Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: ESEBmOdU8kD7MJa26TfmnHIMsjl2NXTqEQzFStRbNJw=
Subject key identifier: 96:37:8C:8B:B4:46:A8:A4:8B:32:B4:DB:5F:F8:1E:E7:84:8A:D4:E1
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 0199FBEBB4BC6621D605B37D0901A04A32E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0FCE
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: m3x7Rct8W9u9EN6HQ8iX4pYfjk/svlDROL3xguM1G28=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:bc:66:21:d6:05:b3:7d:09:01:a0:4a:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=96378c8bb446a8a48b32b4db5ff81ee7848ad4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:c2:1d:49:57:81:72:a8:d6:d2:70:76:76:
13:63:17:6c:d5:be:1a:53:74:f2:98:f3:b8:18:b0:
7b:47:3c:53:8f:27:f4:2b:bd:3d:4c:68:a2:15:ab:
27:ee:76:1d:ef:18:3e:24:b8:26:bd:8f:7f:88:04:
ce:61:bc:6b:a1:ab:12:3f:26:2b:1d:16:50:e1:e1:
0b:6d:24:7f:28:17:f1:cb:ad:11:97:cf:a3:26:52:
45:8a:d5:e5:af:13:ba:30:bf:63:86:0f:4f:ac:b7:
fd:0c:cf:23:84:37:83:0a:90:11:5b:8a:9b:1c:b7:
a6:89:03:a5:55:ec:64:1e:92:b3:66:3c:7d:af:0f:
ef:61:7a:a6:c5:36:06:05:a5:c1:1d:9a:22:5f:6d:
0b:3d:8f:d5:ea:5b:06:3b:8d:37:ce:02:98:ce:b0:
09:ed:87:a6:ea:82:43:f8:d5:ec:5b:ff:50:9a:90:
4b:dc:c6:43:59:33:04:76:49:00:13:b8:2b:82:c6:
b5:3a:bf:cd:c5:f3:66:55:9e:42:e5:f2:1f:18:3c:
be:05:53:ef:bd:56:b8:54:ac:12:ba:ff:e8:2b:2e:
27:8d:d8:cf:c8:6b:71:c6:31:f2:bf:50:13:6e:58:
31:5c:e5:d7:0d:d8:f4:e3:21:92:1e:e3:09:49:9a:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:8C:8B:B4:46:A8:A4:8B:32:B4:DB:5F:F8:1E:E7:84:8A:D4:E1
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:5b:cf:ad:63:4b:9c:08:c5:04:9a:14:e5:d2:40:a7:1c:
4b:63:a0:e3:25:57:61:2c:57:db:c3:ff:44:db:dd:64:8d:a4:
c3:88:b6:53:8f:5b:8e:75:28:c8:f5:32:49:18:38:fc:f9:eb:
e3:91:fb:e0:25:01:e6:06:02:77:dd:14:b7:0c:43:04:cf:d0:
a2:35:54:18:c1:a1:1a:00:4c:9d:51:56:cc:d6:5d:c3:cf:9a:
90:e1:ee:b7:aa:59:e8:65:06:c4:0a:fc:48:bb:9d:49:9a:8e:
bd:f9:09:0c:aa:9c:ef:cd:b4:6a:e6:99:27:93:63:19:dc:99:
49:5c:7f:98:7d:f4:9d:d7:a3:0b:59:76:2e:70:27:88:d2:66:
ab:60:6f:80:a5:c2:42:98:34:88:dd:a7:1b:8b:30:13:81:b1:
18:ac:3a:19:1b:d8:29:b1:12:84:0d:74:45:8e:66:66:c3:3c:
6f:13:58:94:84:fb:c7:c4:a7:a6:c1:27:bc:f8:77:56:2f:c5:
c8:ca:a5:57:c9:90:69:9d:b4:48:ea:60:eb:eb:c7:b6:48:33:
59:5c:01:66:1c:9d:c0:20:58:44:50:1e:d2:7c:03:bd:68:6d:
f2:58:37:0c:51:f4:52:7d:ea:f2:83:e4:91:75:01:2a:24:b1:
af:b2:fc:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767S8ZiHWBbN9CQGgSjLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1
M2FiY2UwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
Eyg5NjM3OGM4YmI0NDZhOGE0OGIzMmI0ZGI1ZmY4MWVlNzg0OGFkNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEPCHUlXgXKo1tJwdnYTYxds1b4a
U3TymPO4GLB7RzxTjyf0K709TGiiFasn7nYd7xg+JLgmvY9/iATOYbxroasSPyYr
HRZQ4eELbSR/KBfxy60Rl8+jJlJFitXlrxO6ML9jhg9PrLf9DM8jhDeDCpARW4qb
HLemiQOlVexkHpKzZjx9rw/vYXqmxTYGBaXBHZoiX20LPY/V6lsGO403zgKYzrAJ
7Yem6oJD+NXsW/9QmpBL3MZDWTMEdkkAE7grgsa1Or/NxfNmVZ5C5fIfGDy+BVPv
vVa4VKwSuv/oKy4njdjPyGtxxjHyv1ATblgxXOXXDdj04yGSHuMJSZogIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3jIu0RqikizK021/4HueEitThMB8GA1UdIwQY
MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt
Zjk1NDAwMmY1MjQ1LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1
LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIhbz61j
S5wIxQSaFOXSQKccS2Og4yVXYSxX28P/RNvdZI2kw4i2U49bjnUoyPUySRg4/Pnr
45H74CUB5gYCd90UtwxDBM/QojVUGMGhGgBMnVFWzNZdw8+akOHut6pZ6GUGxAr8
SLudSZqOvfkJDKqc7820auaZJ5NjGdyZSVx/mH30ndejC1l2LnAniNJmq2BvgKXC
Qpg0iN2nG4swE4GxGKw6GRvYKbEShA10RY5mZsM8bxNYlIT7x8SnpsEnvPh3Vi/F
yMqlV8mQaZ20SOpg6+vHtkgzWVwBZhydwCBYRFAe0nwDvWht8lg3DFH0Un3q8oPk
kXUBKiSxr7L8XQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:36 2025 by rpki-client