Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: KKsHGS7rwAHHn40lNUYKT+87d+BIilbeiAci+B8R0Mk=
Subject key identifier: 84:79:99:C6:77:63:24:2C:B3:D1:7F:99:62:39:34:A7:2D:72:EF:3F
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 0199FC8F41378F3DED31FF4B18111F37FFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 13F6
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: 9PEM/mZa5iNIX34gVUKI12AVVY103bAlTsD/eXh8XLo=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:37:8f:3d:ed:31:ff:4b:18:11:1f:37:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=847999c67763242cb3d17f99623934a72d72ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:00:78:a8:da:70:88:0c:77:f6:44:06:d7:
18:44:a9:18:70:1d:a6:0e:09:c3:ad:08:2b:c9:99:
da:82:a7:10:bc:da:97:93:aa:58:90:3e:a7:b1:be:
25:ba:88:65:14:bf:d1:00:09:12:c3:8d:4b:ab:23:
ea:15:e8:eb:b6:1a:84:76:df:9e:48:a0:b5:bc:a4:
fb:48:aa:fc:fa:60:76:2c:ed:38:a2:5f:c2:ab:f4:
c7:bc:f3:2c:2b:46:1a:d1:f7:b7:21:b6:26:7d:c8:
6b:41:74:44:60:24:7f:94:bb:18:14:2d:2a:a1:b2:
1c:a5:c7:97:3f:63:f0:5d:f2:53:df:b1:51:09:b8:
b8:43:21:bd:9b:81:09:a4:57:c4:91:60:9d:56:1f:
54:dc:35:0d:39:5c:db:5d:06:29:e2:24:14:6a:f8:
70:7c:97:e8:43:a8:3f:81:31:fb:4e:cc:81:0b:a6:
50:bc:b6:8c:af:3e:85:d4:b9:b8:83:7a:01:5a:0d:
4d:40:bd:a1:ba:b3:f8:09:1d:12:42:b8:3e:77:2f:
ec:e1:c9:d7:a4:21:e4:09:c6:b3:38:27:67:f6:ac:
4c:28:83:48:eb:a7:75:77:f3:cb:c4:e2:5c:64:63:
0c:87:b2:0e:6d:50:ef:d2:29:33:16:d6:2c:cf:74:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:99:C6:77:63:24:2C:B3:D1:7F:99:62:39:34:A7:2D:72:EF:3F
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:f3:86:85:e7:8d:6e:cd:05:4f:6e:71:33:dc:2c:73:04:
5f:ee:05:04:1c:53:59:bc:55:ed:65:14:17:d1:ec:15:4a:9e:
25:68:cf:e5:05:cd:02:88:50:23:c3:ad:83:ad:24:74:78:d7:
3f:06:92:49:c9:ef:bc:4e:26:49:b1:97:25:17:b6:03:b5:71:
8a:34:76:d3:ec:04:41:ab:6e:3d:02:30:4c:4f:f1:d8:f4:87:
14:00:a7:e1:59:5f:a5:bb:ff:9e:c4:4e:ee:1f:b0:6e:54:23:
3b:11:f0:bb:54:49:d1:22:bb:2b:ff:6a:61:44:01:6d:71:31:
7e:d8:9b:17:a5:d1:27:fc:4e:6a:29:3f:e7:e6:d1:6a:3a:27:
7e:5d:a7:11:d0:70:a0:ff:76:78:cd:bf:72:6c:44:cd:0f:96:
55:81:36:69:cd:12:11:66:23:fb:56:e0:54:94:bb:b8:f5:c9:
9f:c8:c3:43:e2:2e:47:81:4a:5d:d7:fe:49:1a:c8:76:e0:52:
19:b3:72:b9:b0:7d:2b:23:a8:ab:43:41:9e:a7:2e:69:83:98:
6d:09:0b:0b:f1:ca:b2:4a:0b:0e:eb:25:94:c4:bd:74:3b:1b:
f7:da:44:9d:b1:58:22:bb:cf:03:32:57:37:7a:52:c9:cc:65:
e6:b4:ab:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0E3jz3tMf9LGBEfN//mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5
ZDY2YTIwHhcNMjUxMDE5MTMwMTEwWhcNMjUxMDIwMTMwMTEwWjAzMTEwLwYDVQQD
Eyg4NDc5OTljNjc3NjMyNDJjYjNkMTdmOTk2MjM5MzRhNzJkNzJlZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoEAeKjacIgMd/ZEBtcYRKkYcB2m
DgnDrQgryZnagqcQvNqXk6pYkD6nsb4luohlFL/RAAkSw41LqyPqFejrthqEdt+e
SKC1vKT7SKr8+mB2LO04ol/Cq/THvPMsK0Ya0fe3IbYmfchrQXREYCR/lLsYFC0q
obIcpceXP2PwXfJT37FRCbi4QyG9m4EJpFfEkWCdVh9U3DUNOVzbXQYp4iQUavhw
fJfoQ6g/gTH7TsyBC6ZQvLaMrz6F1Lm4g3oBWg1NQL2hurP4CR0SQrg+dy/s4cnX
pCHkCcazOCdn9qxMKINI66d1d/PLxOJcZGMMh7IObVDv0ikzFtYsz3RnWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR5mcZ3YyQss9F/mWI5NKctcu8/MB8GA1UdIwQY
MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct
ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk
LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsLzhoXn
jW7NBU9ucTPcLHMEX+4FBBxTWbxV7WUUF9HsFUqeJWjP5QXNAohQI8Otg60kdHjX
PwaSScnvvE4mSbGXJRe2A7VxijR20+wEQatuPQIwTE/x2PSHFACn4Vlfpbv/nsRO
7h+wblQjOxHwu1RJ0SK7K/9qYUQBbXExftibF6XRJ/xOaik/5+bRajonfl2nEdBw
oP92eM2/cmxEzQ+WVYE2ac0SEWYj+1bgVJS7uPXJn8jDQ+IuR4FKXdf+SRrIduBS
GbNyubB9KyOoq0NBnqcuaYOYbQkLC/HKskoLDusllMS9dDsb99pEnbFYIrvPAzJX
N3pSycxl5rSrCQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:57 2025 by rpki-client