Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: 3vcnK11pl3SGS+AYQMI2AYn5f0HKCg+icAbph3IsKpk=
Subject key identifier: 14:49:0D:DA:8F:AE:49:27:02:F6:40:C9:CD:3B:24:65:6D:0F:52:6B
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0199FDD960796AAF30CCFCF253FA63D2FCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: DIpZ5SXUMV5L4DpBcqquUBnJ/S8W430CilVpyjMVLpA=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:60:79:6a:af:30:cc:fc:f2:53:fa:63:d2:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=14490dda8fae492702f640c9cd3b24656d0f526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:42:9e:f6:97:65:2e:cb:6d:e2:92:76:96:
e1:db:cc:b1:85:83:36:d9:b9:67:0b:e9:46:56:ea:
73:13:8d:18:5b:87:11:a1:74:85:b2:ff:1a:76:af:
64:13:ca:4d:c8:03:aa:00:c8:64:a8:15:22:e9:5f:
82:51:f6:21:8d:99:e6:e1:aa:32:d8:9a:44:57:7a:
db:93:66:58:d5:d8:14:b9:b1:65:2e:13:cc:bb:3d:
86:a1:62:c7:90:13:26:bb:42:0d:6e:c9:ed:23:bf:
06:65:0d:85:d2:4d:48:74:03:9b:a9:13:e2:f9:85:
51:ae:c1:bb:84:4f:cf:c7:29:c9:93:c1:1d:02:54:
24:dd:6a:19:11:98:16:53:1d:b3:eb:09:83:5a:11:
7f:19:22:75:52:39:19:f3:b3:f7:6e:42:92:c5:62:
c5:19:9e:fd:87:7b:ec:14:62:f9:5f:03:1f:fe:f3:
30:57:32:14:8a:93:a0:cb:76:46:f8:22:82:e3:ad:
e6:b3:e1:80:74:e0:43:9a:6f:6d:f7:8c:8f:c8:fc:
43:19:9e:b9:92:01:33:1f:85:a7:fb:45:39:00:39:
8f:6c:e0:7d:fe:05:9e:42:8b:73:10:e9:31:f9:b6:
86:3d:1d:40:43:df:a5:a7:ee:8b:b7:00:7a:1c:1d:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:49:0D:DA:8F:AE:49:27:02:F6:40:C9:CD:3B:24:65:6D:0F:52:6B
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:26:ee:74:63:78:b7:3e:99:46:5b:7d:b4:3b:52:cb:b8:
86:43:3c:17:16:e8:85:48:6e:f2:66:d7:79:8a:30:cf:2e:b9:
83:56:96:d5:00:3f:e8:ad:8f:d2:80:12:1c:0f:d2:c4:98:d3:
df:24:16:46:47:4d:55:a1:19:3b:19:e0:83:d4:b4:ec:d0:00:
ee:33:fa:0c:38:b0:f7:94:f0:36:63:7a:4e:81:fb:0e:57:4b:
ca:1e:d0:05:bf:67:87:38:d1:06:a6:0d:9c:08:b1:be:ce:29:
4d:6b:78:35:c6:67:2f:9a:db:e1:d4:44:ba:73:3a:fa:22:6f:
50:d0:aa:88:98:4b:2d:40:1a:b7:46:54:66:fc:a7:07:6a:2e:
47:7f:19:f0:cc:87:62:0e:97:e6:31:6a:66:07:84:1e:08:99:
84:44:08:52:dc:17:15:39:ac:cf:f4:5c:d0:69:9c:ed:24:49:
30:ea:5e:11:68:d1:22:6c:d2:ff:b1:e3:5f:a1:fb:5d:e4:74:
26:a2:b4:b4:4f:30:8a:0b:d8:74:0c:c4:5f:f6:fe:0a:3a:7e:
98:9f:e6:8d:54:4e:59:a9:24:d9:9a:c9:68:26:8e:52:1c:98:
dc:a0:8d:84:f6:37:38:bf:f3:33:70:6e:8f:36:0e:5b:f9:28:
14:bd:f2:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WB5aq8wzPzyU/pj0vz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3M2IwZDdmMGVhYzY2NTczM2Q5MjgxNmRkNDkxNjJkNzJl
MjIxZjMwHhcNMjUxMDE5MTkwMTQ1WhcNMjUxMDIwMTkwMTQ1WjAzMTEwLwYDVQQD
EygxNDQ5MGRkYThmYWU0OTI3MDJmNjQwYzljZDNiMjQ2NTZkMGY1MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7NCnvaXZS7LbeKSdpbh28yxhYM2
2blnC+lGVupzE40YW4cRoXSFsv8adq9kE8pNyAOqAMhkqBUi6V+CUfYhjZnm4aoy
2JpEV3rbk2ZY1dgUubFlLhPMuz2GoWLHkBMmu0INbsntI78GZQ2F0k1IdAObqRPi
+YVRrsG7hE/PxynJk8EdAlQk3WoZEZgWUx2z6wmDWhF/GSJ1UjkZ87P3bkKSxWLF
GZ79h3vsFGL5XwMf/vMwVzIUipOgy3ZG+CKC463ms+GAdOBDmm9t94yPyPxDGZ65
kgEzH4Wn+0U5ADmPbOB9/gWeQotzEOkx+baGPR1AQ9+lp+6LtwB6HB0eiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRJDdqPrkknAvZAyc07JGVtD1JrMB8GA1UdIwQY
MBaAFBc7DX8OrGZXM9koFt1JFi1y4iHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEt
ZTIzYTM5MzRiNmY3LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEtZTIzYTM5MzRiNmY3
LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIUm7nRj
eLc+mUZbfbQ7Usu4hkM8FxbohUhu8mbXeYowzy65g1aW1QA/6K2P0oASHA/SxJjT
3yQWRkdNVaEZOxngg9S07NAA7jP6DDiw95TwNmN6ToH7DldLyh7QBb9nhzjRBqYN
nAixvs4pTWt4NcZnL5rb4dREunM6+iJvUNCqiJhLLUAat0ZUZvynB2ouR38Z8MyH
Yg6X5jFqZgeEHgiZhEQIUtwXFTmsz/Rc0Gmc7SRJMOpeEWjRImzS/7HjX6H7XeR0
JqK0tE8wigvYdAzEX/b+Cjp+mJ/mjVROWakk2ZrJaCaOUhyY3KCNhPY3OL/zM3Bu
jzYOW/koFL3y3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:37 2025 by rpki-client