Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: OfYCW46I+baX0Xi42RqrIjZYX76I+uiyFXiOrd8wAwE=
Subject key identifier: D4:1B:CE:B9:99:10:A8:D7:04:00:5A:88:8F:26:38:24:E5:E1:9B:9B
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019A4F2AF041B66BDEC5A97E4BEA06FA2079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 064D
Signing time: Tue 04 Nov 2025 14:00:04 +0000
Manifest this update: Tue 04 Nov 2025 14:00:04 +0000
Manifest next update: Wed 05 Nov 2025 14:00:04 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: SzFzLIbrAeIBPYpuBhdfPxdy82rpMLhheTa70bfbGDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f0:41:b6:6b:de:c5:a9:7e:4b:ea:06:fa:20:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Nov 4 14:00:04 2025 GMT
Not After : Nov 5 14:00:04 2025 GMT
Subject: CN=d41bceb99910a8d704005a888f263824e5e19b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:b6:96:7a:0a:ae:f3:87:6e:46:9b:6a:c9:
dc:d1:97:35:b5:c7:74:b5:f2:b7:a9:59:c5:34:56:
a2:36:34:1b:f5:69:59:45:c6:01:22:ee:bc:bf:3a:
85:66:dc:e6:21:c5:0b:56:ff:3a:ac:d9:8e:06:ea:
e7:4f:8e:c7:b5:df:6d:19:12:12:b0:c2:3f:b3:8a:
bd:10:cf:e9:52:f6:d8:4b:71:7d:7b:5a:95:9f:c7:
d7:43:cd:82:1c:f2:2a:2d:03:3a:da:40:67:c4:f8:
ac:de:5c:da:61:26:fb:b1:e9:39:e0:8f:55:2f:f1:
46:15:a5:2c:07:99:48:ed:61:f7:5a:10:a1:6a:91:
dc:b7:66:99:23:31:69:b3:8b:c5:2a:a6:8a:9d:2f:
29:e1:df:18:a6:63:1d:9e:6b:f3:c2:06:70:85:10:
64:8a:ae:c9:9b:93:91:12:bb:62:a7:07:16:fe:59:
ba:9b:87:b3:88:fb:69:8d:42:76:11:ca:78:f8:01:
13:81:07:22:7c:7e:81:65:46:3a:52:e8:a7:f8:59:
a6:5a:fd:17:37:be:16:37:33:aa:66:12:fb:0e:67:
1e:74:13:1d:3b:5d:38:c2:c8:12:54:b9:43:51:fa:
ca:87:b8:47:c1:34:be:54:3c:ca:12:29:71:64:43:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:CE:B9:99:10:A8:D7:04:00:5A:88:8F:26:38:24:E5:E1:9B:9B
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:8f:ee:e1:3f:31:ce:6f:95:54:d5:07:f6:36:34:ee:26:
89:0b:1b:fe:7a:b4:18:3a:c9:1e:a1:56:34:d9:dc:a2:20:58:
4e:2c:ea:51:01:b6:a8:ea:d3:05:92:c4:36:0d:32:cc:da:50:
c8:3b:17:ba:e7:39:49:7c:1f:07:49:8f:b4:f7:7b:11:70:cc:
e1:9f:7c:1d:d5:bb:27:0f:34:07:01:c8:62:76:33:cc:4b:78:
af:c7:20:50:96:5b:fa:61:b6:9c:7f:aa:ad:8f:ff:24:01:69:
69:dc:b4:9c:43:a7:ad:02:ca:45:51:3e:df:a5:48:6b:e6:8e:
81:cb:b2:5b:c3:36:ac:7a:27:e4:30:fb:ee:5d:2a:f0:62:09:
db:f0:79:5e:5a:3d:91:85:63:a8:64:83:0a:de:83:f0:00:d1:
5b:2a:44:aa:c4:fd:2f:57:31:f3:20:9c:c3:df:d4:f8:df:db:
c7:f8:79:87:9e:fe:f6:6a:63:93:4f:d8:d9:6f:15:0d:72:97:
09:a0:ae:a2:21:4e:57:81:2c:bd:7a:6c:13:4d:14:95:85:c4:
f3:f4:c9:2c:0c:5d:4e:33:67:86:b7:c1:30:2e:d6:5e:a7:0f:
9e:94:10:66:43:06:c3:3f:69:d9:4b:ca:01:91:af:bc:33:90:
fa:2b:d3:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKvBBtmvexal+S+oG+iB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjUxMTA0MTQwMDA0WhcNMjUxMTA1MTQwMDA0WjAzMTEwLwYDVQQD
EyhkNDFiY2ViOTk5MTBhOGQ3MDQwMDVhODg4ZjI2MzgyNGU1ZTE5YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw562lnoKrvOHbkabasnc0Zc1tcd0
tfK3qVnFNFaiNjQb9WlZRcYBIu68vzqFZtzmIcULVv86rNmOBurnT47Htd9tGRIS
sMI/s4q9EM/pUvbYS3F9e1qVn8fXQ82CHPIqLQM62kBnxPis3lzaYSb7sek54I9V
L/FGFaUsB5lI7WH3WhChapHct2aZIzFps4vFKqaKnS8p4d8YpmMdnmvzwgZwhRBk
iq7Jm5ORErtipwcW/lm6m4eziPtpjUJ2Ecp4+AETgQcifH6BZUY6Uuin+FmmWv0X
N74WNzOqZhL7DmcedBMdO104wsgSVLlDUfrKh7hHwTS+VDzKEilxZENyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQbzrmZEKjXBABaiI8mOCTl4ZubMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmiP7uE/
Mc5vlVTVB/Y2NO4miQsb/nq0GDrJHqFWNNncoiBYTizqUQG2qOrTBZLENg0yzNpQ
yDsXuuc5SXwfB0mPtPd7EXDM4Z98HdW7Jw80BwHIYnYzzEt4r8cgUJZb+mG2nH+q
rY//JAFpady0nEOnrQLKRVE+36VIa+aOgcuyW8M2rHon5DD77l0q8GIJ2/B5Xlo9
kYVjqGSDCt6D8ADRWypEqsT9L1cx8yCcw9/U+N/bx/h5h57+9mpjk0/Y2W8VDXKX
CaCuoiFOV4EsvXpsE00UlYXE8/TJLAxdTjNnhrfBMC7WXqcPnpQQZkMGwz9p2UvK
AZGvvDOQ+ivTiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:22 2025 by rpki-client