Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: DO0uuA6F+eqETpeb2MbKLFORq805TJtxOUyqDhYlzF8=
Subject key identifier: 39:4C:0F:83:2C:64:D8:30:04:5B:FE:C6:26:6E:17:40:82:CD:DD:E5
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 0199FC58AE3C3E3D152A6A32869BCA72C6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 15FE
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: 1e8v1OrJcexEvJwOOqkV5ea/OWJspIpPG9BSw74yEwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ae:3c:3e:3d:15:2a:6a:32:86:9b:ca:72:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=394c0f832c64d830045bfec6266e174082cddde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:e7:f8:e5:0f:df:04:49:a2:48:95:2b:9f:
44:78:08:65:7d:2a:d9:09:2f:c7:d5:a5:5f:b4:f4:
fb:3c:06:05:5e:4a:3e:e8:55:23:2c:9f:ca:13:d2:
1f:d4:a2:29:93:63:64:ab:a9:69:ec:b3:17:53:2b:
22:ed:ef:76:1a:5d:83:f9:e6:00:9a:21:80:4b:9c:
1d:6b:f5:da:ff:97:cf:c5:1a:ac:bc:b3:e9:80:cb:
8f:9e:e6:31:d7:a0:92:12:e1:dd:e6:21:79:e0:b7:
f0:d2:9b:4b:b2:57:bc:45:b4:ff:19:26:c5:4e:e8:
51:23:dc:46:63:d9:ab:45:c6:2b:17:eb:46:61:f3:
8c:a9:36:83:52:cb:9a:31:87:64:01:6f:74:fb:c9:
de:ca:19:d2:cf:b9:9a:02:3a:29:ae:e2:b5:d4:9c:
f1:01:3f:33:c2:23:7d:d5:54:df:f9:be:1c:e7:01:
43:9b:0e:50:e2:71:46:9e:37:7c:c2:41:b9:c8:34:
72:0c:2e:b5:1a:50:18:62:57:2d:4b:7c:35:6d:df:
49:df:67:07:bc:78:e9:b0:61:3f:b9:89:9e:cb:c0:
01:61:86:13:67:3f:5e:71:4c:c0:55:b2:22:81:e3:
5f:13:62:fb:9c:65:8e:09:ec:35:35:1a:a3:a9:10:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4C:0F:83:2C:64:D8:30:04:5B:FE:C6:26:6E:17:40:82:CD:DD:E5
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:9a:13:21:fa:37:6e:50:f4:19:e6:e9:c2:31:33:97:71:
1d:63:eb:c2:60:8f:2b:08:1f:41:03:10:33:ab:c8:8c:35:f5:
e1:33:d3:74:2f:bc:99:bb:61:2e:ff:37:10:9c:6a:13:07:8b:
42:34:80:c1:ca:25:1f:5b:c2:ca:3f:b1:f1:41:03:1c:3f:c5:
c2:9c:5d:aa:4c:8f:b8:3c:ea:c5:ad:b2:0f:f1:5f:79:02:93:
50:57:cf:20:b4:68:0d:f6:8a:8f:43:88:e8:e5:12:7e:cf:79:
c1:32:83:43:f0:4c:8d:df:10:f6:25:26:50:d2:b1:a8:05:f1:
a1:ac:57:f6:6f:d2:de:14:c2:6d:55:66:ff:66:dd:da:0d:7f:
02:e2:72:75:e1:0f:a5:4b:73:ef:42:3e:6f:bd:3a:3b:80:12:
a9:7b:3c:a8:28:da:50:3c:88:d6:f9:26:12:fc:38:1d:5f:32:
49:3d:2e:30:1d:56:a8:8d:b4:84:15:2a:63:e4:9b:b2:77:b4:
23:c6:f1:d1:96:9e:22:5a:ab:82:8b:15:61:39:57:55:88:4c:
bf:b2:cf:55:85:72:45:13:f9:c2:ed:f9:56:27:0a:ae:e1:71:
76:f6:f9:19:e8:dc:29:ac:7b:f0:cf:05:94:19:9e:f7:3b:5e:
af:d9:1a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WK48Pj0VKmoyhpvKcsapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz
ZGNlYmYwHhcNMjUxMDE5MTIwMTM0WhcNMjUxMDIwMTIwMTM0WjAzMTEwLwYDVQQD
EygzOTRjMGY4MzJjNjRkODMwMDQ1YmZlYzYyNjZlMTc0MDgyY2RkZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHn+OUP3wRJokiVK59EeAhlfSrZ
CS/H1aVftPT7PAYFXko+6FUjLJ/KE9If1KIpk2Nkq6lp7LMXUysi7e92Gl2D+eYA
miGAS5wda/Xa/5fPxRqsvLPpgMuPnuYx16CSEuHd5iF54Lfw0ptLsle8RbT/GSbF
TuhRI9xGY9mrRcYrF+tGYfOMqTaDUsuaMYdkAW90+8neyhnSz7maAjopruK11Jzx
AT8zwiN91VTf+b4c5wFDmw5Q4nFGnjd8wkG5yDRyDC61GlAYYlctS3w1bd9J32cH
vHjpsGE/uYmey8ABYYYTZz9ecUzAVbIigeNfE2L7nGWOCew1NRqjqRDWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlMD4MsZNgwBFv+xiZuF0CCzd3lMB8GA1UdIwQY
MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt
N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk
LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR2aEyH6
N25Q9Bnm6cIxM5dxHWPrwmCPKwgfQQMQM6vIjDX14TPTdC+8mbthLv83EJxqEweL
QjSAwcolH1vCyj+x8UEDHD/FwpxdqkyPuDzqxa2yD/FfeQKTUFfPILRoDfaKj0OI
6OUSfs95wTKDQ/BMjd8Q9iUmUNKxqAXxoaxX9m/S3hTCbVVm/2bd2g1/AuJydeEP
pUtz70I+b706O4ASqXs8qCjaUDyI1vkmEvw4HV8yST0uMB1WqI20hBUqY+Sbsne0
I8bx0ZaeIlqrgosVYTlXVYhMv7LPVYVyRRP5wu35VicKruFxdvb5GejcKax78M8F
lBme9zter9ka4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:02 2025 by rpki-client