Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: 4qWvRFyVb/OcjlwmC1uC2QCavm1H4xaO40j3+XutNeg=
Subject key identifier: 3D:AD:81:AE:69:8C:D5:2F:0E:C6:B9:9C:4F:3A:E6:12:7C:11:DA:8D
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019A4F990EB29AFB3443B282F18CDDB832E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 069E
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: L81KDJhhDcBuTs2I7cd3aCrBgO/Blt8vXzb8e7WtMYU=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0e:b2:9a:fb:34:43:b2:82:f1:8c:dd:b8:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=3dad81ae698cd52f0ec6b99c4f3ae6127c11da8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:c1:87:15:b1:76:ff:85:15:6b:48:2a:db:
e4:c7:8c:bf:4d:7c:f3:60:bf:36:43:bf:aa:ba:8c:
26:9e:16:0f:e5:be:93:10:ec:5e:47:68:fb:c1:db:
41:02:b6:f5:0c:c9:b0:da:22:4e:80:47:fc:bb:f7:
8c:26:fb:f0:d2:55:e3:24:ae:08:04:95:b0:30:01:
fd:82:fb:f4:81:fa:a4:59:e9:d4:34:2b:fd:73:97:
06:8f:60:c1:7b:2d:8c:39:75:d7:5f:1a:39:99:9c:
92:e2:0f:bb:c6:67:b8:cc:ec:83:6f:29:4b:54:33:
50:81:92:34:dc:0c:92:2c:13:22:c4:72:1b:94:3d:
fb:42:49:99:b6:35:f9:82:9c:49:cf:50:24:ee:af:
e4:53:07:fb:f4:5a:dc:57:b5:91:5e:35:51:d6:4a:
37:3f:6b:74:c5:9b:cb:aa:dd:e0:91:de:af:1f:6f:
2c:d7:34:1d:18:9a:9f:ec:04:64:3b:92:72:97:50:
f5:09:f7:2b:a3:70:76:25:1d:bd:eb:c6:4e:51:e9:
90:af:4a:ae:7b:40:4b:f5:6d:00:a7:23:7f:c1:c1:
6a:ee:6a:10:d1:1d:d1:aa:22:55:4e:87:48:e3:9d:
e7:aa:29:de:c3:d6:d6:b5:6e:55:06:bc:5a:b3:81:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AD:81:AE:69:8C:D5:2F:0E:C6:B9:9C:4F:3A:E6:12:7C:11:DA:8D
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:f4:2a:f5:bf:60:db:71:6d:af:1f:18:a8:40:9e:d6:6b:
4b:1f:05:71:87:10:27:12:93:ae:5f:66:6c:bd:7d:ef:91:1f:
ae:7c:32:99:8a:41:4c:44:03:f0:65:6e:06:a7:85:4f:fc:bc:
a8:1d:89:47:e6:5a:ea:e0:4a:2c:e4:98:c6:97:d9:c3:66:94:
a8:3d:16:4e:a2:e6:63:6e:36:54:08:f7:d7:eb:86:53:b4:16:
b8:1a:52:9c:1e:87:40:f0:94:b2:ba:6e:61:eb:3e:06:7d:6f:
45:77:e1:a3:4e:d3:95:64:85:f6:02:38:70:51:6e:18:c1:65:
58:dc:a0:71:1f:25:da:62:eb:47:54:f2:13:df:a0:7d:76:cc:
47:94:28:ff:a7:a8:66:7b:31:63:ab:ba:75:4c:51:d0:e0:91:
b5:c3:16:6a:ee:d1:1e:f5:a8:70:43:0e:1f:31:25:8f:e9:ce:
64:77:35:41:a6:6f:0d:15:b4:bc:57:e8:aa:c0:c9:0c:e0:b2:
e5:03:20:0d:34:49:71:d5:f3:3c:7f:75:93:11:4b:8b:8a:7d:
4b:99:c4:a8:08:91:bd:b8:ce:03:e5:b9:2d:d5:53:d3:fa:3f:
9a:0c:d5:e3:a2:b4:6e:2b:05:a5:56:bb:cc:a1:c2:f4:8d:22:
5c:53:49:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmQ6ymvs0Q7KC8YzduDLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1
YWQ2MjIwHhcNMjUxMTA0MTYwMDIyWhcNMjUxMTA1MTYwMDIyWjAzMTEwLwYDVQQD
EygzZGFkODFhZTY5OGNkNTJmMGVjNmI5OWM0ZjNhZTYxMjdjMTFkYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGbBhxWxdv+FFWtIKtvkx4y/TXzz
YL82Q7+quowmnhYP5b6TEOxeR2j7wdtBArb1DMmw2iJOgEf8u/eMJvvw0lXjJK4I
BJWwMAH9gvv0gfqkWenUNCv9c5cGj2DBey2MOXXXXxo5mZyS4g+7xme4zOyDbylL
VDNQgZI03AySLBMixHIblD37QkmZtjX5gpxJz1Ak7q/kUwf79FrcV7WRXjVR1ko3
P2t0xZvLqt3gkd6vH28s1zQdGJqf7ARkO5Jyl1D1Cfcro3B2JR2968ZOUemQr0qu
e0BL9W0ApyN/wcFq7moQ0R3RqiJVTodI453nqinew9bWtW5VBrxas4Gi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2tga5pjNUvDsa5nE865hJ8EdqNMB8GA1UdIwQY
MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt
NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3
LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/v0KvW/
YNtxba8fGKhAntZrSx8FcYcQJxKTrl9mbL1975EfrnwymYpBTEQD8GVuBqeFT/y8
qB2JR+Za6uBKLOSYxpfZw2aUqD0WTqLmY242VAj31+uGU7QWuBpSnB6HQPCUsrpu
Yes+Bn1vRXfho07TlWSF9gI4cFFuGMFlWNygcR8l2mLrR1TyE9+gfXbMR5Qo/6eo
ZnsxY6u6dUxR0OCRtcMWau7RHvWocEMOHzElj+nOZHc1QaZvDRW0vFfoqsDJDOCy
5QMgDTRJcdXzPH91kxFLi4p9S5nEqAiRvbjOA+W5LdVT0/o/mgzV46K0bisFpVa7
zKHC9I0iXFNJng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:03 2025 by rpki-client