Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: lLRTvll8yOeZCTKKgmBrSzZtKsdfACn44+sWhk0eXgw=
Subject key identifier: 65:99:5A:9D:65:4B:68:10:68:FE:49:77:9D:D9:24:37:50:10:F9:7A
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0199FC586F1CD560545EB4DC6897C1E5FEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: q+Ld+CaUa68QjWfRqKCWdR+he04KqbLdQ/jEfimzSnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:1c:d5:60:54:5e:b4:dc:68:97:c1:e5:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=65995a9d654b681068fe49779dd924375010f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:92:aa:6c:fa:eb:36:59:5b:2d:d0:48:89:
d6:58:c6:3f:c4:e2:6b:29:25:c2:1f:74:04:a0:f8:
4b:5b:c9:95:50:5d:39:4e:60:d9:0e:f2:9c:1d:3e:
69:66:4d:fd:6c:6e:9f:bc:f1:df:6d:0f:0b:04:d1:
6c:9d:75:68:13:4f:aa:06:34:e3:df:77:32:69:35:
b6:78:49:f6:2c:74:cd:94:2d:68:71:93:47:28:c6:
bc:a9:d9:81:c3:1e:2f:7c:53:60:cc:24:2a:8a:ce:
a2:ad:f5:29:d9:01:c1:3e:26:8a:27:b6:17:1c:cf:
f1:a3:be:58:65:d1:57:d6:25:b4:2e:d7:e5:f8:05:
2e:3f:73:dc:90:50:91:5e:77:92:72:b0:bc:b5:38:
38:e9:64:39:e1:75:4f:a2:81:07:f3:2a:86:51:e5:
a0:7e:cd:30:94:27:ef:ac:0b:99:f3:e7:8d:02:47:
76:1a:7c:f5:98:7f:80:05:38:e9:3d:a1:9f:49:01:
2c:27:c6:d9:de:ef:ee:6f:fd:c2:3d:71:4f:1e:dc:
1c:fa:f2:c1:55:16:14:98:a9:14:7c:e7:50:e2:f8:
3a:e4:cb:8d:b5:55:f8:aa:73:41:5b:5a:7e:58:b0:
fe:d9:ed:64:53:58:d1:91:44:29:d5:e9:00:c9:23:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:5A:9D:65:4B:68:10:68:FE:49:77:9D:D9:24:37:50:10:F9:7A
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:79:49:d8:9d:89:78:50:67:33:d2:b3:9a:a9:fb:9d:36:fc:
3d:88:01:bd:83:6e:19:cd:f8:78:40:02:53:f6:41:57:40:ee:
1d:ea:a7:b6:e4:66:e0:5a:e4:ab:34:8c:ac:55:06:eb:aa:74:
dc:c9:3c:a4:b1:21:9e:9c:76:ff:fa:15:df:3c:fd:94:52:60:
84:ec:f5:06:30:d5:a7:fc:b1:bd:61:a3:80:f7:16:84:cb:35:
b6:86:0a:3a:95:34:8d:6a:32:d0:39:9c:ec:6d:ba:9f:6d:06:
e2:7d:ee:93:09:e7:a2:f4:4c:95:14:fe:d4:21:22:b0:0c:40:
bd:12:f9:98:00:c4:90:3f:8e:e0:1c:ad:2d:fa:7e:15:de:ff:
41:2d:7d:ed:9d:26:7d:5f:30:db:c3:9b:1c:81:34:d8:b6:ed:
99:c6:49:01:55:57:47:c0:44:4c:c5:66:36:fd:94:37:b9:64:
15:d1:34:ac:b0:b0:60:d9:fa:80:6f:90:55:37:5f:e1:83:11:
27:b5:a0:97:30:c6:3e:3f:bf:04:fb:13:c8:a3:c3:b6:85:a2:
39:64:79:7b:c2:19:41:e7:14:d6:a1:b8:23:1a:a1:27:c2:b5:
37:fe:c1:55:da:90:de:60:18:6e:72:80:65:1a:25:75:5c:82:
c1:58:f6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WG8c1WBUXrTcaJfB5f7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJhOTYxYjAzNzVkNzIxOTFiZDk3MDgxNWQ2YjE1ZjQy
N2QwNzMwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg2NTk5NWE5ZDY1NGI2ODEwNjhmZTQ5Nzc5ZGQ5MjQzNzUwMTBmOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2Sqmz66zZZWy3QSInWWMY/xOJr
KSXCH3QEoPhLW8mVUF05TmDZDvKcHT5pZk39bG6fvPHfbQ8LBNFsnXVoE0+qBjTj
33cyaTW2eEn2LHTNlC1ocZNHKMa8qdmBwx4vfFNgzCQqis6irfUp2QHBPiaKJ7YX
HM/xo75YZdFX1iW0Ltfl+AUuP3PckFCRXneScrC8tTg46WQ54XVPooEH8yqGUeWg
fs0wlCfvrAuZ8+eNAkd2Gnz1mH+ABTjpPaGfSQEsJ8bZ3u/ub/3CPXFPHtwc+vLB
VRYUmKkUfOdQ4vg65MuNtVX4qnNBW1p+WLD+2e1kU1jRkUQp1ekAySNXqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWZWp1lS2gQaP5Jd53ZJDdQEPl6MB8GA1UdIwQY
MBaAFH4CqWGwN11yGRvZcIFdaxX0J9BzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQt
Y2M0N2MxZGUwMWJkLzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQtY2M0N2MxZGUwMWJk
LzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHlJ2J2J
eFBnM9Kzmqn7nTb8PYgBvYNuGc34eEACU/ZBV0DuHeqntuRm4FrkqzSMrFUG66p0
3Mk8pLEhnpx2//oV3zz9lFJghOz1BjDVp/yxvWGjgPcWhMs1toYKOpU0jWoy0Dmc
7G26n20G4n3ukwnnovRMlRT+1CEisAxAvRL5mADEkD+O4BytLfp+Fd7/QS197Z0m
fV8w28ObHIE02LbtmcZJAVVXR8BETMVmNv2UN7lkFdE0rLCwYNn6gG+QVTdf4YMR
J7WglzDGPj+/BPsTyKPDtoWiOWR5e8IZQecU1qG4IxqhJ8K1N/7BVdqQ3mAYbnKA
ZRoldVyCwVj2eA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:16 2025 by rpki-client