Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
File: FltW5Vtv77wg20rOb9dWxz10H5w.mft (raw, json)
Hash identifier: DE4eV4iAPu45zI6zyy/fiL2DjP1xIlPrRO5/nY+yv/0=
Subject key identifier: 3D:2D:91:E0:42:07:03:FC:5E:C3:15:18:2B:4D:0C:BB:EF:5E:F7:78
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Certificate issuer: /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial: 0199FCC695D770F0CC36FBBA96F5536713B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
Manifest number: 043C
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: FltW5Vtv77wg20rOb9dWxz10H5w.crl (hash: XyR/b44rCox+drDU2FQ2oV4t3y8iHKzau3BlZPlP1Ec=)
2: sMegHqU7UUGqCYG93dUiBfzhiKY.roa (hash: Uew37Hsz2ZJ9NI8mYh/emEGauK92oIRApPEXx6MkFec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:95:d7:70:f0:cc:36:fb:ba:96:f5:53:67:13:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=3d2d91e0420703fc5ec315182b4d0cbbef5ef778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:2f:c1:1b:c3:78:ac:77:78:af:26:1a:05:
6c:95:c3:83:d5:64:44:eb:91:88:ea:19:9a:3a:81:
28:b0:29:24:51:8f:52:86:e2:8b:e6:73:14:92:dc:
58:94:2c:f3:dc:2d:b1:58:6d:0c:64:ae:f1:08:e6:
92:68:e6:4b:41:ed:6d:c0:9f:54:63:48:2a:9e:d6:
7d:00:6f:3a:d6:7d:db:b4:a9:8d:1d:9f:35:e1:f8:
31:ef:16:fa:1f:8d:3d:99:bc:e2:d6:26:44:c7:ad:
9b:12:bb:be:63:e2:8b:51:1a:82:9f:db:c9:ae:71:
60:fd:2b:b4:c7:16:39:7c:c6:f4:47:48:4f:75:3f:
a2:7a:c8:e6:7a:51:26:b4:b2:71:0e:86:7f:81:7f:
df:52:25:4e:d7:c7:01:82:b4:2b:9c:f7:c2:4d:a4:
d7:2d:9a:95:69:5a:e1:83:fd:2f:9c:5c:68:02:77:
ae:15:64:ec:4f:f3:f0:99:a1:d5:d3:ba:d9:67:79:
b8:99:92:cf:21:f6:c5:ab:54:5f:e6:a7:00:72:7d:
92:5c:22:2f:54:39:30:2a:3a:29:be:d8:66:fd:4f:
44:87:8a:f7:da:17:7c:ea:1b:f5:65:1c:1c:66:51:
7e:74:b6:cf:cb:97:14:1b:ce:1c:be:7e:44:56:c1:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:91:E0:42:07:03:FC:5E:C3:15:18:2B:4D:0C:BB:EF:5E:F7:78
X509v3 Authority Key Identifier:
keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:b2:de:27:71:46:34:2c:35:c3:6e:66:d0:d0:cd:d9:2c:
9d:7b:22:12:59:87:af:d8:85:5c:b3:2d:a1:a5:97:4e:80:ea:
68:c8:17:af:cc:09:c0:41:ef:0d:50:8b:31:4c:a8:47:54:cb:
66:3c:ef:37:ca:fa:b9:26:33:d1:ac:45:51:90:50:ca:60:80:
35:e4:66:cc:50:01:ca:54:e5:09:93:4f:06:84:95:d1:d9:37:
bb:62:ae:80:68:00:1d:96:6b:35:0c:f7:55:da:20:f6:02:e7:
54:95:5d:c8:67:67:7a:2b:7b:92:44:db:8a:5d:6a:2c:b4:bd:
1f:1a:df:d3:2d:38:5b:10:55:a2:b2:20:3e:43:4d:c9:97:44:
66:17:34:f2:da:6b:57:06:01:aa:87:b8:09:66:6a:72:0b:70:
f6:c6:98:39:bc:0d:91:f5:cf:a3:03:35:8d:9f:39:88:31:3b:
67:92:12:3e:7f:5f:02:fe:0e:29:6a:2e:11:41:44:93:ed:0d:
9a:f9:44:c8:be:93:00:b2:08:da:99:93:8e:66:b3:e2:0f:55:
d2:fe:16:b5:bc:dd:ea:26:41:48:41:4e:0a:37:39:35:64:6b:
e5:3e:e7:9d:cb:f8:98:32:8a:70:1b:fa:e6:a0:09:4a:39:86:
e6:4b:94:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpXXcPDMNvu6lvVTZxO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NWI1NmU1NWI2ZmVmYmMyMGRiNGFjZTZmZDc1NmM3M2Q3
NDFmOWMwHhcNMjUxMDE5MTQwMTM2WhcNMjUxMDIwMTQwMTM2WjAzMTEwLwYDVQQD
EygzZDJkOTFlMDQyMDcwM2ZjNWVjMzE1MTgyYjRkMGNiYmVmNWVmNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr0vwRvDeKx3eK8mGgVslcOD1WRE
65GI6hmaOoEosCkkUY9ShuKL5nMUktxYlCzz3C2xWG0MZK7xCOaSaOZLQe1twJ9U
Y0gqntZ9AG861n3btKmNHZ814fgx7xb6H409mbzi1iZEx62bEru+Y+KLURqCn9vJ
rnFg/Su0xxY5fMb0R0hPdT+iesjmelEmtLJxDoZ/gX/fUiVO18cBgrQrnPfCTaTX
LZqVaVrhg/0vnFxoAneuFWTsT/PwmaHV07rZZ3m4mZLPIfbFq1Rf5qcAcn2SXCIv
VDkwKjopvthm/U9Eh4r32hd86hv1ZRwcZlF+dLbPy5cUG84cvn5EVsFIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0tkeBCBwP8XsMVGCtNDLvvXvd4MB8GA1UdIwQY
MBaAFBZbVuVbb++8INtKzm/XVsc9dB+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEt
YjVkMTNhMDE4OWE1LzEvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEtYjVkMTNhMDE4OWE1
LzEvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXKy3idx
RjQsNcNuZtDQzdksnXsiElmHr9iFXLMtoaWXToDqaMgXr8wJwEHvDVCLMUyoR1TL
ZjzvN8r6uSYz0axFUZBQymCANeRmzFABylTlCZNPBoSV0dk3u2KugGgAHZZrNQz3
Vdog9gLnVJVdyGdneit7kkTbil1qLLS9Hxrf0y04WxBVorIgPkNNyZdEZhc08tpr
VwYBqoe4CWZqcgtw9saYObwNkfXPowM1jZ85iDE7Z5ISPn9fAv4OKWouEUFEk+0N
mvlEyL6TALII2pmTjmaz4g9V0v4Wtbzd6iZBSEFOCjc5NWRr5T7nncv4mDKKcBv6
5qAJSjmG5kuUsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:13 2025 by rpki-client