Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: qHLlEoBdzDFQT698k5WMCJkhqMeSgnotnB+H9Wcc+Pc=
Subject key identifier: 8A:CB:96:D7:54:CD:ED:FC:F1:6E:77:BC:56:67:2C:B5:A1:26:EB:CC
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0199FDD9243A69B296D01106CA8C2F8C9AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 154C
Signing time: Sun 19 Oct 2025 19:01:30 +0000
Manifest this update: Sun 19 Oct 2025 19:01:30 +0000
Manifest next update: Mon 20 Oct 2025 19:01:30 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 4Z2Dbu8jHOu9QIIuLlOzDF3tCGJXuOEpHdBDFkbAZvw=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:24:3a:69:b2:96:d0:11:06:ca:8c:2f:8c:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Oct 19 19:01:30 2025 GMT
Not After : Oct 20 19:01:30 2025 GMT
Subject: CN=8acb96d754cdedfcf16e77bc56672cb5a126ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:5d:13:a3:15:8e:60:41:e3:1d:7a:21:ce:
24:eb:d4:14:b7:22:d2:f7:f8:fd:fc:9e:52:92:ea:
62:9a:17:b7:cf:12:5a:96:84:d9:8b:23:83:e0:b7:
90:29:7c:a4:2d:b1:75:94:7d:6e:8a:d1:d8:ca:87:
de:e1:76:0d:9f:a5:12:d1:c7:56:91:19:3a:5a:0d:
63:0f:4c:f7:5c:f8:f7:6c:cc:42:ad:c1:29:8b:10:
d9:b7:20:57:35:61:e3:9d:04:37:5a:ce:85:a6:9f:
fd:2d:96:a2:fe:2d:10:dd:5a:67:1a:80:e0:93:9f:
48:54:0c:9a:f5:b8:a0:79:d7:8c:2f:41:9d:2d:72:
5e:78:bd:95:cb:ff:28:34:83:29:7c:02:42:c5:c7:
44:6a:1d:04:a2:bf:d4:8d:e0:0f:f0:9d:2d:5f:d5:
2b:09:cb:31:af:6a:c6:72:dc:98:03:8f:96:97:f2:
07:78:fe:20:0d:b9:09:cb:9c:f0:cd:a3:30:97:9a:
87:75:6a:f7:09:59:a3:ce:66:4a:72:54:7c:50:fe:
b7:45:f9:c1:1a:dc:d7:fb:86:9a:53:fa:7d:92:a9:
f8:3a:13:b4:59:50:29:cf:73:12:d7:b7:d0:6f:95:
ea:2b:bf:c9:38:98:7d:08:d8:35:69:06:1f:7c:4e:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:96:D7:54:CD:ED:FC:F1:6E:77:BC:56:67:2C:B5:A1:26:EB:CC
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:2b:c8:d0:ec:57:80:2c:1e:35:d6:50:db:55:03:c0:7d:
50:a4:c8:00:8a:5c:0b:39:e7:c4:52:d4:17:ca:ad:2b:1a:d0:
f5:06:05:24:71:6d:51:bd:ae:09:95:5f:73:b1:1d:56:72:f4:
9d:4d:cb:c8:95:8f:ba:18:9c:89:87:79:cf:71:02:19:49:02:
02:49:b1:01:5e:34:11:42:25:2a:42:77:61:60:1a:c3:ff:70:
5c:94:e7:71:28:9e:5c:ae:41:51:d4:92:11:57:25:f5:58:13:
04:ae:43:99:12:86:ae:3b:51:0c:4b:1a:42:c9:71:a4:58:4a:
21:60:c6:b8:a6:f4:fc:8c:86:04:d5:fe:c1:14:8f:c9:48:c5:
9c:a2:8f:f5:57:d6:2b:a3:3f:11:dd:c2:0d:84:33:0c:d3:5b:
68:c2:db:fd:f1:e7:4a:32:6b:34:d4:e7:45:d8:32:c3:35:6a:
cd:e0:05:a9:05:5d:59:92:07:ab:5d:e0:f7:9e:5f:3c:8a:b7:
e6:b4:86:8b:07:a2:fd:87:0d:8f:65:cc:61:8f:2f:14:38:65:
81:d0:ea:46:21:f2:c0:b1:16:82:8a:ab:b4:87:96:8a:36:88:
32:09:87:a0:dc:86:0c:66:55:26:c3:74:ee:42:99:bd:92:ae:
b4:4a:e6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92SQ6abKW0BEGyowvjJrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjUxMDE5MTkwMTMwWhcNMjUxMDIwMTkwMTMwWjAzMTEwLwYDVQQD
Eyg4YWNiOTZkNzU0Y2RlZGZjZjE2ZTc3YmM1NjY3MmNiNWExMjZlYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+5dE6MVjmBB4x16Ic4k69QUtyLS
9/j9/J5Skupimhe3zxJaloTZiyOD4LeQKXykLbF1lH1uitHYyofe4XYNn6US0cdW
kRk6Wg1jD0z3XPj3bMxCrcEpixDZtyBXNWHjnQQ3Ws6Fpp/9LZai/i0Q3VpnGoDg
k59IVAya9bigedeML0GdLXJeeL2Vy/8oNIMpfAJCxcdEah0Eor/UjeAP8J0tX9Ur
Ccsxr2rGctyYA4+Wl/IHeP4gDbkJy5zwzaMwl5qHdWr3CVmjzmZKclR8UP63RfnB
GtzX+4aaU/p9kqn4OhO0WVApz3MS17fQb5XqK7/JOJh9CNg1aQYffE6PMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrLltdUze388W53vFZnLLWhJuvMMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS4ryNDs
V4AsHjXWUNtVA8B9UKTIAIpcCznnxFLUF8qtKxrQ9QYFJHFtUb2uCZVfc7EdVnL0
nU3LyJWPuhiciYd5z3ECGUkCAkmxAV40EUIlKkJ3YWAaw/9wXJTncSieXK5BUdSS
EVcl9VgTBK5DmRKGrjtRDEsaQslxpFhKIWDGuKb0/IyGBNX+wRSPyUjFnKKP9VfW
K6M/Ed3CDYQzDNNbaMLb/fHnSjJrNNTnRdgywzVqzeAFqQVdWZIHq13g955fPIq3
5rSGiwei/YcNj2XMYY8vFDhlgdDqRiHywLEWgoqrtIeWijaIMgmHoNyGDGZVJsN0
7kKZvZKutErmog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:46 2025 by rpki-client