Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: MCTgZ9t0jDeZfoqJSzwrlFiEqDnsUHLYyoG3um0DivI=
Subject key identifier: 9E:AA:57:71:10:F6:5A:76:04:7B:B6:85:64:4F:40:AD:E3:31:D0:BF
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019A4E8665C470AB647D763241A7DF1F544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:21 +0000
Manifest this update: Tue 04 Nov 2025 11:00:21 +0000
Manifest next update: Wed 05 Nov 2025 11:00:21 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 1dbOdzO5ms7Z/lEnlLvxkZT5+Qw6tSz53kvTUzBxiEM=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:65:c4:70:ab:64:7d:76:32:41:a7:df:1f:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Nov 4 11:00:21 2025 GMT
Not After : Nov 5 11:00:21 2025 GMT
Subject: CN=9eaa577110f65a76047bb685644f40ade331d0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:9f:11:22:f6:f0:6a:ee:22:9a:ad:be:bc:
7c:56:0b:3d:01:3d:5d:c1:47:18:fe:1e:92:7a:e1:
e5:c5:24:1d:a3:52:a0:1b:06:48:7e:e2:56:94:1e:
2b:66:51:31:ec:67:8e:10:d6:95:0c:85:6d:04:44:
52:27:f4:d7:e3:27:e4:20:53:8d:06:d9:ad:0a:e7:
87:90:d5:00:b4:d2:c9:17:68:f5:e9:bf:e1:64:76:
c9:cf:85:27:0d:9e:5b:2b:e4:6a:22:e4:65:51:f6:
7b:d3:fa:e8:ae:40:26:0a:dd:c5:24:76:d9:c6:a0:
82:bf:51:2d:e5:76:96:b7:59:5e:09:d3:5b:bd:88:
c3:ca:cd:2d:f2:b1:75:d4:36:c5:f7:70:79:15:d5:
90:1e:13:36:0c:8d:aa:a9:56:80:a2:a8:02:94:65:
e0:71:ec:29:d4:d6:99:41:42:41:41:5c:03:b9:2a:
fb:70:33:5c:b1:49:5a:af:4c:14:b9:eb:4e:57:da:
75:74:fa:5e:32:fb:19:32:39:42:7d:d7:b5:89:16:
5d:c4:0b:a8:1c:43:d2:62:08:20:31:54:4c:1c:68:
70:bb:74:c3:a1:a8:ac:1d:a6:98:c6:b2:fe:a4:00:
4e:f5:4b:30:4d:f1:a8:8d:f8:ff:b8:cd:0c:cb:75:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:57:71:10:F6:5A:76:04:7B:B6:85:64:4F:40:AD:E3:31:D0:BF
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:49:35:0b:b4:bd:e8:5e:68:02:f6:bc:c9:e3:67:a4:0e:
1e:7d:b7:e7:76:23:73:a1:70:2f:72:c7:d0:c5:a8:1b:52:9c:
76:6a:b2:46:0b:d5:06:8a:68:f6:6c:08:3b:8b:36:6d:46:63:
61:94:cd:f4:c6:3e:c1:4c:4a:fa:ea:61:12:70:79:71:71:15:
43:dd:03:05:ef:7c:db:da:b2:7b:73:88:5d:e7:72:82:95:fd:
a0:7f:17:81:58:bf:ea:f6:b7:fa:ee:5d:6d:fa:92:2a:3b:25:
2b:3a:ac:ac:5f:9e:8a:5c:c5:ce:44:d5:ef:8a:f3:8a:fd:b9:
37:41:d2:75:88:90:2c:18:01:fb:aa:94:45:51:46:56:aa:60:
4b:d5:46:c8:d2:fc:3f:41:18:2c:34:0f:bd:aa:40:15:86:46:
7f:19:56:f7:d0:2a:1f:8d:90:2a:dc:ed:5d:f6:da:57:0a:d9:
d6:a2:10:a7:d4:c2:79:6b:9c:b6:fc:91:ed:80:c2:06:b7:51:
1d:f6:db:ec:7d:11:80:ab:4e:ae:9e:8d:62:c2:d2:80:a8:28:
d5:f7:ea:5a:64:c5:8e:a2:e3:4e:12:6f:e3:c9:ad:28:dc:de:
2f:e3:f9:aa:68:b1:29:2b:d1:d5:c3:93:53:96:c4:9e:c4:34:
04:03:d6:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhmXEcKtkfXYyQaffH1RNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUxMTA0MTEwMDIxWhcNMjUxMTA1MTEwMDIxWjAzMTEwLwYDVQQD
Eyg5ZWFhNTc3MTEwZjY1YTc2MDQ3YmI2ODU2NDRmNDBhZGUzMzFkMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofifESL28GruIpqtvrx8Vgs9AT1d
wUcY/h6SeuHlxSQdo1KgGwZIfuJWlB4rZlEx7GeOENaVDIVtBERSJ/TX4yfkIFON
BtmtCueHkNUAtNLJF2j16b/hZHbJz4UnDZ5bK+RqIuRlUfZ70/rorkAmCt3FJHbZ
xqCCv1Et5XaWt1leCdNbvYjDys0t8rF11DbF93B5FdWQHhM2DI2qqVaAoqgClGXg
cewp1NaZQUJBQVwDuSr7cDNcsUlar0wUuetOV9p1dPpeMvsZMjlCfde1iRZdxAuo
HEPSYgggMVRMHGhwu3TDoaisHaaYxrL+pABO9UswTfGojfj/uM0My3UWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6qV3EQ9lp2BHu2hWRPQK3jMdC/MB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEpJNQu0
veheaAL2vMnjZ6QOHn2353Yjc6FwL3LH0MWoG1KcdmqyRgvVBopo9mwIO4s2bUZj
YZTN9MY+wUxK+uphEnB5cXEVQ90DBe9829qye3OIXedygpX9oH8XgVi/6va3+u5d
bfqSKjslKzqsrF+eilzFzkTV74rziv25N0HSdYiQLBgB+6qURVFGVqpgS9VGyNL8
P0EYLDQPvapAFYZGfxlW99AqH42QKtztXfbaVwrZ1qIQp9TCeWuctvyR7YDCBrdR
Hfbb7H0RgKtOrp6NYsLSgKgo1ffqWmTFjqLjThJv48mtKNzeL+P5qmixKSvR1cOT
U5bEnsQ0BAPWpg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:21 2025 by rpki-client