Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: BPMz9rJIK0UC8lTkglBjtzZMjGNLcIEc+Q7gbFQrAww=
Subject key identifier: 31:12:AB:BA:21:89:18:AE:67:AB:E8:0D:C0:61:CE:3E:D8:CD:38:1B
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 0199FC58E727CBE6FCC317139C53E2FA3DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: CgeR9ka4wO1bqRZ+8EaCUQlFma8GCS2iImECcgAjRL4=)
2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e7:27:cb:e6:fc:c3:17:13:9c:53:e2:fa:3d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=3112abba218918ae67abe80dc061ce3ed8cd381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:a2:6b:57:f7:b7:11:aa:a9:16:1b:e4:44:
9c:7b:60:9b:24:c9:6e:0c:14:57:46:00:16:7c:e6:
34:bb:cd:d8:ad:3a:4d:d8:af:36:2b:1f:85:4f:e1:
97:6e:ab:a1:dd:aa:5f:ee:08:1a:9b:cd:ad:92:7c:
a7:9a:30:a8:39:96:ca:d4:ed:0b:bc:8f:a3:95:05:
d5:d9:e5:91:d0:84:ba:59:be:19:73:12:4c:8e:7b:
cc:42:fd:4c:60:6b:76:ec:32:bd:3d:8b:a6:d6:63:
aa:0a:49:2a:5d:e4:a8:ef:76:17:91:47:7a:b0:cc:
84:93:68:ab:64:e5:4b:0d:c1:61:e6:f3:e4:ee:17:
7b:dd:ee:b3:00:38:89:70:c5:7a:fb:1f:3b:72:02:
2c:60:aa:d3:6f:58:d7:d0:d5:95:b6:dd:00:d6:b7:
40:a8:69:40:3d:65:be:0d:70:a3:44:48:00:e1:aa:
dc:d0:a4:31:88:2b:ea:a4:41:b0:9f:24:d7:d9:06:
76:26:b9:36:0b:93:a0:59:59:54:32:5a:ed:c4:fc:
32:fc:90:47:3c:83:24:5a:4c:6e:b2:78:c7:a3:d7:
37:a3:44:f1:89:22:27:88:f8:f9:74:9f:df:35:c7:
26:70:30:b8:81:ed:c0:ad:52:62:b4:0d:32:b5:86:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:AB:BA:21:89:18:AE:67:AB:E8:0D:C0:61:CE:3E:D8:CD:38:1B
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:1f:aa:9f:87:0b:3b:83:36:d6:75:f0:6e:52:b5:1a:fb:
d9:b6:e0:03:32:5a:28:69:19:a8:fa:88:9c:d9:d5:31:aa:2f:
f2:bc:f2:05:73:77:00:a9:31:80:4f:88:12:14:a4:12:04:be:
1b:9d:a0:54:ad:31:26:9f:c0:1a:d5:99:a7:0f:03:e9:f3:2b:
57:72:14:b9:c7:93:90:47:af:a2:7c:a6:17:60:60:45:72:d0:
b6:40:5b:3b:b6:9b:85:61:89:ca:93:e0:28:d3:39:f0:97:38:
5b:0a:01:2f:1d:c1:0f:8b:9b:96:6b:27:95:88:90:bc:2a:0b:
6f:49:49:d2:83:64:c3:bc:eb:c6:8a:dd:27:f1:38:0c:2a:19:
97:5f:cf:b4:af:9d:f4:09:56:39:ab:b4:fa:0d:71:8f:6b:ec:
89:8f:32:64:1c:b7:54:ff:f8:2d:07:86:1d:e3:90:6c:37:01:
13:ef:f4:81:8c:ea:da:ec:79:f2:ab:f8:74:e3:17:b0:0f:0d:
23:b8:f8:73:b8:6c:52:c0:5a:1a:f7:6b:d1:89:17:69:69:65:
9d:08:35:94:9d:e6:cf:f9:60:63:4e:20:7b:ca:ec:1f:08:91:
16:21:23:e5:71:f9:f3:b9:8c:cd:b7:88:3f:2b:d6:ae:5b:cd:
81:ca:9f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOcny+b8wxcTnFPi+j2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzNjZDJkMWY2ZGNmMWVlYzk3ZTg2OTQzYzRlNTNiMGM4
OGVhYWUwHhcNMjUxMDE5MTIwMTQ4WhcNMjUxMDIwMTIwMTQ4WjAzMTEwLwYDVQQD
EygzMTEyYWJiYTIxODkxOGFlNjdhYmU4MGRjMDYxY2UzZWQ4Y2QzODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydCia1f3txGqqRYb5ESce2CbJMlu
DBRXRgAWfOY0u83YrTpN2K82Kx+FT+GXbquh3apf7ggam82tknynmjCoOZbK1O0L
vI+jlQXV2eWR0IS6Wb4ZcxJMjnvMQv1MYGt27DK9PYum1mOqCkkqXeSo73YXkUd6
sMyEk2irZOVLDcFh5vPk7hd73e6zADiJcMV6+x87cgIsYKrTb1jX0NWVtt0A1rdA
qGlAPWW+DXCjREgA4arc0KQxiCvqpEGwnyTX2QZ2Jrk2C5OgWVlUMlrtxPwy/JBH
PIMkWkxusnjHo9c3o0TxiSIniPj5dJ/fNccmcDC4ge3ArVJitA0ytYZNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDESq7ohiRiuZ6voDcBhzj7YzTgbMB8GA1UdIwQY
MBaAFBUzzS0fbc8e7JfoaUPE5TsMiOquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMt
OWZlNTViMTcxNjgzLzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMtOWZlNTViMTcxNjgz
LzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFcfqp+H
CzuDNtZ18G5StRr72bbgAzJaKGkZqPqInNnVMaov8rzyBXN3AKkxgE+IEhSkEgS+
G52gVK0xJp/AGtWZpw8D6fMrV3IUuceTkEevonymF2BgRXLQtkBbO7abhWGJypPg
KNM58Jc4WwoBLx3BD4ublmsnlYiQvCoLb0lJ0oNkw7zrxordJ/E4DCoZl1/PtK+d
9AlWOau0+g1xj2vsiY8yZBy3VP/4LQeGHeOQbDcBE+/0gYzq2ux58qv4dOMXsA8N
I7j4c7hsUsBaGvdr0YkXaWllnQg1lJ3mz/lgY04ge8rsHwiRFiEj5XH587mMzbeI
PyvWrlvNgcqfYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:15 2025 by rpki-client