
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier: yLobmAhpSVXDBYQx48yp89N3G8CeVrms5lQP6CWqI/w=
Subject key identifier: 3E:11:A8:65:1F:DE:1D:89:37:2D:AD:1A:58:E5:E0:AD:29:0D:0B:37
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019A4F625F8BF3FDEFB24E868069FBF9CFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number: 1733
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: BXJ+VSjJ+2DWbllsTUJnedIqWDOBsu9cOWz0ksqz8qw=)
2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
3: QSSnC_q8o-WsNaAyAgJiGCCIy84.roa (hash: +tcnmJxQS3P4w2G5HOWxZj9/1mLanqdz69L9k66eqp4=)
4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
6: kEE54Na7-BCTgHLb6bkDtNrQEVo.roa (hash: q7RWUfa1vIWc5o8bk7iDaK25w/Hb4HrDG1w6G9yuV+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5f:8b:f3:fd:ef:b2:4e:86:80:69:fb:f9:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=3e11a8651fde1d89372dad1a58e5e0ad290d0b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:a1:f6:87:4b:36:06:bd:d1:4e:34:3b:25:
14:60:d3:df:c2:71:ae:f4:12:b2:36:da:c0:c2:be:
f2:48:4e:a2:c0:cd:f7:66:80:da:2e:b2:bf:c7:61:
1b:42:0d:72:c3:af:5f:6a:c1:38:81:d6:8e:26:70:
0a:52:06:13:10:35:a0:12:ca:9b:fa:37:81:26:1c:
46:9c:48:af:c5:6d:05:99:00:a3:64:bf:61:76:a1:
76:95:d9:87:83:e1:2a:4f:dd:14:d5:b1:25:b8:07:
44:3f:58:bb:35:da:65:62:f6:fc:1c:fa:ab:c7:95:
1d:7d:ca:e4:70:05:9a:1e:41:38:e7:01:35:da:1a:
d7:e4:36:15:e6:61:be:f7:ac:f8:c9:0f:54:62:e4:
7d:53:d4:20:71:7a:e7:1b:25:18:0d:c8:07:89:fe:
bf:a6:11:47:e1:ba:29:99:16:58:68:dd:bb:d6:e4:
f2:08:59:c8:65:f6:39:5b:1f:35:b8:38:b4:18:5f:
54:42:fb:f3:f0:98:7f:3d:4a:f6:bb:0f:e2:da:72:
68:94:53:a7:68:9c:64:e7:88:6a:0e:d5:2b:b9:fe:
53:c9:25:53:4d:7c:03:9e:56:3a:e7:cd:60:a8:64:
f4:c0:f0:9e:81:05:c0:47:1e:41:d8:20:9a:fc:69:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:A8:65:1F:DE:1D:89:37:2D:AD:1A:58:E5:E0:AD:29:0D:0B:37
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:d7:f6:45:58:23:14:0b:4a:2e:4c:55:33:0e:c3:05:94:
12:43:f6:96:c6:30:02:77:d7:36:98:69:80:ff:a6:c7:ff:3b:
7c:57:96:db:9d:ab:67:4c:3e:1f:6e:e6:71:c2:ff:9e:ed:b0:
41:9f:e0:64:03:f6:49:61:b9:0d:ec:ca:e0:3f:16:a8:fb:58:
0b:fe:a1:cc:24:ad:1a:83:db:35:06:1a:c2:03:9d:b9:76:f7:
b6:3a:85:95:0b:85:11:9b:a9:05:95:36:28:7c:a5:c5:73:b0:
35:ce:91:9c:1b:5c:b9:cc:46:fe:e5:24:32:8e:f3:50:29:fa:
59:ee:d5:47:b2:04:c6:5d:02:3d:9c:86:a8:e7:39:9d:59:98:
aa:e1:dd:c4:5c:cd:3e:75:32:54:6b:d8:6d:ff:c8:c0:1b:65:
36:dd:54:0d:da:4e:bd:f6:e6:c6:61:5a:79:8d:d0:16:9b:c3:
cd:c5:15:37:2a:ab:0f:4d:df:4e:ee:a3:a6:95:51:50:28:c9:
7c:dd:0f:39:d5:3e:ec:02:01:ab:64:6a:d2:a0:b3:74:6a:97:
fe:7a:e4:c6:19:e5:3c:44:24:4c:8c:e7:17:d9:6a:9d:8e:6e:
67:4a:80:e6:93:ec:82:04:e4:f8:9c:de:e3:f5:e8:fb:6d:22:
48:f9:d5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYl+L8/3vsk6GgGn7+c+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjUxMTA0MTUwMDM4WhcNMjUxMTA1MTUwMDM4WjAzMTEwLwYDVQQD
EygzZTExYTg2NTFmZGUxZDg5MzcyZGFkMWE1OGU1ZTBhZDI5MGQwYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Wh9odLNga90U40OyUUYNPfwnGu
9BKyNtrAwr7ySE6iwM33ZoDaLrK/x2EbQg1yw69fasE4gdaOJnAKUgYTEDWgEsqb
+jeBJhxGnEivxW0FmQCjZL9hdqF2ldmHg+EqT90U1bEluAdEP1i7NdplYvb8HPqr
x5UdfcrkcAWaHkE45wE12hrX5DYV5mG+96z4yQ9UYuR9U9QgcXrnGyUYDcgHif6/
phFH4bopmRZYaN271uTyCFnIZfY5Wx81uDi0GF9UQvvz8Jh/PUr2uw/i2nJolFOn
aJxk54hqDtUruf5TySVTTXwDnlY6581gqGT0wPCegQXARx5B2CCa/Gl5lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4RqGUf3h2JNy2tGljl4K0pDQs3MB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJrX9kVY
IxQLSi5MVTMOwwWUEkP2lsYwAnfXNphpgP+mx/87fFeW252rZ0w+H27mccL/nu2w
QZ/gZAP2SWG5DezK4D8WqPtYC/6hzCStGoPbNQYawgOduXb3tjqFlQuFEZupBZU2
KHylxXOwNc6RnBtcucxG/uUkMo7zUCn6We7VR7IExl0CPZyGqOc5nVmYquHdxFzN
PnUyVGvYbf/IwBtlNt1UDdpOvfbmxmFaeY3QFpvDzcUVNyqrD03fTu6jppVRUCjJ
fN0POdU+7AIBq2Rq0qCzdGqX/nrkxhnlPEQkTIznF9lqnY5uZ0qA5pPsggTk+Jze
4/Xo+20iSPnVOA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:23 2025 by rpki-client