Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: 6yIIJ5M+cxvhPjLkETW7BUsoHuruJgLBBMKewbp+sIg=
Subject key identifier: 56:27:B1:74:5C:31:88:52:63:C3:A6:0E:83:EF:93:BF:34:4B:D0:BC
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019A25F88E1DA9F14F11D617327CA44B3889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0817
Signing time: Mon 27 Oct 2025 14:00:37 +0000
Manifest this update: Mon 27 Oct 2025 14:00:37 +0000
Manifest next update: Tue 28 Oct 2025 14:00:37 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 4jVjNYHwfFxz1Ww6lejI0WQwkBl4v+eZA9CDhnCZoR0=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:8e:1d:a9:f1:4f:11:d6:17:32:7c:a4:4b:38:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Oct 27 14:00:37 2025 GMT
Not After : Oct 28 14:00:37 2025 GMT
Subject: CN=5627b1745c31885263c3a60e83ef93bf344bd0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:91:d9:93:d7:ba:93:58:42:dd:e0:9d:45:
39:79:17:89:ee:de:17:57:06:b9:2b:8e:75:72:4d:
e5:a9:80:68:89:d2:70:ea:a4:42:e0:aa:b2:94:22:
54:f6:cc:ba:5c:af:5e:fd:64:53:a8:0f:99:f9:8e:
c2:6e:8b:bb:14:cf:87:33:70:69:89:e3:63:01:56:
95:58:fd:04:ea:d9:26:2f:f2:10:42:74:4b:44:81:
64:4d:87:92:a5:e5:da:be:ff:dc:5c:c7:90:a2:03:
4f:1f:f5:49:16:99:e7:b3:bc:f8:74:42:a9:ba:1f:
08:ca:e8:cc:b3:ab:ff:e8:99:89:08:ff:fe:ab:1a:
e4:25:33:22:86:93:13:11:35:43:93:77:81:52:f3:
57:02:71:92:68:0e:2b:90:83:b0:b8:8a:b1:68:d3:
28:c5:af:26:6b:e8:57:d3:34:37:19:d2:a3:9c:e6:
84:0a:13:d6:10:8e:91:56:d1:ed:0f:5b:21:ca:b2:
45:9e:a6:ca:3e:1a:5c:a8:b2:1d:f3:82:b9:67:85:
ac:68:50:a3:ea:95:a8:8f:e7:24:44:dd:71:a8:2d:
c8:e9:cb:c0:f1:12:65:c3:55:7c:cf:e7:57:64:fc:
84:3f:fe:e6:b0:e7:94:5e:b2:e9:15:1a:12:20:dc:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:B1:74:5C:31:88:52:63:C3:A6:0E:83:EF:93:BF:34:4B:D0:BC
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:55:8b:41:15:f9:7b:3d:0f:65:b4:20:dd:8b:28:3b:c3:d2:
e0:78:03:58:25:19:27:15:30:ff:6e:1a:16:fd:56:20:35:1d:
4a:bb:ba:51:ef:06:9c:f2:d5:a9:93:8c:fc:58:29:79:29:2e:
f4:83:ac:5f:49:cc:37:a1:03:94:e8:93:e3:ba:89:bf:ca:4c:
5d:02:f3:b4:4b:1c:22:e3:fa:e4:bc:5e:09:dd:f0:f0:86:de:
41:29:56:92:96:2b:79:72:f1:5f:4c:77:5f:19:50:09:b4:8c:
43:6a:4f:80:3e:fc:a7:dc:38:ef:53:b5:38:71:83:5e:27:67:
6d:cc:40:06:e2:e5:53:fd:31:ee:42:05:0a:86:31:b9:a6:da:
0a:39:ce:f9:df:18:13:75:33:ca:77:54:60:e9:7e:47:41:ac:
19:c3:c4:98:c8:24:90:de:18:a8:e0:69:5c:07:10:e9:1d:d0:
13:aa:26:9d:fb:95:92:41:86:30:01:6d:8a:ea:0e:1f:75:e8:
6f:b3:17:f8:06:b0:6e:55:fc:98:9e:71:7d:42:6c:72:43:50:
e5:8c:a6:42:55:ea:aa:cf:b4:77:b2:1b:6b:82:20:33:0c:a5:
e9:42:5a:7c:56:67:12:e8:b5:a4:79:ba:02:15:9a:ae:1a:8e:
51:49:75:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+I4dqfFPEdYXMnykSziJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDE1NTM5YzAxMTIxMDY2ZWFmZTk1YmUzNDAxZGZhNDQ0
MDc3ODUwHhcNMjUxMDI3MTQwMDM3WhcNMjUxMDI4MTQwMDM3WjAzMTEwLwYDVQQD
Eyg1NjI3YjE3NDVjMzE4ODUyNjNjM2E2MGU4M2VmOTNiZjM0NGJkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HyR2ZPXupNYQt3gnUU5eReJ7t4X
Vwa5K451ck3lqYBoidJw6qRC4KqylCJU9sy6XK9e/WRTqA+Z+Y7Cbou7FM+HM3Bp
ieNjAVaVWP0E6tkmL/IQQnRLRIFkTYeSpeXavv/cXMeQogNPH/VJFpnns7z4dEKp
uh8IyujMs6v/6JmJCP/+qxrkJTMihpMTETVDk3eBUvNXAnGSaA4rkIOwuIqxaNMo
xa8ma+hX0zQ3GdKjnOaEChPWEI6RVtHtD1shyrJFnqbKPhpcqLId84K5Z4WsaFCj
6pWoj+ckRN1xqC3I6cvA8RJlw1V8z+dXZPyEP/7msOeUXrLpFRoSINyihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYnsXRcMYhSY8OmDoPvk780S9C8MB8GA1UdIwQY
MBaAFBbRVTnAESEGbq/pW+NAHfpEQHeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUt
ZTg2ZmZmOTNmNDVkLzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUtZTg2ZmZmOTNmNDVk
LzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1WLQRX5
ez0PZbQg3YsoO8PS4HgDWCUZJxUw/24aFv1WIDUdSru6Ue8GnPLVqZOM/FgpeSku
9IOsX0nMN6EDlOiT47qJv8pMXQLztEscIuP65LxeCd3w8IbeQSlWkpYreXLxX0x3
XxlQCbSMQ2pPgD78p9w471O1OHGDXidnbcxABuLlU/0x7kIFCoYxuabaCjnO+d8Y
E3UzyndUYOl+R0GsGcPEmMgkkN4YqOBpXAcQ6R3QE6omnfuVkkGGMAFtiuoOH3Xo
b7MX+AawblX8mJ5xfUJsckNQ5YymQlXqqs+0d7Iba4IgMwyl6UJafFZnEui1pHm6
AhWarhqOUUl1Kw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:41:47 2025 by rpki-client