Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: DuepiYOOVqfUUgJ92g5VqZs3WlCrV9Wz6JOCG6UuYQQ=
Subject key identifier: 5D:F2:04:38:C7:DC:D0:29:B2:4B:26:8E:8A:88:7E:5C:5E:A0:24:53
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0199FCFD955880868AB9E5ADA0ECF172C0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 11A7
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: Eo3FqasrXrkCsRVnOp+osbBDUnqmypii9LOW5rbfhS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:95:58:80:86:8a:b9:e5:ad:a0:ec:f1:72:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=5df20438c7dcd029b24b268e8a887e5c5ea02453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:cb:f8:0d:c3:64:47:91:16:be:4f:49:d7:
0c:ff:09:52:30:86:6b:98:04:d3:f2:49:b2:31:43:
7f:e0:ff:49:20:a3:28:6f:09:0a:c8:d0:d7:df:92:
96:1d:8f:61:25:4b:ee:94:d2:8a:b2:11:9e:ac:10:
c3:5d:21:c9:cf:06:ef:e9:63:d2:56:83:d8:e7:18:
9a:6d:44:fc:b5:1b:17:3f:d8:5b:54:ad:f0:46:68:
f3:39:63:65:94:df:99:38:c5:c1:cc:81:33:98:eb:
ac:ad:34:4f:b2:f9:c1:8f:8d:5a:77:97:6c:0a:e1:
a9:2b:d6:df:65:8b:86:7c:df:fd:6b:40:87:b1:6d:
2b:3c:72:50:a7:b3:8f:0e:b0:65:ed:38:64:4d:b6:
0a:2b:bb:8f:c2:66:12:b6:85:60:89:27:35:10:09:
53:24:13:6b:14:a6:47:4f:3f:48:48:ca:68:98:30:
e2:ea:d8:45:a6:34:05:a3:0d:14:0c:72:18:32:b9:
ca:47:15:31:1d:57:19:58:c8:6b:6c:88:ca:be:2f:
df:4f:48:33:c8:88:3b:fd:2a:ea:ed:08:f1:d7:bb:
7e:fa:49:a8:55:db:63:49:13:a1:47:94:69:39:84:
db:4b:2d:59:60:58:77:47:7d:ec:ff:50:b8:61:f8:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:04:38:C7:DC:D0:29:B2:4B:26:8E:8A:88:7E:5C:5E:A0:24:53
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:19:19:1d:98:5b:67:e0:b8:de:07:81:f0:91:3b:ce:e9:07:
fc:e9:2b:3e:34:72:36:75:aa:1d:90:2f:07:c1:47:bf:c6:fc:
be:77:db:34:d3:6e:d1:c2:77:40:c8:ff:4e:6c:08:1c:c6:b4:
30:ac:8a:3e:95:9c:9e:81:ae:9f:2d:ad:13:7f:af:cc:2b:62:
5f:cb:82:69:7c:7d:f3:07:75:82:fb:e2:0f:c2:8f:29:cc:f7:
d6:f2:98:2a:66:07:20:6a:4e:a3:44:4e:0f:b7:0a:b0:2e:16:
c1:ea:96:6f:b2:d4:fe:a7:eb:f2:42:7f:5a:de:e6:1e:1b:c1:
37:b7:e0:ef:44:96:ae:6f:23:53:fb:17:0e:74:f7:7e:b1:8b:
10:6e:7c:d6:b9:93:f9:81:2b:26:d0:95:ac:07:3c:0b:1b:c5:
df:fa:ad:6a:c9:f6:a8:aa:46:0d:c1:6f:44:0a:59:b6:1d:21:
c3:c5:86:28:79:84:2b:2d:88:d3:18:fe:08:5a:31:45:60:60:
3d:57:d3:31:fc:21:d2:d0:41:29:e4:74:df:1b:23:74:1e:48:
63:8c:f1:dd:6e:47:eb:f0:5e:68:09:d9:71:f4:ae:58:49:70:
7d:dd:77:77:e9:1e:d6:be:1e:21:14:23:cf:7c:4d:80:1f:cf:
ce:11:32:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ZVYgIaKueWtoOzxcsCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4
NDc3MGMwHhcNMjUxMDE5MTUwMTQxWhcNMjUxMDIwMTUwMTQxWjAzMTEwLwYDVQQD
Eyg1ZGYyMDQzOGM3ZGNkMDI5YjI0YjI2OGU4YTg4N2U1YzVlYTAyNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp73L+A3DZEeRFr5PSdcM/wlSMIZr
mATT8kmyMUN/4P9JIKMobwkKyNDX35KWHY9hJUvulNKKshGerBDDXSHJzwbv6WPS
VoPY5xiabUT8tRsXP9hbVK3wRmjzOWNllN+ZOMXBzIEzmOusrTRPsvnBj41ad5ds
CuGpK9bfZYuGfN/9a0CHsW0rPHJQp7OPDrBl7ThkTbYKK7uPwmYStoVgiSc1EAlT
JBNrFKZHTz9ISMpomDDi6thFpjQFow0UDHIYMrnKRxUxHVcZWMhrbIjKvi/fT0gz
yIg7/Srq7Qjx17t++kmoVdtjSROhR5RpOYTbSy1ZYFh3R33s/1C4Yfj17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3yBDjH3NApsksmjoqIflxeoCRTMB8GA1UdIwQY
MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt
ODAzNWYyZGZjMWY0LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0
LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRkZHZhb
Z+C43geB8JE7zukH/OkrPjRyNnWqHZAvB8FHv8b8vnfbNNNu0cJ3QMj/TmwIHMa0
MKyKPpWcnoGuny2tE3+vzCtiX8uCaXx98wd1gvviD8KPKcz31vKYKmYHIGpOo0RO
D7cKsC4WweqWb7LU/qfr8kJ/Wt7mHhvBN7fg70SWrm8jU/sXDnT3frGLEG581rmT
+YErJtCVrAc8CxvF3/qtasn2qKpGDcFvRApZth0hw8WGKHmEKy2I0xj+CFoxRWBg
PVfTMfwh0tBBKeR03xsjdB5IY4zx3W5H6/BeaAnZcfSuWElwfd13d+ke1r4eIRQj
z3xNgB/PzhEyDw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:21 2025 by rpki-client