Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: oXimqpoNDYsstpmbtK5PcyETJZL6v+dgjRBsY6Zu5A0=
Subject key identifier: A2:DE:F2:6F:ED:00:F7:AE:6D:9B:61:63:38:F5:4E:02:B4:85:0D:2B
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0199FBB3612D6690046464934D2C749825B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa (hash: SR+eSJvfyVoaMrFO+uW3wC1Oz/meGcZseef5cWzluyk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: OEColrQZuERJn/rWNcYjoHyygDfzYtD+17e2IwtuVVM=)
3: YNsdsH-n-AmHwzwHk8uEB1xLpbc.roa (hash: Z2put0LP3pL4K0BauVWtqhB4C8iT6AgFRsfUMqrtzI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:2d:66:90:04:64:64:93:4d:2c:74:98:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=a2def26fed00f7ae6d9b616338f54e02b4850d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:4d:cb:5a:67:5c:25:6e:e4:3b:af:b1:44:
6a:70:0f:a7:97:d9:c6:39:16:0d:5d:c6:75:f5:d5:
ff:e3:22:b0:b3:07:42:ec:75:20:db:30:8a:78:ae:
25:a3:e6:1e:f9:e6:33:7c:fa:28:3d:2f:11:44:bc:
f6:62:46:de:24:88:8f:75:9e:14:5c:46:3d:4f:2f:
c7:89:10:c3:70:a3:f6:6a:1e:48:05:b6:c1:95:a8:
40:e3:a3:8f:51:a5:98:55:58:a1:5c:d6:1f:7c:04:
8d:96:e9:57:33:1c:63:f3:8a:09:89:df:e5:65:31:
fd:02:36:f9:ec:cb:dc:eb:25:f8:44:d5:70:44:78:
1d:f3:41:e3:37:28:09:e0:86:e5:2a:9b:d6:39:47:
8a:63:14:fb:ab:ca:f5:82:e7:08:3b:7e:b6:f2:7e:
ce:72:47:91:60:6b:e8:28:34:9d:e7:18:ac:43:ed:
19:4c:4a:b9:c1:0d:89:d0:89:9a:ca:d3:24:ed:e6:
ef:c9:b5:ba:28:38:2c:2a:d4:bb:e2:9c:c6:0c:ad:
51:80:4b:6a:1f:85:56:36:cc:91:63:86:40:2a:38:
9e:a4:cb:71:fd:b1:f3:f2:19:9f:af:d2:ee:70:8d:
f0:8d:b4:b9:39:df:d4:9f:59:b3:e1:7f:f5:53:ed:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:F2:6F:ED:00:F7:AE:6D:9B:61:63:38:F5:4E:02:B4:85:0D:2B
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7a:2d:b8:82:8c:30:20:3a:32:77:3e:cc:7a:f5:a1:7a:8a:
1c:00:c2:bd:22:1b:58:c8:6c:e0:26:5b:a8:6e:25:c2:df:4b:
35:64:09:42:14:68:57:ca:be:a4:58:dc:35:97:99:10:9f:60:
1c:95:f7:b0:85:d1:21:84:92:83:58:05:d2:30:16:e4:ed:ce:
c5:32:7e:43:7c:75:c1:aa:e9:81:b4:13:f9:a9:0d:9e:55:43:
f8:4d:9b:82:33:cf:23:69:dd:0b:da:d9:2c:ce:7b:77:50:0b:
c4:23:59:08:73:43:6f:58:08:ff:62:fb:70:3e:0b:5c:1f:5e:
a2:84:82:b3:03:a4:ce:f0:78:0f:a1:ba:ad:3b:7f:41:06:c1:
67:f0:1e:17:4e:20:e1:40:ef:52:03:66:82:99:5d:ad:39:ea:
37:05:3d:99:eb:de:e9:b5:b6:53:7f:38:a4:43:df:f3:ef:09:
81:0d:02:cf:5b:ac:9a:d7:7c:df:be:c3:17:e8:bc:79:30:d5:
bd:ed:8f:32:fe:ce:20:72:3d:6c:a2:c7:91:c7:7b:59:5b:f8:
ae:cf:92:37:3a:e5:26:4e:8a:de:17:3f:9d:f0:08:a0:b6:38:
d3:84:e7:12:ce:5d:cd:0a:9e:54:6c:fa:be:92:03:9e:07:32:
6e:4a:62:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2EtZpAEZGSTTSx0mCWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4
NWQyZGUwHhcNMjUxMDE5MDkwMTAwWhcNMjUxMDIwMDkwMTAwWjAzMTEwLwYDVQQD
EyhhMmRlZjI2ZmVkMDBmN2FlNmQ5YjYxNjMzOGY1NGUwMmI0ODUwZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clNy1pnXCVu5DuvsURqcA+nl9nG
ORYNXcZ19dX/4yKwswdC7HUg2zCKeK4lo+Ye+eYzfPooPS8RRLz2YkbeJIiPdZ4U
XEY9Ty/HiRDDcKP2ah5IBbbBlahA46OPUaWYVVihXNYffASNlulXMxxj84oJid/l
ZTH9Ajb57Mvc6yX4RNVwRHgd80HjNygJ4IblKpvWOUeKYxT7q8r1gucIO3628n7O
ckeRYGvoKDSd5xisQ+0ZTEq5wQ2J0ImaytMk7ebvybW6KDgsKtS74pzGDK1RgEtq
H4VWNsyRY4ZAKjiepMtx/bHz8hmfr9LucI3wjbS5Od/Un1mz4X/1U+012wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLe8m/tAPeubZthYzj1TgK0hQ0rMB8GA1UdIwQY
MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt
Y2MwM2JkMzE1ZmY5LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5
LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXotuIKM
MCA6Mnc+zHr1oXqKHADCvSIbWMhs4CZbqG4lwt9LNWQJQhRoV8q+pFjcNZeZEJ9g
HJX3sIXRIYSSg1gF0jAW5O3OxTJ+Q3x1warpgbQT+akNnlVD+E2bgjPPI2ndC9rZ
LM57d1ALxCNZCHNDb1gI/2L7cD4LXB9eooSCswOkzvB4D6G6rTt/QQbBZ/AeF04g
4UDvUgNmgpldrTnqNwU9meve6bW2U384pEPf8+8JgQ0Cz1usmtd8377DF+i8eTDV
ve2PMv7OIHI9bKLHkcd7WVv4rs+SNzrlJk6K3hc/nfAIoLY404TnEs5dzQqeVGz6
vpIDngcybkpieQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:20 2025 by rpki-client