Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: ij9BH+rFhn6uAZ+HKz55UF2yEmZ6LRzMugVmcITmH4U=
Subject key identifier: A2:17:1B:4A:B2:D4:8D:E4:E9:2C:9C:87:81:5B:57:18:4A:BD:91:72
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 0199FBEA82B122B43C2C36DB9E2C7B747EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 09FD
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: UM0ZQYBYB9hxVeRbpD5IYvmc/ruxATtNwiGNnLvWNi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:82:b1:22:b4:3c:2c:36:db:9e:2c:7b:74:7e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=a2171b4ab2d48de4e92c9c87815b57184abd9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:cd:87:d8:4c:ee:a9:e3:bd:10:ad:a9:7e:
0b:0e:31:96:66:09:77:4f:0b:d7:2a:e7:59:e3:8f:
69:49:69:02:83:cf:3d:b4:fb:ff:a6:bc:b5:ba:75:
95:59:d4:05:8e:c3:1e:a1:3d:4d:4d:4c:a8:79:f7:
c1:9e:3f:ce:1d:53:e5:50:c7:95:8c:e8:f8:f1:b0:
7f:53:2e:d0:34:d3:b6:f8:41:c5:89:f5:7b:3f:24:
3d:b2:5f:4c:2c:b9:a1:20:85:a9:58:1c:61:49:ac:
d2:47:42:ab:f3:c0:95:a4:d9:b1:cc:1d:36:02:49:
bd:b9:72:9b:be:df:f4:57:bc:2c:90:50:af:09:74:
33:a4:e2:4f:f8:47:d7:dc:05:ee:a5:ac:ce:03:af:
b4:d0:df:25:25:16:36:e6:66:2e:78:2e:85:8f:9c:
7d:c8:6b:af:33:60:3a:6a:a8:e1:ab:10:a2:d7:de:
3e:15:4e:ad:1f:66:94:b6:ec:a3:52:f8:73:67:4d:
99:96:7a:13:2a:26:5d:53:5b:aa:32:d2:8b:90:f2:
17:72:95:64:4b:67:ca:a7:1d:d8:a7:1a:84:0b:5e:
bf:2b:36:0c:eb:97:77:e4:56:0c:4c:39:5e:ff:70:
68:72:f1:11:98:ce:02:bc:95:0c:97:9e:59:4c:10:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:17:1B:4A:B2:D4:8D:E4:E9:2C:9C:87:81:5B:57:18:4A:BD:91:72
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bf:c5:20:cd:e1:ee:28:74:8c:48:8d:b1:07:2b:70:7a:68:
cd:d4:4d:50:f0:6e:0c:dc:20:7b:a2:25:27:4c:fb:66:c1:21:
d5:25:33:da:ca:96:92:a4:33:b4:31:d9:22:3c:80:46:e9:cb:
4d:02:23:e5:61:2b:bb:27:18:f6:21:11:20:4a:ce:7c:a5:d9:
ce:47:f0:69:c8:55:00:0c:07:c8:45:11:88:58:d0:3c:5e:cc:
b0:6c:de:02:95:54:f6:65:f1:a4:12:00:82:be:ff:75:28:a7:
59:3f:8c:2f:b6:8f:c4:49:05:25:da:26:de:b9:41:7c:e6:9f:
38:07:e2:75:ad:8f:62:ee:99:ec:05:77:e0:f8:e5:f3:c1:d3:
f9:93:a0:41:82:eb:3d:92:8e:e8:26:5b:f4:d5:b7:e0:f7:05:
bf:87:0e:fa:19:56:d4:02:19:7c:b6:fc:23:d4:cd:ad:41:bb:
91:b1:7a:63:f7:9a:8f:8e:b8:a6:85:10:1f:fc:ca:04:fb:dd:
e9:80:0e:7c:80:17:01:3e:7f:e3:e3:fc:41:fc:6e:e3:18:12:
13:ff:3a:23:2e:c6:e3:68:ab:2f:41:5c:77:b9:be:fe:62:2a:
fc:52:cd:b6:17:d3:46:77:6d:c1:6c:90:2b:1f:bc:30:d7:f5:
b8:7d:c1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76oKxIrQ8LDbbnix7dH78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1
ZjYxMDkwHhcNMjUxMDE5MTAwMTE0WhcNMjUxMDIwMTAwMTE0WjAzMTEwLwYDVQQD
EyhhMjE3MWI0YWIyZDQ4ZGU0ZTkyYzljODc4MTViNTcxODRhYmQ5MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuafNh9hM7qnjvRCtqX4LDjGWZgl3
TwvXKudZ449pSWkCg889tPv/pry1unWVWdQFjsMeoT1NTUyoeffBnj/OHVPlUMeV
jOj48bB/Uy7QNNO2+EHFifV7PyQ9sl9MLLmhIIWpWBxhSazSR0Kr88CVpNmxzB02
Akm9uXKbvt/0V7wskFCvCXQzpOJP+EfX3AXupazOA6+00N8lJRY25mYueC6Fj5x9
yGuvM2A6aqjhqxCi194+FU6tH2aUtuyjUvhzZ02ZlnoTKiZdU1uqMtKLkPIXcpVk
S2fKpx3YpxqEC16/KzYM65d35FYMTDle/3BocvERmM4CvJUMl55ZTBAoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIXG0qy1I3k6Sych4FbVxhKvZFyMB8GA1UdIwQY
MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt
YzU2MTk4NTk0NTBjLzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj
LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7/FIM3h
7ih0jEiNsQcrcHpozdRNUPBuDNwge6IlJ0z7ZsEh1SUz2sqWkqQztDHZIjyARunL
TQIj5WEruycY9iERIErOfKXZzkfwachVAAwHyEURiFjQPF7MsGzeApVU9mXxpBIA
gr7/dSinWT+ML7aPxEkFJdom3rlBfOafOAfida2PYu6Z7AV34Pjl88HT+ZOgQYLr
PZKO6CZb9NW34PcFv4cO+hlW1AIZfLb8I9TNrUG7kbF6Y/eaj464poUQH/zKBPvd
6YAOfIAXAT5/4+P8Qfxu4xgSE/86Iy7G42irL0Fcd7m+/mIq/FLNthfTRndtwWyQ
Kx+8MNf1uH3Baw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client