Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: R/Qs09c2E9aH0KXyksuinCAb8TkbhtguqqhOQbH050Q=
Subject key identifier: 9F:55:B3:FF:AF:94:35:84:F0:8A:8C:22:C4:B9:67:5E:F8:5E:81:F8
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 0199FC21ACAA823A97A9E4320D414497F988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0FA7
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 9m4FtCyAg4JOnGt1KdwZ+bLM5z4ScWtYlwf+G9+SyoM=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ac:aa:82:3a:97:a9:e4:32:0d:41:44:97:f9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=9f55b3ffaf943584f08a8c22c4b9675ef85e81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:19:7e:f5:d5:f7:6f:0e:28:ff:1c:bb:a8:
82:d1:c5:f9:bb:71:e6:f8:98:89:ff:0f:30:3c:7b:
55:79:62:87:75:05:24:9e:16:5e:46:81:ef:8a:0c:
35:2b:08:65:48:ef:af:8c:dc:fd:1f:62:4a:07:8b:
71:d3:26:ba:de:25:ec:08:2c:0a:bc:64:87:e5:0a:
24:87:77:92:44:5f:13:b2:ce:fa:50:0f:b4:bb:70:
85:26:1e:3b:bc:dc:da:18:2b:b0:a2:75:d2:b4:ea:
4c:97:be:c2:52:09:89:4f:da:6d:e5:25:a3:3d:ce:
12:73:58:6e:b1:63:7e:d6:ff:29:77:dc:cb:a6:22:
76:8c:34:87:90:bd:80:1f:8e:a6:ff:d0:c3:fb:52:
98:54:fa:da:93:64:4f:82:7e:c8:a9:04:fc:89:5d:
48:7f:1e:86:cd:8d:ff:5d:89:20:38:e5:95:73:44:
46:05:6a:7d:7e:77:3a:65:6d:20:f7:cc:cf:9c:ff:
5d:f8:29:35:91:7e:fa:14:de:37:36:8b:33:c5:cd:
af:c6:66:cc:25:c3:2b:58:a7:71:90:2b:0e:b9:d1:
07:22:5f:47:9d:2b:0e:fd:5e:ea:94:ca:a9:2f:a5:
b1:85:f1:dc:43:c3:8d:f0:87:ae:bc:f8:8e:1e:fa:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:B3:FF:AF:94:35:84:F0:8A:8C:22:C4:B9:67:5E:F8:5E:81:F8
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:2a:a1:a0:d4:cc:bb:91:55:fd:06:a4:59:4b:6e:32:48:
60:1e:81:06:13:38:46:7c:8a:98:22:26:26:14:49:e3:ca:b5:
58:f9:30:63:f7:20:25:07:5a:ea:f8:a6:ca:3e:c4:07:4d:dc:
39:ab:89:a2:a2:fa:c0:48:d4:8b:51:b9:7a:d9:ed:e6:8b:e0:
26:76:a2:d9:be:08:b8:09:e2:78:79:58:62:d1:09:d0:73:87:
eb:5d:4c:5f:6f:07:4c:5c:85:e3:94:19:67:8c:4d:9b:12:56:
65:2d:ce:2e:67:14:12:b8:fa:3b:6c:75:6a:94:40:52:43:09:
c8:4c:5f:71:06:50:24:fd:64:3f:2a:56:f7:d0:16:31:f8:96:
db:65:b2:81:b4:57:74:7d:ee:fd:ad:4d:29:14:2d:8c:c8:11:
2b:4a:1e:96:1c:f1:79:c1:84:f6:5e:71:cd:dd:96:fa:88:e5:
18:20:38:11:c1:f3:28:73:ac:20:78:1b:f8:d4:d5:72:38:a5:
67:ba:dd:5c:57:7b:ac:0a:d7:ed:d2:ff:99:94:15:7d:b8:e7:
d5:86:ad:3a:cf:38:4b:ac:e0:91:35:8f:7f:58:eb:fb:3e:ba:
98:2d:e1:f0:a2:57:e2:dc:3e:1d:64:df:0e:d5:70:33:d3:38:
cd:b9:61:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IayqgjqXqeQyDUFEl/mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Mjc0NTVlYTdmY2UxN2NmZDA0MzE5ODUyNThkMTNlMDZi
ZmE3MzUwHhcNMjUxMDE5MTEwMTI5WhcNMjUxMDIwMTEwMTI5WjAzMTEwLwYDVQQD
Eyg5ZjU1YjNmZmFmOTQzNTg0ZjA4YThjMjJjNGI5Njc1ZWY4NWU4MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeUZfvXV928OKP8cu6iC0cX5u3Hm
+JiJ/w8wPHtVeWKHdQUknhZeRoHvigw1KwhlSO+vjNz9H2JKB4tx0ya63iXsCCwK
vGSH5Qokh3eSRF8Tss76UA+0u3CFJh47vNzaGCuwonXStOpMl77CUgmJT9pt5SWj
Pc4Sc1husWN+1v8pd9zLpiJ2jDSHkL2AH46m/9DD+1KYVPrak2RPgn7IqQT8iV1I
fx6GzY3/XYkgOOWVc0RGBWp9fnc6ZW0g98zPnP9d+Ck1kX76FN43Noszxc2vxmbM
JcMrWKdxkCsOudEHIl9HnSsO/V7qlMqpL6WxhfHcQ8ON8IeuvPiOHvrpJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Vs/+vlDWE8IqMIsS5Z174XoH4MB8GA1UdIwQY
MBaAFBUnRV6n/OF8/QQxmFJY0T4Gv6c1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUt
OThmOGNjZDVkYjhkLzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUtOThmOGNjZDVkYjhk
LzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvb4qoaDU
zLuRVf0GpFlLbjJIYB6BBhM4RnyKmCImJhRJ48q1WPkwY/cgJQda6vimyj7EB03c
OauJoqL6wEjUi1G5etnt5ovgJnai2b4IuAnieHlYYtEJ0HOH611MX28HTFyF45QZ
Z4xNmxJWZS3OLmcUErj6O2x1apRAUkMJyExfcQZQJP1kPypW99AWMfiW22WygbRX
dH3u/a1NKRQtjMgRK0oelhzxecGE9l5xzd2W+ojlGCA4EcHzKHOsIHgb+NTVcjil
Z7rdXFd7rArX7dL/mZQVfbjn1YatOs84S6zgkTWPf1jr+z66mC3h8KJX4tw+HWTf
DtVwM9M4zblh3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:17 2025 by rpki-client