeqH44Fg+dZdTcpz2bVcAw9I7VX53OWT3JieKVDvThNhum2izbM
ih5X8iKT+yxPgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:29 2025 by rpki-client