
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: b+Wq33D3IV3GdIW53JnUZ1qjPofETLZD52OL+S4x+eg=
Subject key identifier: 2F:0C:0A:C4:BB:A3:AA:71:AA:AE:AE:3D:77:16:38:49:31:CA:A0:68
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 0199FAD85145CB12C2A77DA241E214CD30A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 15B8
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: sdTiw9zw803xll6YEN25tHhyB+Ghawko3DypbQvnL3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:51:45:cb:12:c2:a7:7d:a2:41:e2:14:cd:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=2f0c0ac4bba3aa71aaaeae3d7716384931caa068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:48:a8:9a:d6:08:1f:7d:e9:0c:f9:21:fb:
8b:42:6d:70:c4:19:50:a9:4d:08:5b:8e:4e:c2:80:
e3:20:14:6f:1a:e1:88:6a:e3:ba:1c:1f:eb:92:d3:
b2:96:9d:a0:64:30:c0:f6:04:c6:03:2b:84:55:12:
18:86:67:d7:2e:9a:4b:b4:ab:81:32:e5:22:05:d2:
71:37:1c:58:60:98:a7:3c:9c:34:91:ce:a1:0c:ee:
ff:7b:31:5f:a1:a0:14:a7:9d:c9:49:24:23:7b:de:
82:90:6a:62:ba:ec:8e:4f:d4:16:f8:5d:c1:01:aa:
61:9f:10:55:f2:c0:cd:4a:d7:81:b3:f9:ad:5e:56:
b2:9b:ac:3d:48:0e:b1:be:2b:c8:ee:a5:ab:2e:a8:
0a:21:0d:32:84:d9:d4:a9:00:42:1d:ae:78:f4:a3:
fe:18:9e:dc:a4:21:63:7c:d4:fc:9f:58:45:45:36:
0f:97:01:f6:e7:19:3c:ed:c9:67:f7:03:77:64:84:
c5:a0:2a:98:d7:73:cc:58:64:55:36:1e:97:61:dd:
a1:d6:8e:23:91:71:3d:af:c3:69:0d:d0:a5:c6:33:
10:92:ca:1b:2b:90:fb:58:55:f8:67:87:42:b7:2f:
7b:11:65:65:52:30:17:b6:f9:f6:bb:1e:9a:26:29:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:0A:C4:BB:A3:AA:71:AA:AE:AE:3D:77:16:38:49:31:CA:A0:68
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:be:c5:d5:94:3d:e9:ff:e5:5a:77:0e:41:61:46:e7:cb:
41:82:86:b0:78:63:65:ac:fe:a9:a2:b4:cc:e7:71:24:d7:dd:
c9:bf:5c:f2:4e:ea:0a:d8:e0:58:21:82:a6:f7:02:87:02:8f:
dc:38:d6:e2:0d:3a:e1:a0:4d:1f:ef:dd:ce:87:dc:d8:c2:a6:
4d:c1:ea:0a:40:eb:b3:c7:d5:09:70:1f:c3:f6:4c:ed:8e:aa:
28:a1:a5:5a:67:50:d6:51:b7:d0:23:02:bf:c4:a1:01:a9:c5:
77:35:40:6d:10:5c:69:21:8a:1a:f2:6d:33:e7:32:43:79:97:
e7:be:bc:fa:70:ce:ec:62:f9:b2:31:b1:4c:d5:d4:6b:ba:f8:
28:fa:59:20:53:1f:cd:fd:33:16:3a:cd:2b:5f:d9:e1:9c:86:
a7:41:0b:7d:0c:f2:5f:08:07:fe:dd:ba:80:91:89:0f:fd:d5:
58:22:24:9c:66:26:24:27:cc:1a:6c:ca:ed:58:00:92:47:22:
eb:ac:84:01:6e:52:67:3f:06:a3:e7:98:df:c3:99:2b:8b:69:
2e:c8:f9:8e:12:91:e1:41:05:c8:4a:e6:02:98:ed:17:52:97:
42:d1:09:5e:71:93:67:c1:cb:da:7f:0e:03:b3:cb:ca:ae:5d:
46:ba:9c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62FFFyxLCp32iQeIUzTChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjUxMDE5MDUwMTQ0WhcNMjUxMDIwMDUwMTQ0WjAzMTEwLwYDVQQD
EygyZjBjMGFjNGJiYTNhYTcxYWFhZWFlM2Q3NzE2Mzg0OTMxY2FhMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjpIqJrWCB996Qz5IfuLQm1wxBlQ
qU0IW45OwoDjIBRvGuGIauO6HB/rktOylp2gZDDA9gTGAyuEVRIYhmfXLppLtKuB
MuUiBdJxNxxYYJinPJw0kc6hDO7/ezFfoaAUp53JSSQje96CkGpiuuyOT9QW+F3B
AaphnxBV8sDNSteBs/mtXlaym6w9SA6xvivI7qWrLqgKIQ0yhNnUqQBCHa549KP+
GJ7cpCFjfNT8n1hFRTYPlwH25xk87cln9wN3ZITFoCqY13PMWGRVNh6XYd2h1o4j
kXE9r8NpDdClxjMQksobK5D7WFX4Z4dCty97EWVlUjAXtvn2ux6aJinrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8MCsS7o6pxqq6uPXcWOEkxyqBoMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqa+xdWU
Pen/5Vp3DkFhRufLQYKGsHhjZaz+qaK0zOdxJNfdyb9c8k7qCtjgWCGCpvcChwKP
3DjW4g064aBNH+/dzofc2MKmTcHqCkDrs8fVCXAfw/ZM7Y6qKKGlWmdQ1lG30CMC
v8ShAanFdzVAbRBcaSGKGvJtM+cyQ3mX5768+nDO7GL5sjGxTNXUa7r4KPpZIFMf
zf0zFjrNK1/Z4ZyGp0ELfQzyXwgH/t26gJGJD/3VWCIknGYmJCfMGmzK7VgAkkci
66yEAW5SZz8Go+eY38OZK4tpLsj5jhKR4UEFyErmApjtF1KXQtEJXnGTZ8HL2n8O
A7PLyq5dRrqcFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:56 2025 by rpki-client