Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: xMETv90BGZyPULAkVWAQBoWOtxO4s97QydzcLmB3KX0=
Subject key identifier: 0C:DA:A8:9A:04:BB:CF:59:B1:B4:0F:CE:18:41:0F:6A:F3:F6:1D:62
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 019A503DDF9CDF3003C743E5646E1EE37B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:23 +0000
Manifest this update: Tue 04 Nov 2025 19:00:23 +0000
Manifest next update: Wed 05 Nov 2025 19:00:23 +0000
Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: 61OtQn4Uf17+XfgEqoedlSLTw057vahDv7AwKfOiIbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:df:9c:df:30:03:c7:43:e5:64:6e:1e:e3:7b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Nov 4 19:00:23 2025 GMT
Not After : Nov 5 19:00:23 2025 GMT
Subject: CN=0cdaa89a04bbcf59b1b40fce18410f6af3f61d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:b0:36:97:28:ef:f3:7f:cd:15:21:5d:41:
02:5d:00:aa:3e:1d:51:41:9c:26:a9:4e:ef:45:6c:
91:91:8e:4f:21:28:5e:c0:9b:bd:c8:e9:2e:63:28:
48:38:b0:44:74:d2:1f:5d:30:dc:b5:1d:89:45:0e:
eb:64:42:46:89:da:a4:fa:5e:68:5b:40:dd:2e:9a:
cd:53:f1:3c:50:62:21:3c:a3:59:3d:f6:c8:eb:c8:
40:8b:a9:44:1a:f1:a1:a6:09:ec:5e:6f:4b:63:2f:
3c:9c:36:69:d3:95:46:21:51:27:29:21:b3:ca:be:
cc:6e:f3:e6:fd:c2:37:12:05:fa:e6:be:5a:40:43:
b4:93:6a:9d:a4:4b:29:39:13:04:36:50:14:51:dc:
3e:a8:17:50:30:78:a5:e2:2e:cf:98:f8:33:fa:0f:
ef:0d:e1:d7:5a:16:30:e1:8b:ae:58:4d:57:e7:df:
37:2c:95:1e:f7:a0:c7:cf:e9:09:71:1c:55:29:aa:
09:86:c0:06:5c:f7:60:6e:7e:05:1d:1f:b1:b8:13:
83:7a:56:d9:9e:23:d5:63:65:13:2a:db:9a:b5:c6:
43:1f:c5:37:97:4a:2b:45:f1:10:cb:c3:ab:70:cc:
74:e6:cb:60:7c:9b:a7:9e:29:c8:40:27:75:0f:7f:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:A8:9A:04:BB:CF:59:B1:B4:0F:CE:18:41:0F:6A:F3:F6:1D:62
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:63:7f:67:af:06:3a:4b:25:29:e9:e3:df:94:c6:57:e5:
8a:58:58:1f:1d:99:95:2d:06:09:f1:13:b2:80:34:d6:68:7e:
54:dc:55:58:10:3e:c4:cb:1f:5e:90:be:b0:dc:41:23:27:13:
98:27:5c:db:ce:7e:0a:04:ec:ec:35:d6:dc:2b:67:8c:a6:a4:
df:7d:22:52:ca:5c:cb:16:48:5c:8b:79:0a:db:62:99:ef:c4:
73:e5:c7:ee:64:18:03:d8:05:b9:c6:9e:4c:6f:c1:2b:86:a2:
85:f5:54:a2:d9:26:30:d8:f5:6f:0f:13:68:b7:e5:10:9b:94:
c2:29:9b:b5:99:88:58:8d:b3:dd:79:5f:3e:e0:80:fa:5c:cc:
1f:b0:b6:70:85:ed:a2:1c:6f:20:f9:b1:60:54:c0:be:c8:45:
98:be:5c:d8:d6:b9:d4:b8:bd:c8:54:aa:52:ac:06:e5:08:05:
9e:82:af:55:26:cb:59:a3:ec:6d:04:22:e6:6b:7f:c7:77:d9:
e9:1f:c5:7a:34:9b:01:d6:b1:a0:01:3d:a2:c5:cc:8f:47:ab:
8c:b2:6d:9c:45:10:16:2d:f9:14:33:65:cf:d3:29:fd:b4:49:
af:d5:90:cf:7c:63:4e:31:f4:38:2f:4c:1e:e4:00:6f:45:73:
b0:5f:c9:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPd+c3zADx0PlZG4e43suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx
ZDE5YjUwHhcNMjUxMTA0MTkwMDIzWhcNMjUxMTA1MTkwMDIzWjAzMTEwLwYDVQQD
EygwY2RhYTg5YTA0YmJjZjU5YjFiNDBmY2UxODQxMGY2YWYzZjYxZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusWwNpco7/N/zRUhXUECXQCqPh1R
QZwmqU7vRWyRkY5PIShewJu9yOkuYyhIOLBEdNIfXTDctR2JRQ7rZEJGidqk+l5o
W0DdLprNU/E8UGIhPKNZPfbI68hAi6lEGvGhpgnsXm9LYy88nDZp05VGIVEnKSGz
yr7MbvPm/cI3EgX65r5aQEO0k2qdpEspORMENlAUUdw+qBdQMHil4i7PmPgz+g/v
DeHXWhYw4YuuWE1X5983LJUe96DHz+kJcRxVKaoJhsAGXPdgbn4FHR+xuBODelbZ
niPVY2UTKtuatcZDH8U3l0orRfEQy8OrcMx05stgfJunninIQCd1D388twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzaqJoEu89ZsbQPzhhBD2rz9h1iMB8GA1UdIwQY
MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt
Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi
LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGVjf2ev
BjpLJSnp49+UxlflilhYHx2ZlS0GCfETsoA01mh+VNxVWBA+xMsfXpC+sNxBIycT
mCdc285+CgTs7DXW3CtnjKak330iUspcyxZIXIt5Cttime/Ec+XH7mQYA9gFucae
TG/BK4aihfVUotkmMNj1bw8TaLflEJuUwimbtZmIWI2z3XlfPuCA+lzMH7C2cIXt
ohxvIPmxYFTAvshFmL5c2Na51Li9yFSqUqwG5QgFnoKvVSbLWaPsbQQi5mt/x3fZ
6R/FejSbAdaxoAE9osXMj0erjLJtnEUQFi35FDNlz9Mp/bRJr9WQz3xjTjH0OC9M
HuQAb0VzsF/JuQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:30 2025 by rpki-client