Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: fdcnxX0TyaXXpEVHC0oLMh78ZFZMuijoZYlztASpzXQ=
Subject key identifier: EA:D1:E7:8F:8F:54:71:A2:51:65:EC:9B:C1:47:59:AC:BE:88:45:0C
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019A03DA05E152BF1177D0AA4D1B20C0FC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 11A4
Signing time: Mon 20 Oct 2025 23:00:11 +0000
Manifest this update: Mon 20 Oct 2025 23:00:11 +0000
Manifest next update: Tue 21 Oct 2025 23:00:11 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: Fy1fUTFT3AM+b92eMJxTkZUurwsb2/bBlrxluM4TOK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:05:e1:52:bf:11:77:d0:aa:4d:1b:20:c0:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Oct 20 23:00:11 2025 GMT
Not After : Oct 21 23:00:11 2025 GMT
Subject: CN=ead1e78f8f5471a25165ec9bc14759acbe88450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:b7:6e:c9:db:f6:39:62:a5:82:db:0d:e1:
3b:83:2b:17:9d:35:14:99:f4:3f:b3:df:96:aa:6e:
88:32:be:ff:a6:08:9b:95:69:60:6b:38:c5:88:70:
8c:95:d3:1f:d5:2e:e3:56:61:30:5a:97:e4:f8:8a:
86:f9:39:1e:95:65:34:77:76:1f:44:e3:fe:ec:3a:
de:79:86:43:54:67:d7:fd:04:43:6e:c0:45:24:a1:
54:93:13:57:79:65:0c:4d:4d:45:5d:0c:0a:4c:3b:
8b:98:dc:25:27:58:b0:12:43:ba:f2:77:a5:ac:46:
34:0d:0f:4a:de:ae:32:77:6d:c6:b5:4e:71:cd:94:
b0:e7:2d:3e:1d:fa:77:c8:72:21:4e:84:ed:21:2d:
f7:cb:12:7c:a0:bb:98:e2:f5:c1:8b:af:36:8f:fd:
a0:67:68:82:6a:40:4a:16:c3:0e:a9:82:f0:69:43:
56:14:94:28:87:3d:89:7c:2b:bd:24:fc:e6:60:aa:
b1:05:13:08:55:b5:f0:e7:d9:78:a0:0b:4c:fa:fb:
8c:37:eb:d2:8b:47:5f:5f:51:3a:87:cf:7f:32:ba:
0d:b5:fb:33:da:0d:da:47:3a:58:e5:95:f7:c2:f4:
b6:7d:04:cc:c5:a4:e0:3a:ec:3e:83:b7:96:20:e6:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D1:E7:8F:8F:54:71:A2:51:65:EC:9B:C1:47:59:AC:BE:88:45:0C
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:4a:07:5f:06:64:06:59:09:23:1d:42:54:04:09:b2:9b:
04:6f:18:a0:e9:22:32:fa:42:35:df:f1:fb:a7:e5:d2:02:4f:
75:54:9e:26:de:53:7d:c0:ca:0b:ff:c5:3a:f1:fc:8f:43:40:
fc:d1:20:75:52:3e:fb:ae:c3:e5:b3:eb:08:ee:b5:9f:16:3c:
2d:9f:6f:81:51:17:59:36:79:50:55:2b:57:4f:ab:f3:33:c1:
2c:72:cb:ee:bb:53:0a:fa:68:77:65:0a:ab:3b:a9:1f:78:15:
bb:5e:b2:84:94:0b:15:ea:46:6c:69:90:58:e9:cd:c3:6f:ec:
b6:9e:05:50:0a:ca:65:d3:f6:85:af:cc:d6:70:62:96:73:4f:
ec:e3:c1:d4:1f:03:5d:42:94:27:3f:aa:92:d4:b7:22:cb:f8:
ee:13:5b:89:c6:d0:20:b8:b1:5e:2c:87:17:50:0d:04:7a:c1:
79:07:cc:3d:ef:b9:77:68:2e:6d:75:13:47:a2:cc:49:37:a1:
e6:bd:97:e7:a8:ce:c5:df:c5:d1:17:9e:85:8f:28:f0:db:fb:
d6:1c:e0:7b:53:4a:b9:35:f5:78:6a:63:aa:97:c2:dc:c3:13:
cd:b8:bf:4c:d8:a3:1d:19:d0:79:01:4c:0f:5d:ef:4d:c1:08:
c6:93:68:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoD2gXhUr8Rd9CqTRsgwPybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjUxMDIwMjMwMDExWhcNMjUxMDIxMjMwMDExWjAzMTEwLwYDVQQD
EyhlYWQxZTc4ZjhmNTQ3MWEyNTE2NWVjOWJjMTQ3NTlhY2JlODg0NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGO3bsnb9jlipYLbDeE7gysXnTUU
mfQ/s9+Wqm6IMr7/pgiblWlgazjFiHCMldMf1S7jVmEwWpfk+IqG+TkelWU0d3Yf
ROP+7DreeYZDVGfX/QRDbsBFJKFUkxNXeWUMTU1FXQwKTDuLmNwlJ1iwEkO68nel
rEY0DQ9K3q4yd23GtU5xzZSw5y0+Hfp3yHIhToTtIS33yxJ8oLuY4vXBi682j/2g
Z2iCakBKFsMOqYLwaUNWFJQohz2JfCu9JPzmYKqxBRMIVbXw59l4oAtM+vuMN+vS
i0dfX1E6h89/MroNtfsz2g3aRzpY5ZX3wvS2fQTMxaTgOuw+g7eWIOaIQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrR54+PVHGiUWXsm8FHWay+iEUMMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo1KB18G
ZAZZCSMdQlQECbKbBG8YoOkiMvpCNd/x+6fl0gJPdVSeJt5TfcDKC//FOvH8j0NA
/NEgdVI++67D5bPrCO61nxY8LZ9vgVEXWTZ5UFUrV0+r8zPBLHLL7rtTCvpod2UK
qzupH3gVu16yhJQLFepGbGmQWOnNw2/stp4FUArKZdP2ha/M1nBilnNP7OPB1B8D
XUKUJz+qktS3Isv47hNbicbQILixXiyHF1ANBHrBeQfMPe+5d2gubXUTR6LMSTeh
5r2X56jOxd/F0ReehY8o8Nv71hzge1NKuTX1eGpjqpfC3MMTzbi/TNijHRnQeQFM
D13vTcEIxpNoAg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:35 2025 by rpki-client