Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: M8HKrAf9l79A7UQP36ob8MZstzSNaV/EU/IhOPdN8n8=
Subject key identifier: 7C:6C:22:76:D9:F2:DB:41:04:0E:C0:21:D6:06:E6:AF:B0:0E:E7:3F
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0199FD33F4AEEFA7F1A189672FC7C666BF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0D14
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 5sCkK7bklit8UCUa80RZqIi-t9k.roa (hash: x447DPcTaj4M634Ku+wuq5YFVtP2ChxFRDLcvpSmPLg=)
2: B2JmCPoyhnai-DrPu98QS4-q4eY.roa (hash: woSQjHInZQrl0IFraZgxQZSnFc0QedADaWjQdsYiLbY=)
3: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: GIT7dQ7Zz7ITU4v7t54rKzmSRovPyXu9n3jUJu3D6eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f4:ae:ef:a7:f1:a1:89:67:2f:c7:c6:66:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=7c6c2276d9f2db41040ec021d606e6afb00ee73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:01:0d:f7:65:10:68:40:b4:0a:9c:da:62:
99:4c:04:dc:21:d4:57:8a:82:4d:86:e1:26:da:72:
3b:03:78:ca:4b:31:12:b2:ec:83:fd:cf:ba:a4:c5:
de:e0:af:ac:87:9f:12:b8:89:0e:2f:66:91:ad:0d:
d6:54:93:c7:11:3d:0a:fe:af:9d:d8:d2:a2:ad:23:
aa:94:7a:f9:8a:c7:34:cd:d5:c0:db:b1:46:6b:49:
4f:cb:a8:21:15:8e:c8:37:d5:84:d7:51:2b:60:cb:
11:13:dc:40:6b:a3:45:de:ec:c2:ee:d5:ee:7f:25:
cb:c9:fb:3c:b3:29:15:bf:a0:c4:e8:07:83:97:d7:
83:00:8d:75:7d:d6:36:96:ab:f2:18:3d:ea:79:60:
ae:bc:2f:45:c4:ee:59:2d:11:ee:80:b3:61:8f:cf:
44:4e:fa:46:df:62:a9:dd:a3:e8:f3:9f:d1:42:b4:
35:93:3e:4d:24:a4:72:9a:5c:7f:e6:b7:26:de:00:
09:d2:aa:e5:aa:f3:d1:d8:c8:4b:39:d2:1c:75:80:
a0:21:56:35:e7:1a:41:c2:2e:58:f8:60:9e:5a:5a:
a3:e4:13:ed:08:a3:dc:bb:c3:de:b7:85:42:a0:49:
08:e4:70:a4:5c:bc:f7:7b:71:fc:1c:33:11:ec:2d:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:22:76:D9:F2:DB:41:04:0E:C0:21:D6:06:E6:AF:B0:0E:E7:3F
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:da:b9:f8:02:e8:d3:ca:25:a7:80:72:56:fa:dc:db:00:20:
21:31:7d:ba:0f:fc:f3:58:30:eb:75:16:8d:c1:87:72:20:b8:
69:41:34:8f:e3:a1:fc:56:35:ad:59:06:0b:b6:06:cf:ad:c7:
42:42:65:05:17:27:a3:bc:84:01:ea:e6:07:22:d1:b9:a0:d7:
69:64:da:03:23:84:91:a9:af:51:3a:fb:a4:1a:a9:18:aa:19:
bf:56:20:b0:6d:1f:b2:1c:7f:9c:44:3f:c1:5f:9c:99:47:02:
74:6a:0b:5c:a5:be:c6:0c:49:df:1b:d1:aa:ed:a3:94:6e:47:
63:92:4c:b3:9a:65:42:b8:6f:6a:69:70:27:f2:89:cb:23:1e:
2f:2b:21:07:45:1e:f0:6b:78:f1:c9:ad:93:8a:4d:21:2d:d9:
6e:91:4d:28:ff:c6:80:5d:fa:db:59:c5:c4:15:a3:67:b0:e4:
df:72:9a:66:bc:5a:2c:38:61:5a:cd:59:a4:29:7f:03:7c:77:
83:92:07:ed:cb:13:81:64:59:cb:cb:f5:08:bb:20:04:75:ae:
3c:40:e3:9c:9d:2b:38:d6:ec:4a:9e:0c:48:44:b4:a2:de:29:
1a:cf:c7:da:bb:a8:bb:28:8e:c6:24:7e:04:c6:c3:f8:ad:f4:
66:03:66:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/Su76fxoYlnL8fGZr+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl
NDU5ZTYwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
Eyg3YzZjMjI3NmQ5ZjJkYjQxMDQwZWMwMjFkNjA2ZTZhZmIwMGVlNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7sBDfdlEGhAtAqc2mKZTATcIdRX
ioJNhuEm2nI7A3jKSzESsuyD/c+6pMXe4K+sh58SuIkOL2aRrQ3WVJPHET0K/q+d
2NKirSOqlHr5isc0zdXA27FGa0lPy6ghFY7IN9WE11ErYMsRE9xAa6NF3uzC7tXu
fyXLyfs8sykVv6DE6AeDl9eDAI11fdY2lqvyGD3qeWCuvC9FxO5ZLRHugLNhj89E
TvpG32Kp3aPo85/RQrQ1kz5NJKRymlx/5rcm3gAJ0qrlqvPR2MhLOdIcdYCgIVY1
5xpBwi5Y+GCeWlqj5BPtCKPcu8Pet4VCoEkI5HCkXLz3e3H8HDMR7C22pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxsInbZ8ttBBA7AIdYG5q+wDuc/MB8GA1UdIwQY
MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt
YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl
LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdq5+ALo
08olp4ByVvrc2wAgITF9ug/881gw63UWjcGHciC4aUE0j+Oh/FY1rVkGC7YGz63H
QkJlBRcno7yEAermByLRuaDXaWTaAyOEkamvUTr7pBqpGKoZv1YgsG0fshx/nEQ/
wV+cmUcCdGoLXKW+xgxJ3xvRqu2jlG5HY5JMs5plQrhvamlwJ/KJyyMeLyshB0Ue
8Gt48cmtk4pNIS3ZbpFNKP/GgF3621nFxBWjZ7Dk33KaZrxaLDhhWs1ZpCl/A3x3
g5IH7csTgWRZy8v1CLsgBHWuPEDjnJ0rONbsSp4MSES0ot4pGs/H2ruouyiOxiR+
BMbD+K30ZgNm6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:28 2025 by rpki-client