Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: TIBzoqxy9cSDkmYlsSz12KTp/W0OKrJEolYrcZf165s=
Subject key identifier: 8A:73:05:B9:82:5C:C3:A5:62:36:C3:51:64:70:E7:90:29:26:BC:84
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019A0523A0AE04DEDD064CED1444A452D485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 08A5
Signing time: Tue 21 Oct 2025 05:00:12 +0000
Manifest this update: Tue 21 Oct 2025 05:00:12 +0000
Manifest next update: Wed 22 Oct 2025 05:00:12 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: 5ZDebGc71p/UPZG1VnLFhHiIexTloeAOou5Gqcs7zOY=)
2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:a0:ae:04:de:dd:06:4c:ed:14:44:a4:52:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Oct 21 05:00:12 2025 GMT
Not After : Oct 22 05:00:12 2025 GMT
Subject: CN=8a7305b9825cc3a56236c3516470e7902926bc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:83:6e:4a:b0:e3:da:d5:79:1e:66:32:80:
d1:bd:8c:8d:bb:08:95:81:fa:20:6c:de:52:fe:bc:
36:ef:29:77:be:07:b5:26:6d:5c:36:99:f8:35:19:
af:bf:d5:32:7e:23:0d:94:18:03:55:b1:a0:0d:3f:
86:9c:9f:b5:fb:9a:75:cf:b3:4e:5f:47:a5:86:6f:
67:8b:31:01:7e:79:54:db:31:e5:96:3e:b8:f2:79:
c2:86:d6:35:25:f2:49:51:65:82:0b:17:a2:53:41:
3e:cc:c0:36:0a:b7:19:20:bb:ca:5a:4b:60:20:03:
46:0f:6b:2b:8d:62:f7:64:e4:c9:0a:3b:69:6e:c1:
7a:cf:ff:9e:5d:8c:d8:05:f9:45:58:92:44:03:c2:
c6:38:a9:7a:0a:4e:68:6b:d9:9f:72:b5:70:ad:b2:
60:54:1a:d5:0b:f0:d7:bc:cf:fa:26:8c:fb:4e:76:
20:dd:e8:0d:fb:4e:b6:47:f8:75:ff:8d:34:02:2e:
4d:89:bb:db:2b:95:d6:df:4f:68:24:c6:0d:68:c1:
15:28:a0:f2:92:69:f5:f7:63:7b:81:98:d7:22:20:
8c:d9:53:be:6c:ba:b9:18:df:ce:67:08:19:5f:e4:
d1:82:89:02:ce:0c:d9:99:c8:b7:69:5e:2f:15:e4:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:05:B9:82:5C:C3:A5:62:36:C3:51:64:70:E7:90:29:26:BC:84
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3d:43:e2:d4:3b:6e:f3:c4:af:3b:62:c4:0f:e4:80:b0:69:
66:10:2a:c2:53:ec:da:6c:07:27:17:31:03:e8:b2:d2:63:5e:
54:01:0e:f1:b7:c2:db:13:eb:24:9c:5d:65:5a:76:74:7c:07:
ec:d6:87:e4:85:b9:d9:3c:25:32:fa:83:e7:03:3c:b4:0e:aa:
62:c0:41:7a:ab:8b:5a:5a:bf:fd:14:23:1e:e2:59:5f:65:a5:
8f:44:3e:1e:d2:06:f0:94:09:16:05:03:f1:69:6f:d8:fc:6b:
a9:e5:4b:36:27:57:83:f8:e2:f4:16:da:c2:b2:36:3d:de:8c:
3e:f8:7c:4f:35:65:e9:a3:4e:9b:af:9c:d3:bf:33:ea:02:b1:
0a:13:ef:b6:9f:ac:42:f7:cf:60:aa:85:ed:7c:01:55:0b:c1:
e5:59:54:37:81:22:ff:1d:39:7b:74:a1:af:32:ba:98:cd:79:
43:4c:72:dd:44:21:e4:1f:c5:09:21:6a:5b:4c:70:ac:0d:24:
cf:a8:a6:94:66:59:00:3b:45:25:7f:70:1a:49:81:68:84:62:
0e:44:b1:c5:66:a9:f2:71:3c:be:51:03:dd:14:e1:42:09:63:
16:24:ed:89:e2:a1:b6:db:da:b7:fb:d0:6b:a0:f7:00:22:b6:
1b:86:2f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFI6CuBN7dBkztFESkUtSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy
ZWZjZWUwHhcNMjUxMDIxMDUwMDEyWhcNMjUxMDIyMDUwMDEyWjAzMTEwLwYDVQQD
Eyg4YTczMDViOTgyNWNjM2E1NjIzNmMzNTE2NDcwZTc5MDI5MjZiYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG2Dbkqw49rVeR5mMoDRvYyNuwiV
gfogbN5S/rw27yl3vge1Jm1cNpn4NRmvv9UyfiMNlBgDVbGgDT+GnJ+1+5p1z7NO
X0elhm9nizEBfnlU2zHllj648nnChtY1JfJJUWWCCxeiU0E+zMA2CrcZILvKWktg
IANGD2srjWL3ZOTJCjtpbsF6z/+eXYzYBflFWJJEA8LGOKl6Ck5oa9mfcrVwrbJg
VBrVC/DXvM/6Joz7TnYg3egN+062R/h1/400Ai5NibvbK5XW309oJMYNaMEVKKDy
kmn192N7gZjXIiCM2VO+bLq5GN/OZwgZX+TRgokCzgzZmci3aV4vFeT6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpzBbmCXMOlYjbDUWRw55ApJryEMB8GA1UdIwQY
MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt
NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4
LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD1D4tQ7
bvPErztixA/kgLBpZhAqwlPs2mwHJxcxA+iy0mNeVAEO8bfC2xPrJJxdZVp2dHwH
7NaH5IW52TwlMvqD5wM8tA6qYsBBequLWlq//RQjHuJZX2Wlj0Q+HtIG8JQJFgUD
8Wlv2PxrqeVLNidXg/ji9BbawrI2Pd6MPvh8TzVl6aNOm6+c078z6gKxChPvtp+s
QvfPYKqF7XwBVQvB5VlUN4Ei/x05e3ShrzK6mM15Q0xy3UQh5B/FCSFqW0xwrA0k
z6imlGZZADtFJX9wGkmBaIRiDkSxxWap8nE8vlED3RThQgljFiTtieKhttvat/vQ
a6D3ACK2G4YvMg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:29 2025 by rpki-client