
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier: hgl6ec1vVTpCSFKADZyA2fDFZdI+ftfLpktmv1I1X+g=
Subject key identifier: BC:68:32:86:E3:8A:76:CE:91:30:09:E2:B3:82:9A:1C:D8:D2:BB:E7
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial: 0199FC58A7DA86FDF526F2522FDC791808DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: xVKXDfgQqALWdUgptQ+rfsFpUuAzU7vU484rer3L2mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a7:da:86:fd:f5:26:f2:52:2f:dc:79:18:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=bc683286e38a76ce913009e2b3829a1cd8d2bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:ca:0d:30:8d:84:66:71:4c:8a:7d:98:fa:
87:ee:58:7c:7d:f0:93:b1:69:82:1d:72:13:cc:74:
f7:a9:f9:43:6a:ab:7f:5b:ee:94:b3:88:0f:2d:4e:
34:5e:80:2f:f8:01:9e:1f:e5:09:e8:30:f8:c5:c4:
02:52:9e:5c:a8:65:d0:0e:67:b9:70:d8:35:1f:3c:
7a:c8:51:c9:05:34:bb:7d:a6:bd:08:a9:9a:c1:8d:
8a:0c:7f:0a:40:0d:f1:d3:0c:73:8f:72:84:a7:7e:
cf:d5:51:fa:75:1f:1c:43:8d:a2:96:7a:f3:3d:54:
02:9d:2d:b7:95:8c:2c:e9:f3:6b:9a:f1:de:fd:5b:
ae:6b:34:de:35:24:8a:5f:e7:7a:7d:a8:d0:b2:b3:
7e:c7:6c:9c:87:35:4d:e6:2f:d1:f0:cc:72:fb:93:
e5:4c:dd:8c:79:55:ff:20:51:0d:c2:b6:c0:45:ed:
a1:02:8d:03:b7:d9:68:63:73:e5:1a:55:1a:f2:1e:
1a:07:6d:71:ea:b5:bd:19:42:40:dd:b7:dc:80:0a:
57:31:9d:b1:b1:57:c6:64:3c:f3:1e:98:b0:98:66:
45:7b:42:47:90:96:21:25:03:69:eb:a6:44:26:1d:
c0:34:3b:9b:8c:81:36:15:19:92:29:88:ac:8e:14:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:32:86:E3:8A:76:CE:91:30:09:E2:B3:82:9A:1C:D8:D2:BB:E7
X509v3 Authority Key Identifier:
keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:47:da:06:19:3d:90:4f:58:bb:c7:58:af:ac:3b:6a:31:
97:08:92:11:70:c1:14:76:ba:c0:c3:0e:7e:00:71:74:b4:12:
79:5c:0d:43:74:2a:9a:dd:73:41:9b:0d:c5:5a:80:e3:60:b2:
68:cc:95:87:a0:aa:4b:3d:d4:c0:bc:cc:fe:24:d8:3c:fa:56:
53:a2:43:af:84:ed:c4:25:10:a3:92:e5:f1:2c:e3:f7:9d:19:
45:29:10:b4:f3:4c:d4:eb:c2:b5:31:28:2b:7d:ec:5e:22:4f:
a8:92:d3:2d:85:b0:c7:cd:1b:3d:25:6c:6b:eb:76:11:a5:b9:
00:1d:1b:a3:bb:0c:db:48:ef:2c:39:d0:f8:c7:6c:ba:1c:f8:
8b:42:dc:7e:19:4b:9a:51:12:c2:c4:c1:39:89:14:85:04:d3:
b2:71:eb:e7:be:7f:a2:38:f5:4a:51:48:9b:26:ec:85:61:12:
d0:c3:b2:f3:04:f0:be:03:f1:14:be:c0:e0:d2:81:b3:fe:79:
7f:a2:3a:d4:6e:3b:a1:7f:e9:01:55:c0:39:d4:3a:7d:e2:67:
79:9c:4e:af:fd:67:42:61:bb:67:28:4e:12:37:f1:97:a7:34:
d4:c8:75:b1:6e:ff:f7:90:eb:7c:58:ac:e8:19:39:80:95:ab:
3b:b3:d0:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKfahv31JvJSL9x5GAjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0
ZjYzYWEwHhcNMjUxMDE5MTIwMTMyWhcNMjUxMDIwMTIwMTMyWjAzMTEwLwYDVQQD
EyhiYzY4MzI4NmUzOGE3NmNlOTEzMDA5ZTJiMzgyOWExY2Q4ZDJiYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXKDTCNhGZxTIp9mPqH7lh8ffCT
sWmCHXITzHT3qflDaqt/W+6Us4gPLU40XoAv+AGeH+UJ6DD4xcQCUp5cqGXQDme5
cNg1Hzx6yFHJBTS7faa9CKmawY2KDH8KQA3x0wxzj3KEp37P1VH6dR8cQ42ilnrz
PVQCnS23lYws6fNrmvHe/VuuazTeNSSKX+d6fajQsrN+x2ychzVN5i/R8Mxy+5Pl
TN2MeVX/IFENwrbARe2hAo0Dt9loY3PlGlUa8h4aB21x6rW9GUJA3bfcgApXMZ2x
sVfGZDzzHpiwmGZFe0JHkJYhJQNp66ZEJh3ANDubjIE2FRmSKYisjhTHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxoMobjinbOkTAJ4rOCmhzY0rvnMB8GA1UdIwQY
MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt
ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1
LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPlH2gYZ
PZBPWLvHWK+sO2oxlwiSEXDBFHa6wMMOfgBxdLQSeVwNQ3Qqmt1zQZsNxVqA42Cy
aMyVh6CqSz3UwLzM/iTYPPpWU6JDr4TtxCUQo5Ll8Szj950ZRSkQtPNM1OvCtTEo
K33sXiJPqJLTLYWwx80bPSVsa+t2EaW5AB0bo7sM20jvLDnQ+Mdsuhz4i0LcfhlL
mlESwsTBOYkUhQTTsnHr575/ojj1SlFImybshWES0MOy8wTwvgPxFL7A4NKBs/55
f6I61G47oX/pAVXAOdQ6feJneZxOr/1nQmG7ZyhOEjfxl6c01Mh1sW7/95DrfFis
6Bk5gJWrO7PQdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:40 2025 by rpki-client