Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: /Q4mRPnWxR83adjfX0Xu4oWLo/JAp/ZskR+Kd7Fkd6c=
Subject key identifier: 1C:A9:BA:0F:B3:4B:96:71:4B:20:A5:E2:8D:9B:9A:FA:6B:D1:48:55
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 019A4DAAF577338BE3697B921B0BE8FA25B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 160F
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (hash: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: bOhbyzz4JKWTd5WeA7y2PYQg2XEs3P6feppsV4gICLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f5:77:33:8b:e3:69:7b:92:1b:0b:e8:fa:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=1ca9ba0fb34b96714b20a5e28d9b9afa6bd14855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:17:2f:09:9a:bb:1f:4c:93:d9:7b:76:d9:
ac:a0:d0:4c:84:20:4e:ac:77:dc:e6:ee:07:78:56:
69:8e:eb:ce:69:39:27:e7:8d:8a:fc:34:77:8b:18:
f1:be:a9:4c:81:8b:95:1e:a0:10:47:6a:b7:13:19:
e9:e0:6c:91:2e:46:52:a0:cc:2e:e3:4f:58:50:d1:
79:62:a4:76:75:96:13:6f:7f:73:70:7c:92:ce:f8:
ec:d3:42:de:65:fa:17:6e:2f:5e:c2:25:95:07:97:
fb:37:67:a0:ac:46:03:dc:36:0f:c1:fd:48:6b:56:
e1:67:85:0a:c3:9b:70:b9:44:63:71:18:3b:06:20:
cf:3b:f7:f1:21:96:3f:09:53:5f:cb:c2:02:fd:15:
d5:3d:bb:c5:d3:db:c1:67:f1:ff:39:43:42:f0:e4:
4d:79:00:d4:25:43:2b:37:14:bf:83:26:14:fb:15:
07:a5:9b:b6:ec:42:4a:9c:38:67:ee:60:35:6f:3c:
16:a6:45:19:7f:b3:0d:bc:fb:de:cf:61:83:fb:a3:
0a:8b:54:6b:7a:6b:b6:de:c1:8e:d4:b3:16:23:22:
67:da:3c:36:eb:87:b5:2a:75:03:d5:d4:7d:ff:f4:
db:9c:31:ab:b2:1e:5f:25:e8:12:f3:e6:ad:65:24:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:BA:0F:B3:4B:96:71:4B:20:A5:E2:8D:9B:9A:FA:6B:D1:48:55
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:64:80:a3:a6:af:b7:bd:58:91:16:94:5f:d2:4c:6d:1b:
a1:52:fb:59:f1:2f:cf:ab:39:50:96:d2:c1:f1:5a:57:7f:8f:
db:01:68:9b:ab:09:24:b8:76:eb:72:88:55:e0:71:bd:e2:32:
28:ca:30:4e:fd:f2:62:71:7c:ba:13:a4:31:6f:dd:d3:31:09:
49:18:a9:1a:39:af:3f:90:47:24:6c:c9:79:fa:00:d4:c0:16:
e7:a1:71:42:a7:03:3c:4f:e6:f7:b6:49:97:09:28:d6:d9:74:
3a:e1:35:ae:d8:97:42:67:48:e6:62:a6:98:48:f9:00:bc:ac:
0e:16:ee:a0:a8:cc:61:71:d5:61:c1:73:98:85:cc:3b:fa:cc:
e6:1e:37:0c:9c:da:1b:00:4b:26:9d:10:1d:de:4b:02:67:aa:
b2:41:ec:fd:51:5a:63:35:1f:0f:83:39:24:5c:dc:b6:71:a4:
09:8b:43:a7:f0:e3:fb:fd:6b:21:70:3c:0e:1d:b2:a8:64:ba:
62:c6:e7:78:b9:28:15:50:75:d6:f0:c8:e9:6f:a9:7c:b8:a5:
39:dc:52:ce:4d:9c:12:61:9f:29:ba:a3:d7:14:f6:b3:b8:ac:
56:96:23:db:18:6b:60:5d:eb:5f:24:36:db:fb:83:97:1d:a3:
73:7b:30:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqvV3M4vjaXuSGwvo+iWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm
NjgwNGYwHhcNMjUxMTA0MDcwMDQwWhcNMjUxMTA1MDcwMDQwWjAzMTEwLwYDVQQD
EygxY2E5YmEwZmIzNGI5NjcxNGIyMGE1ZTI4ZDliOWFmYTZiZDE0ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iUXLwmaux9Mk9l7dtmsoNBMhCBO
rHfc5u4HeFZpjuvOaTkn542K/DR3ixjxvqlMgYuVHqAQR2q3Exnp4GyRLkZSoMwu
409YUNF5YqR2dZYTb39zcHySzvjs00LeZfoXbi9ewiWVB5f7N2egrEYD3DYPwf1I
a1bhZ4UKw5twuURjcRg7BiDPO/fxIZY/CVNfy8IC/RXVPbvF09vBZ/H/OUNC8ORN
eQDUJUMrNxS/gyYU+xUHpZu27EJKnDhn7mA1bzwWpkUZf7MNvPvez2GD+6MKi1Rr
emu23sGO1LMWIyJn2jw264e1KnUD1dR9//TbnDGrsh5fJegS8+atZSRvmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBypug+zS5ZxSyCl4o2bmvpr0UhVMB8GA1UdIwQY
MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt
YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2
LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrJkgKOm
r7e9WJEWlF/STG0boVL7WfEvz6s5UJbSwfFaV3+P2wFom6sJJLh263KIVeBxveIy
KMowTv3yYnF8uhOkMW/d0zEJSRipGjmvP5BHJGzJefoA1MAW56FxQqcDPE/m97ZJ
lwko1tl0OuE1rtiXQmdI5mKmmEj5ALysDhbuoKjMYXHVYcFzmIXMO/rM5h43DJza
GwBLJp0QHd5LAmeqskHs/VFaYzUfD4M5JFzctnGkCYtDp/Dj+/1rIXA8Dh2yqGS6
YsbneLkoFVB11vDI6W+pfLilOdxSzk2cEmGfKbqj1xT2s7isVpYj2xhrYF3rXyQ2
2/uDlx2jc3swJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:20 2025 by rpki-client