Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: qymrBZJ54sOfCFfRMHxQoojZFZrACfddm7RBGT47eK8=
Subject key identifier: 2F:5E:1F:C3:52:AF:33:7C:A0:99:78:67:F0:AC:1A:E4:03:53:14:DB
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 0199FCC61E43A9A40975876C71A93D483C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0F0B
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: +64/Ptpf8+l+b70DFM8489Ui1lrtV2yCYsIwx9bXRnw=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1e:43:a9:a4:09:75:87:6c:71:a9:3d:48:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=2f5e1fc352af337ca0997867f0ac1ae4035314db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:d5:02:15:80:e2:ab:c3:53:2a:b9:9e:5c:
6d:78:b8:1c:9b:d2:5b:5f:69:e5:e6:7b:16:31:8e:
51:c0:e5:7b:d7:fa:33:cb:30:94:39:24:70:2e:97:
79:2a:5b:c7:77:a2:9f:37:70:10:e7:af:5a:80:91:
c2:28:38:14:a7:a0:95:e9:d5:87:19:27:3a:cb:20:
04:9b:1e:74:e4:06:ee:eb:09:0f:28:c0:27:91:28:
14:f1:cc:3b:66:91:b3:86:9a:32:39:43:75:3d:1f:
5b:7d:58:a4:76:83:54:11:0f:de:83:f9:ac:52:bc:
56:fa:91:f1:9f:8e:14:49:41:fb:c3:0c:70:e9:60:
0d:a8:16:57:8e:b4:05:76:b5:30:90:c4:ab:31:cd:
f3:08:b2:5d:01:95:4f:9b:ee:79:41:0e:94:82:62:
f0:f3:41:65:8a:9e:8c:6a:04:a3:f6:52:49:8a:f7:
a3:f8:a4:e5:86:d0:b4:51:af:08:9a:b0:da:25:98:
ff:f4:b8:0f:27:8e:60:59:d3:4d:f9:75:f0:25:7b:
35:c9:bb:4c:8b:c5:f8:44:49:a2:40:a5:d6:cb:d7:
0e:f9:63:d0:34:c7:30:d4:12:77:b2:a1:6b:2f:23:
f4:77:61:81:19:28:69:11:d7:36:88:97:c7:cc:e7:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:1F:C3:52:AF:33:7C:A0:99:78:67:F0:AC:1A:E4:03:53:14:DB
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fc:1e:fb:8f:3c:ef:0d:25:c1:bc:60:5e:4a:50:bb:77:cf:
ad:4f:42:da:1b:eb:9f:d4:fa:55:bc:1e:96:b0:64:6a:90:7b:
38:5d:11:81:af:90:54:43:94:8c:e9:80:33:40:9e:95:14:b4:
41:43:e2:43:0f:64:de:13:cb:e4:97:3a:46:66:3c:6d:25:74:
19:34:d5:40:3a:e4:74:02:4d:1c:9a:7d:5a:73:ab:81:fd:96:
ee:e9:f2:dd:df:f7:0f:59:59:8b:91:74:26:45:7c:87:87:de:
7a:7d:3b:52:bc:15:ac:fb:70:d6:26:eb:88:df:3e:c8:21:4f:
cb:89:6e:0a:81:ef:99:44:c9:d3:aa:ed:b2:89:ad:2c:45:32:
c1:34:ff:e5:b9:ba:13:8d:19:49:3e:27:b7:2f:ff:ed:9f:99:
ab:ee:47:a4:ad:54:34:d7:78:02:cc:84:f8:33:67:e2:ca:02:
f1:4a:90:e0:59:a9:55:0e:c7:42:1b:ba:d3:28:c6:47:6e:5c:
db:d3:db:ac:69:32:52:3c:36:d4:74:d8:28:81:f4:47:ee:a8:
d3:d4:59:cf:17:17:b2:cb:46:19:46:26:91:1b:e7:ac:bc:10:
8a:53:3c:91:57:dc:fe:d7:df:4c:a6:8f:6e:eb:94:91:90:f8:
b6:10:a8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xh5DqaQJdYdscak9SDxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTMyMTIxNWE0ZDM1ZWQyMjk4YjA3Mzk3MWRiNDA4ODY0
ZmQzNjIwHhcNMjUxMDE5MTQwMTA2WhcNMjUxMDIwMTQwMTA2WjAzMTEwLwYDVQQD
EygyZjVlMWZjMzUyYWYzMzdjYTA5OTc4NjdmMGFjMWFlNDAzNTMxNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmojVAhWA4qvDUyq5nlxteLgcm9Jb
X2nl5nsWMY5RwOV71/ozyzCUOSRwLpd5KlvHd6KfN3AQ569agJHCKDgUp6CV6dWH
GSc6yyAEmx505Abu6wkPKMAnkSgU8cw7ZpGzhpoyOUN1PR9bfVikdoNUEQ/eg/ms
UrxW+pHxn44USUH7wwxw6WANqBZXjrQFdrUwkMSrMc3zCLJdAZVPm+55QQ6UgmLw
80Flip6MagSj9lJJivej+KTlhtC0Ua8ImrDaJZj/9LgPJ45gWdNN+XXwJXs1ybtM
i8X4REmiQKXWy9cO+WPQNMcw1BJ3sqFrLyP0d2GBGShpEdc2iJfHzOeA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9eH8NSrzN8oJl4Z/CsGuQDUxTbMB8GA1UdIwQY
MBaAFBajISFaTTXtIpiwc5cdtAiGT9NiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQt
YzRjOTRiODgwNzFiLzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQtYzRjOTRiODgwNzFi
LzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfwe+488
7w0lwbxgXkpQu3fPrU9C2hvrn9T6VbwelrBkapB7OF0Rga+QVEOUjOmAM0CelRS0
QUPiQw9k3hPL5Jc6RmY8bSV0GTTVQDrkdAJNHJp9WnOrgf2W7uny3d/3D1lZi5F0
JkV8h4feen07UrwVrPtw1ibriN8+yCFPy4luCoHvmUTJ06rtsomtLEUywTT/5bm6
E40ZST4nty//7Z+Zq+5HpK1UNNd4AsyE+DNn4soC8UqQ4FmpVQ7HQhu60yjGR25c
29PbrGkyUjw21HTYKIH0R+6o09RZzxcXsstGGUYmkRvnrLwQilM8kVfc/tffTKaP
buuUkZD4thCoQg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:52 2025 by rpki-client