Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: aTUOZXV8I2g5tEEs6QsJ/qFLgkvqm69NXndgnY2l6pQ=
Subject key identifier: A7:5B:D5:86:05:76:74:FB:4C:CF:07:77:40:DE:1E:0B:84:43:A2:5C
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019A4EF4E152C7A1EDA2084A80FE7655C477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: eYv5Nt4/0d9Csq/ltluuVKlzS/Zdu55VuAXGvrhkS30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e1:52:c7:a1:ed:a2:08:4a:80:fe:76:55:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=a75bd586057674fb4ccf077740de1e0b8443a25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:ff:ab:dd:92:1c:92:4f:66:13:d5:f1:82:
c2:bc:45:32:4f:45:28:4f:a2:15:0c:c4:9d:ae:a2:
1d:4f:13:96:8f:a4:b9:79:53:41:29:89:f9:17:d6:
70:dc:d5:b2:fe:e2:53:d6:ae:cd:4b:38:c7:7a:85:
1f:fe:fa:7d:0f:a5:35:de:0e:c3:30:9d:af:5c:61:
ea:27:96:97:c4:a6:69:79:f0:b4:fe:78:da:e3:f8:
45:60:5f:23:64:52:23:bd:93:12:ba:cf:8d:25:e4:
83:68:05:8c:f3:c7:c6:f6:6f:59:2f:f5:4b:77:1d:
e1:c2:d1:f6:fe:26:21:74:6e:98:d2:62:90:2f:72:
c7:01:00:8a:0d:b2:45:09:7f:9f:a4:cc:f4:5a:f8:
a1:e8:eb:62:c3:78:ad:60:9f:8a:42:77:f6:c1:4e:
e2:51:3e:29:b2:fd:a7:8e:4b:60:f9:ff:50:04:3f:
87:b8:71:0c:29:cf:54:12:d9:5e:d5:2d:cf:e9:d9:
18:b6:c3:9f:1b:17:81:f4:85:cf:6b:e4:0b:d7:18:
cd:8b:21:d6:f5:2c:49:39:1b:c6:42:53:81:b4:c1:
99:41:81:de:17:04:23:64:b8:63:0a:c3:de:53:f7:
bb:ee:b7:dd:85:3a:b4:61:3f:a5:99:08:8b:26:9b:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:D5:86:05:76:74:FB:4C:CF:07:77:40:DE:1E:0B:84:43:A2:5C
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:80:70:98:5e:21:32:d2:c2:2a:c1:b5:f2:7c:27:16:80:
10:86:62:c5:8c:f1:52:7d:45:57:05:2e:5c:41:7c:d5:0c:b6:
31:13:b7:09:3c:20:b2:1d:2e:fe:a5:6a:8e:f0:a9:a9:4f:7b:
d8:3f:18:e3:8b:f4:7e:a3:3d:f5:b5:ce:99:0f:31:1e:8c:07:
13:5c:e2:d4:94:c1:ab:2c:b0:18:f4:0a:d4:6d:b2:cf:aa:8f:
e3:a3:85:01:99:78:c0:79:00:b5:eb:9a:8e:60:95:ec:f1:e4:
2e:ac:bc:20:d8:11:c5:60:12:75:aa:b1:3b:85:8b:0d:82:0b:
7e:64:95:3e:85:ba:fa:0c:5b:fc:e4:07:62:99:f2:3d:3f:b4:
4f:6f:2b:2b:1e:5a:5b:f5:40:37:19:cc:ad:20:e4:e4:98:00:
9b:8c:78:a1:b0:07:7c:dd:a8:0c:ad:a6:cf:b5:6c:c1:00:dc:
3e:da:3a:66:2a:f4:b5:bb:3e:d1:24:e3:25:d3:29:b6:a5:a8:
84:b2:55:d5:55:1f:c0:5b:e8:ea:79:19:10:d4:45:79:32:df:
37:14:bd:96:c8:d4:4a:d3:3f:84:6d:f6:89:4b:6a:fc:30:4d:
8f:03:40:77:b5:ab:2e:a7:a2:c8:a2:e3:b5:ae:40:4b:b1:3d:
49:18:9f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9OFSx6HtoghKgP52VcR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjUxMTA0MTMwMTAyWhcNMjUxMTA1MTMwMTAyWjAzMTEwLwYDVQQD
EyhhNzViZDU4NjA1NzY3NGZiNGNjZjA3Nzc0MGRlMWUwYjg0NDNhMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbH/q92SHJJPZhPV8YLCvEUyT0Uo
T6IVDMSdrqIdTxOWj6S5eVNBKYn5F9Zw3NWy/uJT1q7NSzjHeoUf/vp9D6U13g7D
MJ2vXGHqJ5aXxKZpefC0/nja4/hFYF8jZFIjvZMSus+NJeSDaAWM88fG9m9ZL/VL
dx3hwtH2/iYhdG6Y0mKQL3LHAQCKDbJFCX+fpMz0Wvih6Otiw3itYJ+KQnf2wU7i
UT4psv2njktg+f9QBD+HuHEMKc9UEtle1S3P6dkYtsOfGxeB9IXPa+QL1xjNiyHW
9SxJORvGQlOBtMGZQYHeFwQjZLhjCsPeU/e77rfdhTq0YT+lmQiLJpugfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdb1YYFdnT7TM8Hd0DeHguEQ6JcMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMeAcJhe
ITLSwirBtfJ8JxaAEIZixYzxUn1FVwUuXEF81Qy2MRO3CTwgsh0u/qVqjvCpqU97
2D8Y44v0fqM99bXOmQ8xHowHE1zi1JTBqyywGPQK1G2yz6qP46OFAZl4wHkAteua
jmCV7PHkLqy8INgRxWASdaqxO4WLDYILfmSVPoW6+gxb/OQHYpnyPT+0T28rKx5a
W/VANxnMrSDk5JgAm4x4obAHfN2oDK2mz7VswQDcPto6Zir0tbs+0STjJdMptqWo
hLJV1VUfwFvo6nkZENRFeTLfNxS9lsjUStM/hG32iUtq/DBNjwNAd7WrLqeiyKLj
ta5AS7E9SRif/g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:56 2025 by rpki-client