Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: CKMMMMsr+5MhvjzGAgsQ7rmQ5cIoWmEH7CZPvk93mZM=
Subject key identifier: BE:D4:A3:B9:CD:81:66:43:36:6B:AA:F8:92:0F:CE:A2:C0:E6:E7:38
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019A228AA28E73A83DAD25C0D0A29867BF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:01:42 +0000
Manifest this update: Sun 26 Oct 2025 22:01:42 +0000
Manifest next update: Mon 27 Oct 2025 22:01:42 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: l91/qBuFrsn6kcl/aMvKgxl3Tq6B3GTQx2MNFZoZNzY=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:a2:8e:73:a8:3d:ad:25:c0:d0:a2:98:67:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Oct 26 22:01:42 2025 GMT
Not After : Oct 27 22:01:42 2025 GMT
Subject: CN=bed4a3b9cd816643366baaf8920fcea2c0e6e738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:eb:5a:52:dd:a2:eb:7b:52:7f:99:dc:a7:
c1:aa:90:b2:c0:53:7c:10:b9:9b:e6:4f:ae:6b:7f:
f2:ba:80:33:6a:30:db:8d:70:4a:a0:ac:8c:8e:3e:
42:36:50:3e:ae:49:e4:f7:ca:a4:72:ff:4b:be:08:
4b:a4:88:87:fb:9a:a2:93:05:26:85:fe:6d:6e:05:
c5:4f:c6:92:95:ba:b4:7d:dc:6e:f9:5c:21:1e:3f:
7d:1e:b2:59:46:0f:a3:1a:26:a8:6c:0c:a4:62:24:
d2:51:7d:8c:8b:8f:41:70:f1:51:ff:07:17:2d:6a:
68:4e:ea:0e:9d:c9:4f:96:fa:77:00:9d:72:c2:45:
fa:0f:97:03:ad:db:ab:e1:7a:c6:af:56:57:ba:b6:
e8:65:b4:67:5a:57:c5:55:fd:37:a8:39:c3:56:d8:
db:e6:f2:73:73:25:0a:c6:51:e3:7d:be:64:55:db:
f8:ea:95:48:79:d5:ac:68:e6:53:96:27:f8:d6:5d:
f2:28:db:00:20:16:ee:74:ea:15:27:e3:87:be:b3:
96:7b:da:2a:1a:17:5b:d0:cb:84:63:35:7f:b4:a5:
ad:52:8a:88:90:6d:60:1e:e1:6b:bb:97:fa:96:75:
33:e2:9d:57:ec:77:a1:dc:b9:9e:a4:1c:86:9b:30:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:A3:B9:CD:81:66:43:36:6B:AA:F8:92:0F:CE:A2:C0:E6:E7:38
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:d3:4d:6c:73:d5:21:11:96:0e:6c:2e:e1:3c:36:4f:be:
79:51:4a:7f:d8:2c:71:ff:7a:0d:f6:05:20:05:b3:b5:ae:3f:
23:ac:1a:c2:41:05:1b:02:4e:1a:91:74:a1:15:18:de:3d:98:
2e:e9:7b:98:6e:ef:44:32:23:a3:4d:4e:1c:ba:26:08:3d:7c:
61:1c:aa:05:3c:1d:3b:7b:0c:52:5e:c4:d9:6f:8a:14:e5:48:
00:45:c2:4a:1b:4f:c3:d6:83:83:5b:70:6e:48:6e:98:47:27:
94:5e:86:67:c3:11:b7:2e:b0:32:0a:ca:aa:30:b0:ac:0e:f8:
f3:39:ef:3f:f6:3b:8b:5b:1b:14:03:99:86:4c:ef:ae:5d:00:
c2:9c:72:cd:00:94:1b:7f:dc:96:48:e3:ce:6e:f4:82:1d:4e:
10:54:2e:01:91:d8:bb:9a:76:8d:cb:ae:fd:3c:96:d1:db:c2:
f4:67:fd:1e:36:9c:cb:bf:0a:50:8d:cc:2b:04:35:20:0f:f5:
a1:ee:f2:cd:a6:64:a8:7d:cf:be:f4:af:21:b1:18:f0:74:b2:
c7:17:19:de:e5:7d:b5:28:de:9a:12:a8:89:3e:aa:e8:a2:72:
21:c7:c3:0f:1f:2d:c1:e9:ae:7b:08:7d:39:ae:b4:93:65:db:
52:f4:8c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiqKOc6g9rSXA0KKYZ79/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx
YmQyNmEwHhcNMjUxMDI2MjIwMTQyWhcNMjUxMDI3MjIwMTQyWjAzMTEwLwYDVQQD
EyhiZWQ0YTNiOWNkODE2NjQzMzY2YmFhZjg5MjBmY2VhMmMwZTZlNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujLrWlLdout7Un+Z3KfBqpCywFN8
ELmb5k+ua3/yuoAzajDbjXBKoKyMjj5CNlA+rknk98qkcv9LvghLpIiH+5qikwUm
hf5tbgXFT8aSlbq0fdxu+VwhHj99HrJZRg+jGiaobAykYiTSUX2Mi49BcPFR/wcX
LWpoTuoOnclPlvp3AJ1ywkX6D5cDrdur4XrGr1ZXurboZbRnWlfFVf03qDnDVtjb
5vJzcyUKxlHjfb5kVdv46pVIedWsaOZTlif41l3yKNsAIBbudOoVJ+OHvrOWe9oq
Ghdb0MuEYzV/tKWtUoqIkG1gHuFru5f6lnUz4p1X7Heh3LmepByGmzBXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Uo7nNgWZDNmuq+JIPzqLA5uc4MB8GA1UdIwQY
MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt
NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm
LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj3TTWxz
1SERlg5sLuE8Nk++eVFKf9gscf96DfYFIAWzta4/I6wawkEFGwJOGpF0oRUY3j2Y
Lul7mG7vRDIjo01OHLomCD18YRyqBTwdO3sMUl7E2W+KFOVIAEXCShtPw9aDg1tw
bkhumEcnlF6GZ8MRty6wMgrKqjCwrA748znvP/Y7i1sbFAOZhkzvrl0AwpxyzQCU
G3/clkjjzm70gh1OEFQuAZHYu5p2jcuu/TyW0dvC9Gf9Hjacy78KUI3MKwQ1IA/1
oe7yzaZkqH3PvvSvIbEY8HSyxxcZ3uV9tSjemhKoiT6q6KJyIcfDDx8twemuewh9
Oa60k2XbUvSMUA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:08 2025 by rpki-client