Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: 1LaxJjAnxqQZp9fKyrPxgfGAsD4TsuAHvUbgPhCeMOs=
Subject key identifier: FC:1E:72:77:A7:52:B2:3A:35:F1:1A:CE:E7:69:6C:7C:C7:61:35:C9
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 019A4EF5F06241D5647A9CE79884E7C49130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 1202
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: +xkqjYqBAKuKs1aggUaRhuCmezE2CrH1Ax/FUiW57R0=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f0:62:41:d5:64:7a:9c:e7:98:84:e7:c4:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=fc1e7277a752b23a35f11acee7696c7cc76135c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:aa:3c:86:f6:95:2e:2c:c7:f5:41:ae:ea:
df:0b:63:23:fa:62:44:8e:e2:3d:ef:ea:c6:0c:12:
08:05:8b:3c:87:43:e2:29:c0:b3:e9:25:de:5b:04:
30:fb:6b:6f:dd:7c:9a:ab:15:f5:bb:d5:4f:77:88:
11:d8:be:dd:a2:e7:28:cf:86:ae:2a:2e:60:73:16:
ef:20:d0:2f:3b:e7:c3:c2:c2:ed:31:c5:4d:d1:c6:
70:04:c8:51:d8:91:30:35:e5:1e:62:6e:b0:23:eb:
38:6e:ce:d0:26:8e:d6:15:b8:da:bb:bb:32:d0:45:
a1:e9:83:d3:ee:32:7a:c9:77:5d:50:ec:fa:64:fd:
6b:b3:1a:52:b3:15:c2:c9:91:d2:33:52:e7:a3:44:
6e:75:85:9c:1b:e4:63:9e:7a:03:b8:5d:ac:02:06:
99:c9:d7:bf:6a:92:17:d6:00:51:77:8f:a7:7a:fb:
34:ca:93:b2:99:df:e8:3f:d7:79:bc:46:14:7a:ff:
6d:c9:3d:f4:d1:82:92:cb:57:ce:17:0a:0c:ee:0b:
b9:65:98:17:73:13:1e:cb:6f:e6:df:35:11:d5:c0:
ca:07:37:cc:e3:21:b8:36:12:a8:53:e0:c8:b6:45:
11:76:97:4a:0a:0e:dd:00:06:16:2d:c8:d0:ba:32:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:72:77:A7:52:B2:3A:35:F1:1A:CE:E7:69:6C:7C:C7:61:35:C9
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:ef:88:37:08:c3:ce:27:03:79:9a:d0:d5:4a:b0:d6:ff:
8a:ca:96:2d:fb:39:c7:36:37:ac:0e:33:0f:10:4a:01:24:1c:
54:e7:e1:76:c5:76:66:14:c7:8c:6d:64:ac:77:8f:27:f9:d8:
74:9d:4e:8e:de:b0:44:da:05:01:65:3c:74:cb:a8:ca:4c:bb:
09:d4:86:dd:57:9f:ca:cc:1c:af:f7:84:1c:c1:c8:61:d3:1d:
04:5f:07:b0:d8:93:a4:dd:bb:95:e4:50:a6:bb:92:8b:71:ea:
2c:a5:35:07:0d:f5:df:38:2c:cb:4e:30:a6:7d:78:74:b3:c9:
d4:57:74:ab:3b:7c:60:5e:6c:09:4d:29:7b:59:e7:7e:e7:f3:
04:80:7d:44:a9:e1:2e:8a:76:17:27:67:6a:fd:c8:98:bc:2e:
1e:7b:00:d6:52:6c:e8:41:81:d3:00:b3:10:27:88:ea:99:a3:
7f:2d:34:c8:84:18:0d:ed:71:9f:60:32:13:c1:24:05:71:a1:
04:03:22:22:21:2d:73:bf:1f:37:8c:75:33:cc:1a:1a:ff:74:
5a:5a:1b:73:2d:26:d1:2f:e5:ba:52:8c:a8:8d:9f:10:e5:56:
fd:c6:d4:20:51:5f:5a:96:2b:f4:a9:e9:1c:54:67:f7:dd:47:
66:7f:48:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fBiQdVkepznmITnxJEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjUxMTA0MTMwMjExWhcNMjUxMTA1MTMwMjExWjAzMTEwLwYDVQQD
EyhmYzFlNzI3N2E3NTJiMjNhMzVmMTFhY2VlNzY5NmM3Y2M3NjEzNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibKqPIb2lS4sx/VBrurfC2Mj+mJE
juI97+rGDBIIBYs8h0PiKcCz6SXeWwQw+2tv3XyaqxX1u9VPd4gR2L7doucoz4au
Ki5gcxbvINAvO+fDwsLtMcVN0cZwBMhR2JEwNeUeYm6wI+s4bs7QJo7WFbjau7sy
0EWh6YPT7jJ6yXddUOz6ZP1rsxpSsxXCyZHSM1Lno0RudYWcG+RjnnoDuF2sAgaZ
yde/apIX1gBRd4+nevs0ypOymd/oP9d5vEYUev9tyT300YKSy1fOFwoM7gu5ZZgX
cxMey2/m3zUR1cDKBzfM4yG4NhKoU+DItkURdpdKCg7dAAYWLcjQujLM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwecnenUrI6NfEazudpbHzHYTXJMB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOXviDcI
w84nA3ma0NVKsNb/isqWLfs5xzY3rA4zDxBKASQcVOfhdsV2ZhTHjG1krHePJ/nY
dJ1Ojt6wRNoFAWU8dMuoyky7CdSG3Vefyswcr/eEHMHIYdMdBF8HsNiTpN27leRQ
pruSi3HqLKU1Bw313zgsy04wpn14dLPJ1Fd0qzt8YF5sCU0pe1nnfufzBIB9RKnh
Lop2Fydnav3ImLwuHnsA1lJs6EGB0wCzECeI6pmjfy00yIQYDe1xn2AyE8EkBXGh
BAMiIiEtc78fN4x1M8waGv90Wlobcy0m0S/lulKMqI2fEOVW/cbUIFFfWpYr9Knp
HFRn991HZn9IhA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:42 2025 by rpki-client