Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: AVxffsbiSR/mjdSoaXbMBg9VSZXAatK+8deZ6k1BKYY=
Subject key identifier: E2:2C:D6:C9:22:ED:C1:F3:FB:62:95:A8:CD:B9:F4:A9:2D:87:EF:E8
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0199FBEBDF5A18DECA64DE3E94AEA3A07199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0E45
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: yGH/xyjh3pG4Huj3L/Vlv/HJPK4DQDiRFzjgr7dLc8M=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:df:5a:18:de:ca:64:de:3e:94:ae:a3:a0:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=e22cd6c922edc1f3fb6295a8cdb9f4a92d87efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:cb:bc:39:fb:08:88:53:ff:91:f2:10:9f:
2c:ee:0c:cb:ac:6a:7a:95:fc:63:cc:23:05:19:64:
49:01:eb:28:ca:72:b1:34:ac:33:f4:2a:88:6f:99:
61:5d:76:a2:a3:50:df:2f:cc:c7:e8:f7:50:85:b5:
0c:4b:2e:7a:ee:1a:7e:df:7f:1e:33:51:bd:ed:27:
a0:fd:c0:a5:20:61:6c:4b:02:29:4a:6a:33:4c:05:
c3:63:2d:98:d4:dd:2f:fe:77:85:8a:57:51:49:29:
77:bb:57:1c:a4:35:85:7e:af:41:38:f2:49:57:4c:
09:6e:de:3f:ad:29:ca:64:ba:a9:4e:9f:e1:2d:eb:
12:c3:18:9a:e3:b5:64:52:f1:cd:8b:84:55:54:0a:
99:70:e9:88:f0:2c:9f:88:55:5b:7a:d3:e4:6e:72:
4b:61:a6:e6:42:78:51:17:71:d2:f8:45:a6:41:9e:
34:bc:01:e3:d8:a6:e8:1f:74:26:15:79:db:af:6c:
d9:66:e7:72:38:e8:9b:a3:20:1a:66:31:cb:10:d9:
c5:de:fb:a3:80:2b:43:40:35:4d:92:3d:18:46:e8:
2a:9e:ad:04:72:30:17:77:d2:be:98:d9:cb:5d:7d:
c9:c1:27:f3:87:99:1c:c8:f2:c2:e7:b8:35:08:dd:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:D6:C9:22:ED:C1:F3:FB:62:95:A8:CD:B9:F4:A9:2D:87:EF:E8
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:3f:a7:3e:63:ae:1e:a0:fd:c1:d7:9c:b8:84:8a:b1:33:
22:84:be:87:63:e5:ec:de:81:4d:e2:7a:41:da:2b:af:78:10:
71:ad:93:a8:ff:aa:ff:21:0e:0d:7c:4e:75:35:3c:f0:8b:dd:
46:23:a7:17:c6:d6:3d:67:d0:da:50:1b:20:15:29:c8:f4:8c:
68:c0:89:83:94:07:f5:46:56:52:6c:91:c3:3f:3b:c1:07:df:
4c:f6:d6:dd:1a:24:3d:00:2b:4b:d3:1e:00:55:a9:28:f0:58:
65:a4:a0:cf:f5:ae:53:1d:80:f0:b1:a9:e8:c4:03:46:35:d6:
a9:d6:5e:0a:c2:5e:e7:db:8c:12:14:1b:ca:ea:41:12:fe:4f:
28:52:04:3d:31:43:61:cb:61:9d:7d:4d:eb:c5:ba:a3:32:d2:
32:f3:a6:1c:a3:a5:ab:d2:a6:e9:e4:86:9a:2f:cb:a6:37:07:
2a:ed:ce:4a:ac:b5:39:a2:71:20:66:45:a8:23:81:1c:34:45:
0c:76:86:80:de:5d:a3:3f:6e:cc:4e:56:f0:f1:a9:fb:06:b2:
5b:39:ed:90:f2:3f:a9:9c:9b:a4:c3:e7:16:ca:35:54:d6:43:
57:26:16:02:58:61:23:d4:89:8d:36:3e:44:9e:c3:e6:1e:1d:
da:15:b0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7699aGN7KZN4+lK6joHGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjUxMDE5MTAwMjQzWhcNMjUxMDIwMTAwMjQzWjAzMTEwLwYDVQQD
EyhlMjJjZDZjOTIyZWRjMWYzZmI2Mjk1YThjZGI5ZjRhOTJkODdlZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0snLvDn7CIhT/5HyEJ8s7gzLrGp6
lfxjzCMFGWRJAesoynKxNKwz9CqIb5lhXXaio1DfL8zH6PdQhbUMSy567hp+338e
M1G97Seg/cClIGFsSwIpSmozTAXDYy2Y1N0v/neFildRSSl3u1ccpDWFfq9BOPJJ
V0wJbt4/rSnKZLqpTp/hLesSwxia47VkUvHNi4RVVAqZcOmI8CyfiFVbetPkbnJL
YabmQnhRF3HS+EWmQZ40vAHj2KboH3QmFXnbr2zZZudyOOiboyAaZjHLENnF3vuj
gCtDQDVNkj0YRugqnq0EcjAXd9K+mNnLXX3JwSfzh5kcyPLC57g1CN3veQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIs1ski7cHz+2KVqM259Kkth+/oMB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp4/pz5j
rh6g/cHXnLiEirEzIoS+h2Pl7N6BTeJ6Qdorr3gQca2TqP+q/yEODXxOdTU88Ivd
RiOnF8bWPWfQ2lAbIBUpyPSMaMCJg5QH9UZWUmyRwz87wQffTPbW3RokPQArS9Me
AFWpKPBYZaSgz/WuUx2A8LGp6MQDRjXWqdZeCsJe59uMEhQbyupBEv5PKFIEPTFD
YcthnX1N68W6ozLSMvOmHKOlq9Km6eSGmi/LpjcHKu3OSqy1OaJxIGZFqCOBHDRF
DHaGgN5doz9uzE5W8PGp+wayWzntkPI/qZybpMPnFso1VNZDVyYWAlhhI9SJjTY+
RJ7D5h4d2hWwbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:52 2025 by rpki-client