Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: tR9kHEAxZeOc+jGD2i4DodPc8k3lPKXGW/dHA7hJrJg=
Subject key identifier: AD:D6:A2:AC:4D:E3:0D:9A:4B:A1:E5:F7:0A:FC:48:A4:49:1E:4F:99
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019A533F2394A7F31EA8472140CC4BAE7E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0500
Signing time: Wed 05 Nov 2025 09:00:38 +0000
Manifest this update: Wed 05 Nov 2025 09:00:38 +0000
Manifest next update: Thu 06 Nov 2025 09:00:38 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: GOVWVkuArk9lkJz78Po0012Jp4IO3N4m6WnrAr3OMjE=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:23:94:a7:f3:1e:a8:47:21:40:cc:4b:ae:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Nov 5 09:00:38 2025 GMT
Not After : Nov 6 09:00:38 2025 GMT
Subject: CN=add6a2ac4de30d9a4ba1e5f70afc48a4491e4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:c9:99:2a:b7:23:10:17:2d:94:7b:9c:55:
be:6d:f4:e7:cc:22:8b:a9:cf:4a:15:ec:f9:74:d2:
a2:e4:d1:59:eb:6c:1b:63:bd:c2:a4:0a:dd:91:26:
89:37:22:50:05:40:a3:9c:72:dc:69:90:d2:9e:2a:
a9:0b:7a:05:f9:51:3d:9c:19:b7:14:84:dd:5c:fc:
b3:54:7c:de:54:51:91:32:e9:bb:d3:82:7e:35:3d:
d5:8c:e2:8e:28:2c:38:d5:e6:76:af:16:c2:63:6f:
4e:04:27:58:b4:23:1b:4a:2e:75:3e:0f:04:0a:f7:
32:d4:9b:e2:91:47:73:09:b4:14:80:b7:c5:bd:43:
f6:a5:1d:da:4e:24:1a:86:8f:78:ad:79:c3:2b:c3:
9c:6a:c5:f0:49:c0:bd:aa:05:8f:6d:16:0c:a1:3d:
ad:91:58:6f:69:42:cf:5a:86:7f:cf:69:b6:f4:66:
db:c5:64:83:9b:a2:a5:87:4d:44:5e:a8:54:18:a2:
1c:05:cd:38:a8:24:ea:d5:d2:59:be:58:49:c2:28:
4a:b3:43:f6:3c:49:98:f8:e0:b3:5b:06:9e:c3:c5:
6d:ef:7e:3f:3f:63:7a:32:0c:2a:5c:84:52:69:e6:
51:41:b6:de:18:38:d5:a7:53:ee:cb:9e:4b:28:17:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D6:A2:AC:4D:E3:0D:9A:4B:A1:E5:F7:0A:FC:48:A4:49:1E:4F:99
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a8:9e:b6:8b:6d:2b:2f:6b:bd:94:f6:2f:07:fb:81:e6:94:
58:84:dd:76:a0:18:1e:77:f8:34:8f:f7:0b:7e:5e:76:8e:65:
40:a7:e6:25:63:20:81:84:4c:9d:79:2e:ae:47:58:7d:78:cf:
1e:c9:25:96:e7:42:cd:4b:bd:c3:b8:1b:94:c0:fd:3e:91:05:
92:8c:ef:7a:eb:39:40:e6:fd:ad:6c:d3:6a:bb:ce:ad:d2:84:
d3:df:f4:72:ec:2a:27:bd:da:a6:fb:7a:7e:ec:a0:e0:3d:cc:
7d:c7:b9:57:f6:f9:85:1e:91:37:ec:8f:13:9c:ce:fb:7c:d2:
60:1b:a3:11:28:d2:71:ba:52:9a:4e:ba:63:1b:ed:d6:0c:53:
96:f4:9a:15:58:9a:63:bd:c2:d0:6d:1c:77:8c:84:36:ae:85:
ca:f7:36:f8:07:a5:3e:67:c3:9d:4b:4b:35:a0:1a:8e:c7:9e:
7e:ed:42:16:a6:c1:7f:3a:aa:af:99:06:81:43:8a:3b:f0:b4:
e1:97:7f:92:e2:24:6b:e6:31:1a:38:80:8c:a2:e3:d9:85:04:
1b:3c:01:32:7f:bd:c2:79:b8:96:4d:06:20:91:79:6b:6e:f2:
54:81:2c:f7:56:c0:c2:fb:92:91:6a:84:37:e7:6d:e6:cf:60:
5d:8d:e3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPyOUp/MeqEchQMxLrn44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUxMTA1MDkwMDM4WhcNMjUxMTA2MDkwMDM4WjAzMTEwLwYDVQQD
EyhhZGQ2YTJhYzRkZTMwZDlhNGJhMWU1ZjcwYWZjNDhhNDQ5MWU0Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M7JmSq3IxAXLZR7nFW+bfTnzCKL
qc9KFez5dNKi5NFZ62wbY73CpArdkSaJNyJQBUCjnHLcaZDSniqpC3oF+VE9nBm3
FITdXPyzVHzeVFGRMum704J+NT3VjOKOKCw41eZ2rxbCY29OBCdYtCMbSi51Pg8E
Cvcy1JvikUdzCbQUgLfFvUP2pR3aTiQaho94rXnDK8OcasXwScC9qgWPbRYMoT2t
kVhvaULPWoZ/z2m29GbbxWSDm6Klh01EXqhUGKIcBc04qCTq1dJZvlhJwihKs0P2
PEmY+OCzWwaew8Vt734/P2N6MgwqXIRSaeZRQbbeGDjVp1Puy55LKBcklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3WoqxN4w2aS6Hl9wr8SKRJHk+ZMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKietott
Ky9rvZT2Lwf7geaUWITddqAYHnf4NI/3C35edo5lQKfmJWMggYRMnXkurkdYfXjP
HsklludCzUu9w7gblMD9PpEFkozveus5QOb9rWzTarvOrdKE09/0cuwqJ73apvt6
fuyg4D3Mfce5V/b5hR6RN+yPE5zO+3zSYBujESjScbpSmk66Yxvt1gxTlvSaFVia
Y73C0G0cd4yENq6Fyvc2+AelPmfDnUtLNaAajseefu1CFqbBfzqqr5kGgUOKO/C0
4Zd/kuIka+YxGjiAjKLj2YUEGzwBMn+9wnm4lk0GIJF5a27yVIEs91bAwvuSkWqE
N+dt5s9gXY3jmA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:36 2025 by rpki-client