Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: q/ENXqM1druj+AKLKNAemYvhjdMrZVvnUAeNRDE1xCw=
Subject key identifier: 81:E9:B7:2B:BE:8B:E4:90:D7:F9:EE:E3:01:1C:3E:00:B3:A5:37:00
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 0199FBEA765072080DF1385C3C678F2FA9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 15BD
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: g+uuHEWucklFERwnZGxEF24qzwHBitA4fBCgb1pQvms=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:76:50:72:08:0d:f1:38:5c:3c:67:8f:2f:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=81e9b72bbe8be490d7f9eee3011c3e00b3a53700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b7:7c:09:21:ce:8e:a9:78:a1:38:40:28:
cf:40:d9:59:27:b5:93:8a:99:ac:97:3f:db:ad:30:
c6:6c:25:60:3c:10:2a:3d:51:f3:ef:b6:22:e0:48:
33:72:14:f6:8c:e1:44:35:ae:27:27:9b:f5:6a:ef:
07:1a:55:c4:9a:58:ce:b0:52:24:54:41:aa:3c:7f:
1e:d5:5c:2f:bc:c5:92:a6:91:cf:cd:69:83:9b:b6:
0d:c7:5e:d8:d9:c5:a7:57:30:2d:1a:32:ef:bd:c4:
ba:68:45:71:2e:dd:f7:ad:0b:e2:54:f9:05:fe:f0:
e0:55:79:6f:b3:85:19:7b:36:f3:f3:79:87:8d:3e:
6d:bd:b9:7a:3b:48:7d:07:1f:58:2f:de:48:18:4b:
22:ab:fe:cc:17:d1:05:e6:7d:d0:58:14:c0:92:96:
6d:9c:91:05:5e:86:2a:b0:42:fb:ed:ee:b7:3b:43:
43:8e:43:8a:3e:f7:00:6a:68:c6:15:c0:c1:b0:c4:
41:d8:a1:5e:38:b4:29:ed:a6:00:6f:47:68:3b:95:
ab:28:88:c0:fb:3e:bf:72:91:03:eb:c3:06:75:a9:
ea:48:90:07:ec:b2:c2:25:12:df:6e:32:9e:2c:d7:
fe:44:a0:18:f4:1e:3c:9a:11:33:89:93:0c:15:93:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:B7:2B:BE:8B:E4:90:D7:F9:EE:E3:01:1C:3E:00:B3:A5:37:00
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e0:97:3a:7d:61:91:cc:2d:cd:68:5b:36:5f:a9:e3:5f:aa:
3d:18:c5:ce:f3:cf:60:a3:87:6b:db:ed:20:6c:e1:ea:00:74:
14:91:26:43:8b:53:90:7e:15:a0:2d:3c:54:16:71:05:40:36:
7a:4e:11:10:02:be:1b:be:e9:1a:ac:0d:80:f6:d1:53:fd:17:
34:94:aa:cf:b2:18:69:54:03:44:da:c6:1f:9b:bd:af:6b:8e:
de:ea:90:86:0e:4f:36:ce:1b:81:83:5c:ea:d1:0c:4f:1c:d2:
30:f8:9c:d2:54:5c:ff:e9:ec:e0:1e:1f:39:27:c4:cc:c8:a6:
cb:b6:86:7b:8a:2a:f7:e4:93:8a:f4:fc:62:b6:3f:0c:68:91:
7a:80:0f:ec:44:99:45:d3:f1:01:e6:40:f8:8d:fd:23:63:aa:
54:84:bd:85:db:fe:03:51:14:bf:7f:50:9f:8a:ba:b5:c6:d7:
49:58:b1:06:2d:30:1a:8f:ca:df:f3:83:0d:a5:01:72:26:5c:
8a:01:22:33:73:1d:97:6e:0f:22:b9:19:a4:cc:3c:86:04:5b:
04:58:ad:a7:92:03:01:74:3d:d7:26:1f:10:ae:c1:92:a6:9b:
ac:2b:32:39:5f:f9:34:1d:33:a4:57:3f:50:e7:81:23:84:dc:
2d:8b:31:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76nZQcggN8ThcPGePL6nQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5
NjA1NzgwHhcNMjUxMDE5MTAwMTEwWhcNMjUxMDIwMTAwMTEwWjAzMTEwLwYDVQQD
Eyg4MWU5YjcyYmJlOGJlNDkwZDdmOWVlZTMwMTFjM2UwMGIzYTUzNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb63fAkhzo6peKE4QCjPQNlZJ7WT
ipmslz/brTDGbCVgPBAqPVHz77Yi4EgzchT2jOFENa4nJ5v1au8HGlXEmljOsFIk
VEGqPH8e1VwvvMWSppHPzWmDm7YNx17Y2cWnVzAtGjLvvcS6aEVxLt33rQviVPkF
/vDgVXlvs4UZezbz83mHjT5tvbl6O0h9Bx9YL95IGEsiq/7MF9EF5n3QWBTAkpZt
nJEFXoYqsEL77e63O0NDjkOKPvcAamjGFcDBsMRB2KFeOLQp7aYAb0doO5WrKIjA
+z6/cpED68MGdanqSJAH7LLCJRLfbjKeLNf+RKAY9B48mhEziZMMFZNZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHptyu+i+SQ1/nu4wEcPgCzpTcAMB8GA1UdIwQY
MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt
YjlkYmRjOGI0MzljLzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj
LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuCXOn1h
kcwtzWhbNl+p41+qPRjFzvPPYKOHa9vtIGzh6gB0FJEmQ4tTkH4VoC08VBZxBUA2
ek4REAK+G77pGqwNgPbRU/0XNJSqz7IYaVQDRNrGH5u9r2uO3uqQhg5PNs4bgYNc
6tEMTxzSMPic0lRc/+ns4B4fOSfEzMimy7aGe4oq9+STivT8YrY/DGiReoAP7ESZ
RdPxAeZA+I39I2OqVIS9hdv+A1EUv39Qn4q6tcbXSVixBi0wGo/K3/ODDaUBciZc
igEiM3Mdl24PIrkZpMw8hgRbBFitp5IDAXQ91yYfEK7BkqabrCsyOV/5NB0zpFc/
UOeBI4TcLYsxfw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:46 2025 by rpki-client