Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: 942ekL8TiiX8mIHtPUgDIfX1mYqOtIZMlXLZFhJ/oGY=
Subject key identifier: C1:1F:EA:94:4D:AC:30:3F:6F:21:21:BC:54:7E:CE:BA:76:F7:59:61
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 0199FCC6B7DEF7925CB820FA7DB63B74E34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 0491
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: T28oovdiz1eD7W9tsnwYjDgFcqSOBp2t0SuLpZR4B0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b7:de:f7:92:5c:b8:20:fa:7d:b6:3b:74:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=c11fea944dac303f6f2121bc547eceba76f75961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:4f:0d:2e:83:14:5b:ae:7b:0d:27:14:41:
ab:8c:64:c1:06:b6:95:ee:bb:e9:0d:80:bc:3f:e0:
a6:95:03:26:5b:2c:36:76:f7:0c:c2:41:59:7c:c9:
a3:09:3b:30:d9:31:94:a4:c9:a5:83:cd:c6:d3:d1:
dc:82:b5:e1:93:a4:cc:93:5c:73:44:13:9a:3e:68:
16:bf:4e:97:2d:96:31:32:27:b0:1b:64:61:2a:c8:
92:5b:c5:09:b2:fe:c9:da:59:9d:14:d2:c2:39:97:
1a:aa:47:69:2a:b7:be:36:24:b7:55:00:9d:56:7a:
b1:3d:c6:62:ca:70:d8:08:df:19:c9:51:91:ce:bc:
93:09:8d:09:cc:fd:9e:8f:3b:76:64:42:80:e5:26:
b2:89:79:cf:55:4e:5b:1c:d7:42:a9:d6:56:9b:f1:
48:01:86:20:04:c1:ba:bc:96:f9:8c:87:9b:05:02:
4f:cc:09:33:00:bf:5b:6f:80:49:86:f9:94:46:4b:
b8:89:95:c3:f7:4b:18:54:61:f9:c3:d0:53:7a:db:
16:91:a5:ce:49:89:3d:1e:70:ec:d3:4c:1d:97:44:
83:df:b2:c6:b0:a0:7d:66:01:06:3b:92:75:92:fa:
b7:a5:82:e4:6b:d3:49:83:37:b7:11:c7:9a:99:05:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:EA:94:4D:AC:30:3F:6F:21:21:BC:54:7E:CE:BA:76:F7:59:61
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:8d:d7:ae:81:fd:39:35:38:ec:e8:af:27:d1:5e:98:5a:
9d:e3:46:1c:3f:8b:60:8a:d0:65:1b:06:ec:04:f5:3c:33:36:
6c:12:b9:91:93:b9:95:ce:34:ae:63:f7:2a:60:7e:f1:56:b2:
60:01:35:55:df:04:3a:76:61:d4:37:3f:24:24:5f:c3:da:88:
86:21:ce:6f:31:3f:54:be:88:17:a8:30:67:6e:22:36:0f:15:
6d:65:ff:ea:96:d7:73:86:a7:95:5e:3a:45:b6:42:05:ed:e5:
1a:ce:54:12:02:50:a9:6d:ee:be:19:c8:d0:d5:b6:ba:fc:bf:
b7:43:19:be:a5:57:a0:a3:49:79:f3:99:24:8a:be:11:81:ff:
c5:64:b2:9d:ec:c3:dc:9e:b0:27:d9:f0:ab:36:02:c9:8e:01:
52:ec:f1:69:63:0d:53:a4:9c:73:01:83:cb:63:39:97:69:da:
9e:d1:97:93:a5:b1:0f:2e:e6:ca:cb:64:47:b9:60:37:93:0a:
eb:c8:49:23:40:2b:0d:d7:4c:fe:8a:45:ba:43:2f:a8:59:a5:
88:ea:e6:cc:63:5a:d0:40:73:ce:95:48:6a:37:9f:24:a6:0b:
ae:70:e1:54:5e:bf:95:eb:57:28:6e:2d:e5:b0:74:93:cf:c8:
51:f9:5b:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrfe95JcuCD6fbY7dONNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MTdkMGFmZWFiYmYzMzliMDZkYjI4M2M0YjhlMDI3YTA0
YWJjYWUwHhcNMjUxMDE5MTQwMTQ1WhcNMjUxMDIwMTQwMTQ1WjAzMTEwLwYDVQQD
EyhjMTFmZWE5NDRkYWMzMDNmNmYyMTIxYmM1NDdlY2ViYTc2Zjc1OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LtPDS6DFFuuew0nFEGrjGTBBraV
7rvpDYC8P+CmlQMmWyw2dvcMwkFZfMmjCTsw2TGUpMmlg83G09HcgrXhk6TMk1xz
RBOaPmgWv06XLZYxMiewG2RhKsiSW8UJsv7J2lmdFNLCOZcaqkdpKre+NiS3VQCd
VnqxPcZiynDYCN8ZyVGRzryTCY0JzP2ejzt2ZEKA5SayiXnPVU5bHNdCqdZWm/FI
AYYgBMG6vJb5jIebBQJPzAkzAL9bb4BJhvmURku4iZXD90sYVGH5w9BTetsWkaXO
SYk9HnDs00wdl0SD37LGsKB9ZgEGO5J1kvq3pYLka9NJgze3EceamQW2/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEf6pRNrDA/byEhvFR+zrp291lhMB8GA1UdIwQY
MBaAFBYX0K/qu/M5sG2yg8S44CegSryuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEt
ZDdmMjFmYzEzNTBlLzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEtZDdmMjFmYzEzNTBl
LzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW+N166B
/Tk1OOzoryfRXphaneNGHD+LYIrQZRsG7AT1PDM2bBK5kZO5lc40rmP3KmB+8Vay
YAE1Vd8EOnZh1Dc/JCRfw9qIhiHObzE/VL6IF6gwZ24iNg8VbWX/6pbXc4anlV46
RbZCBe3lGs5UEgJQqW3uvhnI0NW2uvy/t0MZvqVXoKNJefOZJIq+EYH/xWSynezD
3J6wJ9nwqzYCyY4BUuzxaWMNU6SccwGDy2M5l2nantGXk6WxDy7mystkR7lgN5MK
68hJI0ArDddM/opFukMvqFmliOrmzGNa0EBzzpVIajefJKYLrnDhVF6/letXKG4t
5bB0k8/IUflbLg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:57 2025 by rpki-client