Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: /JzWBI7JC+Dar/8IBJ3MxszyvYZygoxwlBHd6yv9mTY=
Subject key identifier: 00:C8:D3:2E:BD:D5:B2:A4:F8:1F:0C:71:D8:C5:2B:29:85:28:DA:8D
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 0199C4202D2441FBDC22E7AE3ED56DA24F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0F8A
Signing time: Wed 08 Oct 2025 14:01:06 +0000
Manifest this update: Wed 08 Oct 2025 14:01:06 +0000
Manifest next update: Thu 09 Oct 2025 14:01:06 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: d9M+4XUfQ0WiOOkszEr3n/Bz4/MN7Jjoz14dzriCNUI=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:2d:24:41:fb:dc:22:e7:ae:3e:d5:6d:a2:4f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Oct 8 14:01:06 2025 GMT
Not After : Oct 9 14:01:06 2025 GMT
Subject: CN=00c8d32ebdd5b2a4f81f0c71d8c52b298528da8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:88:d4:f4:ef:b8:29:bf:29:a2:03:3f:91:
ff:30:a7:c6:97:29:cc:93:ce:89:6e:0e:09:bf:5b:
a6:c4:85:d7:61:8c:28:1d:99:bc:64:aa:3c:8c:8c:
cd:0f:c4:12:92:b4:08:03:f8:41:9a:81:5d:4f:12:
06:02:18:a2:8d:5a:15:6d:f6:29:07:27:11:23:da:
6a:97:fe:42:1f:f4:74:92:a3:f2:81:77:a0:53:09:
5d:38:1b:c8:89:93:b6:e0:81:69:7e:fc:0f:80:03:
9d:58:53:5c:78:4b:62:ae:db:38:3f:0b:f7:14:27:
4d:cf:8c:2c:a7:42:0b:a1:d5:31:fd:d2:2d:4e:9b:
71:e2:08:67:51:22:8a:05:4d:1a:fa:bd:5d:56:56:
39:c9:42:9f:e0:05:1d:b0:15:39:29:8c:75:9d:31:
60:ff:19:16:b0:cc:10:46:ab:2e:2c:66:e8:93:05:
8c:01:b7:b8:c1:e9:c8:a0:06:f5:b8:9c:35:66:2f:
56:6f:ef:f7:fc:e1:3e:b4:e8:9f:df:c8:bc:81:17:
d6:bc:29:51:a3:c4:e0:93:8a:27:33:26:0c:bf:6e:
9d:50:b4:3f:24:c4:c7:23:47:47:a4:f6:9d:03:da:
0d:44:d5:43:35:ad:95:19:4d:95:83:ff:70:37:ff:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:D3:2E:BD:D5:B2:A4:F8:1F:0C:71:D8:C5:2B:29:85:28:DA:8D
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:7a:3b:c4:f4:a3:dd:56:73:9a:03:96:60:41:45:b4:a3:
16:cf:e8:e6:f6:a1:a0:70:7d:23:67:65:bd:0a:5b:bd:e4:d8:
40:d1:37:b7:ce:d9:2d:5f:af:10:00:32:15:49:fc:53:68:ea:
82:a8:92:36:a7:6b:e8:9c:51:49:79:a8:00:d5:55:76:f2:8d:
8a:96:c3:35:f6:33:14:5b:99:3b:ad:cf:0a:f7:a6:39:0d:c0:
bb:ec:70:39:e8:ff:3e:a8:eb:11:39:89:60:86:15:33:11:2e:
df:9d:7c:48:37:e5:00:b1:2e:9a:03:4f:7b:16:9c:b4:d4:8c:
d2:5a:96:91:38:ca:16:4d:9a:2d:90:29:c9:1e:37:e1:9f:c9:
6d:35:53:80:ac:33:22:c6:ee:bd:c2:46:6e:c4:8b:2d:4a:2b:
7a:88:17:78:f2:f8:ef:b1:d5:28:0e:e1:68:0f:3d:09:65:1e:
6a:1b:9c:7d:9e:9d:55:d3:70:70:2c:58:12:ad:86:a4:8c:ba:
0b:76:7c:bf:89:03:da:a7:34:b0:23:81:5d:da:ee:4c:ff:65:
7a:fd:da:1e:9e:88:e0:d5:c7:71:e0:c2:6a:08:70:f2:f5:e5:
d5:ee:ac:fb:78:92:23:be:a2:fd:68:43:0f:71:e9:31:00:3a:
a9:ec:69:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEIC0kQfvcIueuPtVtok92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Mjc0NTVlYTdmY2UxN2NmZDA0MzE5ODUyNThkMTNlMDZi
ZmE3MzUwHhcNMjUxMDA4MTQwMTA2WhcNMjUxMDA5MTQwMTA2WjAzMTEwLwYDVQQD
EygwMGM4ZDMyZWJkZDViMmE0ZjgxZjBjNzFkOGM1MmIyOTg1MjhkYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2I1PTvuCm/KaIDP5H/MKfGlynM
k86Jbg4Jv1umxIXXYYwoHZm8ZKo8jIzND8QSkrQIA/hBmoFdTxIGAhiijVoVbfYp
BycRI9pql/5CH/R0kqPygXegUwldOBvIiZO24IFpfvwPgAOdWFNceEtirts4Pwv3
FCdNz4wsp0ILodUx/dItTptx4ghnUSKKBU0a+r1dVlY5yUKf4AUdsBU5KYx1nTFg
/xkWsMwQRqsuLGbokwWMAbe4wenIoAb1uJw1Zi9Wb+/3/OE+tOif38i8gRfWvClR
o8Tgk4onMyYMv26dULQ/JMTHI0dHpPadA9oNRNVDNa2VGU2Vg/9wN//dHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADI0y691bKk+B8McdjFKymFKNqNMB8GA1UdIwQY
MBaAFBUnRV6n/OF8/QQxmFJY0T4Gv6c1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUt
OThmOGNjZDVkYjhkLzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUtOThmOGNjZDVkYjhk
LzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILh6O8T0
o91Wc5oDlmBBRbSjFs/o5vahoHB9I2dlvQpbveTYQNE3t87ZLV+vEAAyFUn8U2jq
gqiSNqdr6JxRSXmoANVVdvKNipbDNfYzFFuZO63PCvemOQ3Au+xwOej/PqjrETmJ
YIYVMxEu3518SDflALEumgNPexactNSM0lqWkTjKFk2aLZApyR434Z/JbTVTgKwz
IsbuvcJGbsSLLUoreogXePL477HVKA7haA89CWUeahucfZ6dVdNwcCxYEq2GpIy6
C3Z8v4kD2qc0sCOBXdruTP9lev3aHp6I4NXHceDCaghw8vXl1e6s+3iSI76i/WhD
D3HpMQA6qexplA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:54 2025 by rpki-client