Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: QiY/E2EwlO170ncLyPXBgmURLMi2pQMowfjhVGZU9BU=
Subject key identifier: 4C:F9:7A:9B:E5:6E:61:F5:8A:D6:84:FA:DA:1F:FA:34:5E:8A:7A:D0
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 0199D1004DFD79F3A3892608AB12DBF58A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 084F
Signing time: Sat 11 Oct 2025 02:01:21 +0000
Manifest this update: Sat 11 Oct 2025 02:01:21 +0000
Manifest next update: Sun 12 Oct 2025 02:01:21 +0000
Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: uCOGl6HkTjkX/TM4M12VbOSaGaxJWcS6T4cbnwWczns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:00:4d:fd:79:f3:a3:89:26:08:ab:12:db:f5:8a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Oct 11 02:01:21 2025 GMT
Not After : Oct 12 02:01:21 2025 GMT
Subject: CN=4cf97a9be56e61f58ad684fada1ffa345e8a7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:09:8e:e4:c1:e0:52:6b:ca:52:ac:60:8c:
ac:94:ee:62:8b:bb:e3:46:12:76:ac:70:b9:67:d3:
12:2a:d5:79:39:30:52:4b:66:fa:d2:f5:67:03:26:
dc:e9:8b:55:7d:92:34:6f:34:e4:51:6f:77:e6:5d:
6b:ff:e9:7d:e6:7e:cb:fd:34:1f:b2:0c:5c:8f:94:
cb:de:ef:66:61:f9:8f:5e:ee:2f:80:8c:30:b9:8a:
ef:55:d0:40:33:a3:df:14:7e:44:44:da:32:63:18:
3b:ab:01:e6:49:3b:bb:07:87:d9:93:c8:a6:03:9d:
e6:fc:6e:07:43:a8:b1:df:35:9f:8a:54:5a:08:7f:
46:dd:23:14:21:dc:cb:a2:0b:29:57:72:4f:56:98:
85:44:ff:60:5d:ae:42:16:6a:18:ed:52:36:4e:aa:
e9:65:88:ba:ca:53:17:e7:8b:d3:53:5a:b0:ce:55:
d9:8d:df:e9:a0:c3:42:1f:bc:38:e4:24:ac:31:37:
f5:0d:8a:36:b8:65:cb:34:ef:cc:12:44:09:54:4c:
e5:3b:f4:d7:f3:60:8a:bd:0d:b5:af:2a:ad:8c:10:
c3:b4:cb:59:30:ce:3a:38:76:73:26:c1:01:e3:ee:
1e:12:2f:20:9e:56:20:ba:ff:4f:1e:a2:62:87:fd:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:7A:9B:E5:6E:61:F5:8A:D6:84:FA:DA:1F:FA:34:5E:8A:7A:D0
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cb:34:0a:c1:04:79:1a:b3:24:5a:14:b0:19:85:44:9c:05:
b6:81:ff:01:d2:d2:86:9c:04:44:96:4b:0e:45:64:1a:bf:0a:
71:70:6b:c2:66:2f:ab:86:ef:20:79:73:83:cb:0a:01:ca:91:
23:fc:91:dc:1d:60:22:78:93:df:e8:f6:d0:18:08:96:9f:7e:
00:be:63:02:f8:61:9c:fb:a8:ff:39:12:90:83:e5:3e:2c:39:
e6:7a:0a:25:c0:64:0b:13:1d:f9:f6:02:9a:04:69:34:63:11:
e4:b5:1a:8f:c9:52:ac:7c:4d:54:f1:db:20:1b:34:62:05:6f:
0e:af:36:92:5f:36:82:68:f9:46:2b:dc:53:2d:80:b0:72:5e:
e0:41:80:c1:70:6e:49:db:de:37:6c:3b:5e:d5:dc:06:74:73:
e1:3e:17:94:a6:6e:53:a8:06:0e:0f:f6:0d:25:2f:db:8a:88:
8c:ca:9b:64:bb:bc:da:8d:7d:75:b4:9b:41:6d:64:43:eb:07:
df:fe:b0:58:5d:ac:5b:6a:2f:b7:e7:62:ed:19:b8:90:eb:b9:
00:34:53:d7:e8:a6:2f:e2:64:24:b4:54:1b:8e:d4:77:d7:58:
e6:0f:5e:3d:28:46:07:22:05:83:7b:e1:45:3c:0e:93:e0:21:
03:e0:4b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnRAE39efOjiSYIqxLb9YoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4
YmMwNWQwHhcNMjUxMDExMDIwMTIxWhcNMjUxMDEyMDIwMTIxWjAzMTEwLwYDVQQD
Eyg0Y2Y5N2E5YmU1NmU2MWY1OGFkNjg0ZmFkYTFmZmEzNDVlOGE3YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aYJjuTB4FJrylKsYIyslO5ii7vj
RhJ2rHC5Z9MSKtV5OTBSS2b60vVnAybc6YtVfZI0bzTkUW935l1r/+l95n7L/TQf
sgxcj5TL3u9mYfmPXu4vgIwwuYrvVdBAM6PfFH5ERNoyYxg7qwHmSTu7B4fZk8im
A53m/G4HQ6ix3zWfilRaCH9G3SMUIdzLogspV3JPVpiFRP9gXa5CFmoY7VI2Tqrp
ZYi6ylMX54vTU1qwzlXZjd/poMNCH7w45CSsMTf1DYo2uGXLNO/MEkQJVEzlO/TX
82CKvQ21ryqtjBDDtMtZMM46OHZzJsEB4+4eEi8gnlYguv9PHqJih/2TwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz5epvlbmH1itaE+tof+jReinrQMB8GA1UdIwQY
MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt
Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji
LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8s0CsEE
eRqzJFoUsBmFRJwFtoH/AdLShpwERJZLDkVkGr8KcXBrwmYvq4bvIHlzg8sKAcqR
I/yR3B1gIniT3+j20BgIlp9+AL5jAvhhnPuo/zkSkIPlPiw55noKJcBkCxMd+fYC
mgRpNGMR5LUaj8lSrHxNVPHbIBs0YgVvDq82kl82gmj5RivcUy2AsHJe4EGAwXBu
SdveN2w7XtXcBnRz4T4XlKZuU6gGDg/2DSUv24qIjMqbZLu82o19dbSbQW1kQ+sH
3/6wWF2sW2ovt+di7Rm4kOu5ADRT1+imL+JkJLRUG47Ud9dY5g9ePShGByIFg3vh
RTwOk+AhA+BL+w==
-----END CERTIFICATE-----
Generated at Sat Oct 11 06:58:18 2025 by rpki-client