Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
File: FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json)
Hash identifier: pvEJHa2NUmnrsPY+nFhXKNN7L4Z1j40d++UBu6ZbPco=
Subject key identifier: 40:60:69:DE:62:FC:52:F3:DA:6C:98:0A:E6:EE:EA:6B:5B:20:EE:16
Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
Certificate issuer: /CN=14754e863d117ce6210f295461a8c6aa043c6c80
Certificate serial: 0199FC5888EFDB418711D8EB72AB458977B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: RTBBDvRv5DCt1oJDtki014n6VWGqm/xOoIgAMNoIQGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:88:ef:db:41:87:11:d8:eb:72:ab:45:89:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=406069de62fc52f3da6c980ae6eeea6b5b20ee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:bf:ef:ac:78:d5:03:e2:e3:ad:d0:f7:ed:
7e:25:48:2f:d8:58:b2:c6:c9:45:11:9d:aa:94:9a:
a9:ca:b6:34:5c:c0:48:bb:00:4f:73:d2:76:05:ed:
07:88:0e:7b:23:b5:1d:9d:12:7e:9d:ce:2d:60:4b:
4a:e5:b4:7e:f6:d7:1b:77:62:71:a7:b3:cf:ad:7a:
76:ef:ef:e1:fb:8b:5b:00:5f:5d:b2:4a:f3:43:e7:
66:2c:7e:1d:33:6e:3a:f4:d6:77:6e:cc:e9:9e:fa:
69:cb:59:12:1e:7f:52:b6:b6:ec:6b:f2:59:74:7a:
8d:72:7d:aa:04:48:c7:37:d2:c1:af:cf:a0:15:95:
31:50:0a:2d:24:4d:75:3a:87:7e:1b:09:d2:cd:59:
d8:ac:24:cc:e2:a7:6a:cb:6d:73:95:85:48:74:7f:
10:30:7e:a9:e8:79:9f:51:9a:a5:cd:9f:1c:74:31:
72:cd:fb:7e:f3:e8:9f:cb:30:f4:74:05:a4:6a:44:
03:cb:21:d0:b1:05:98:6a:98:0d:24:65:57:b7:c1:
bb:98:40:f3:71:4e:a2:6c:59:36:5b:19:9c:51:b5:
f7:ab:26:c9:b2:4e:06:7e:5f:d9:96:aa:ce:b8:67:
df:06:cf:0e:03:d7:1c:e6:97:fa:5c:a2:67:f8:1b:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:69:DE:62:FC:52:F3:DA:6C:98:0A:E6:EE:EA:6B:5B:20:EE:16
X509v3 Authority Key Identifier:
keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:32:09:74:e9:30:56:c9:f8:f6:4d:64:03:80:6b:5e:99:44:
13:c2:ed:89:df:78:94:54:18:67:36:dc:92:fd:b1:4c:db:53:
c2:9d:49:47:b8:01:78:f3:8c:be:46:cf:96:60:14:a5:b5:d2:
d9:67:9a:db:c2:e0:75:21:54:05:80:28:d0:96:3d:b1:ab:a2:
a9:5d:e0:49:22:8a:dd:d2:e3:28:19:05:ae:40:a2:8c:86:37:
f2:55:b0:6b:03:94:e5:dd:2b:cf:c6:98:69:49:8d:bf:b7:b0:
ed:12:36:3c:6f:50:a4:7e:d5:32:78:05:eb:6e:34:f5:19:4a:
8b:af:ea:d1:a1:0d:fa:d8:bb:08:71:53:b7:0e:7b:cd:08:49:
ac:09:37:36:f2:f2:6c:53:14:e6:57:0f:bf:53:6d:18:23:52:
21:07:24:7c:0d:26:ba:77:15:6d:77:60:e5:c7:88:85:34:d6:
53:14:32:61:71:de:26:b9:8c:9a:0a:a0:20:67:71:33:f1:a5:
2c:d5:72:ee:19:62:30:7b:fd:a5:41:84:ad:45:2b:eb:de:ac:
ed:e6:d7:fe:ac:49:8e:b4:ad:7e:38:4d:5f:c1:38:ed:d0:d4:
e1:3b:2a:be:ab:1a:0a:62:0b:00:23:16:0d:f4:7f:7c:01:a9:
3f:74:13:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIjv20GHEdjrcqtFiXewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz
YzZjODAwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
Eyg0MDYwNjlkZTYyZmM1MmYzZGE2Yzk4MGFlNmVlZWE2YjViMjBlZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPW/76x41QPi463Q9+1+JUgv2Fiy
xslFEZ2qlJqpyrY0XMBIuwBPc9J2Be0HiA57I7UdnRJ+nc4tYEtK5bR+9tcbd2Jx
p7PPrXp27+/h+4tbAF9dskrzQ+dmLH4dM2469NZ3bszpnvppy1kSHn9Strbsa/JZ
dHqNcn2qBEjHN9LBr8+gFZUxUAotJE11Ood+GwnSzVnYrCTM4qdqy21zlYVIdH8Q
MH6p6HmfUZqlzZ8cdDFyzft+8+ifyzD0dAWkakQDyyHQsQWYapgNJGVXt8G7mEDz
cU6ibFk2WxmcUbX3qybJsk4Gfl/ZlqrOuGffBs8OA9cc5pf6XKJn+BvNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBgad5i/FLz2myYCubu6mtbIO4WMB8GA1UdIwQY
MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt
YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0
LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjIJdOkw
Vsn49k1kA4BrXplEE8Ltid94lFQYZzbckv2xTNtTwp1JR7gBePOMvkbPlmAUpbXS
2Wea28LgdSFUBYAo0JY9sauiqV3gSSKK3dLjKBkFrkCijIY38lWwawOU5d0rz8aY
aUmNv7ew7RI2PG9QpH7VMngF62409RlKi6/q0aEN+ti7CHFTtw57zQhJrAk3NvLy
bFMU5lcPv1NtGCNSIQckfA0muncVbXdg5ceIhTTWUxQyYXHeJrmMmgqgIGdxM/Gl
LNVy7hliMHv9pUGErUUr696s7ebX/qxJjrStfjhNX8E47dDU4TsqvqsaCmILACMW
DfR/fAGpP3QTJA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:41 2025 by rpki-client