Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: JZu2giFKEafOjtc57Wq5mQc5UTTNhYY6NgPSTzbM9Hk=
Subject key identifier: 64:0A:5F:01:D1:CA:E1:AB:54:73:A1:4D:BB:09:0D:4D:15:4A:D6:97
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019A11297DC598B3C9D24A1AD123CE255BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 051F
Signing time: Thu 23 Oct 2025 13:02:03 +0000
Manifest this update: Thu 23 Oct 2025 13:02:03 +0000
Manifest next update: Fri 24 Oct 2025 13:02:03 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: Fsu3weMMns7SY5H/7E0x3dMPAUoQ+g0X7LAzz52Mt9g=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:29:7d:c5:98:b3:c9:d2:4a:1a:d1:23:ce:25:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Oct 23 13:02:03 2025 GMT
Not After : Oct 24 13:02:03 2025 GMT
Subject: CN=640a5f01d1cae1ab5473a14dbb090d4d154ad697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:15:58:da:50:98:d2:57:a0:a6:ca:a2:61:
ed:8b:f7:db:f0:c4:0f:db:1a:b9:7a:0c:d9:80:a9:
d3:75:b3:65:63:18:d3:8f:de:c6:ad:b3:dd:10:e8:
73:36:7e:b4:f6:79:58:c2:dd:94:05:40:26:32:ba:
c4:4b:75:a3:c3:8e:4b:58:e8:f3:85:58:3f:d4:18:
1d:88:d9:0a:72:12:60:12:10:e7:50:c6:3a:e9:8d:
86:96:a9:05:1f:97:7d:86:cb:88:43:1c:2d:e3:27:
de:3e:15:28:f4:16:ea:a4:65:88:18:45:e3:4e:da:
19:d6:d2:07:23:8d:35:a3:b6:c1:1c:f7:30:d9:89:
69:06:73:3f:32:c1:37:88:7b:23:15:c3:ae:10:fc:
57:8d:71:51:90:75:b2:5e:5c:53:fb:91:66:0c:d4:
10:57:a9:a8:88:49:25:48:83:3d:01:62:41:83:89:
1f:08:bd:a7:8f:b2:d8:3f:e4:35:65:57:42:fe:51:
53:5b:13:a6:08:82:d6:35:1f:cd:a6:fd:19:5e:96:
97:06:29:79:f0:41:d8:d8:51:24:ae:bd:aa:f4:18:
8b:e5:46:a1:d1:34:51:36:7c:13:2c:47:ac:39:1a:
5f:59:5e:d1:52:57:58:39:c6:16:5f:83:47:d3:67:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:5F:01:D1:CA:E1:AB:54:73:A1:4D:BB:09:0D:4D:15:4A:D6:97
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:27:a5:ee:7d:f9:81:0a:df:e4:0d:fa:02:48:72:c0:4b:
37:11:1c:73:47:09:3c:13:20:fb:51:be:cd:22:35:fe:0f:bb:
de:65:73:57:f9:a7:1b:74:00:b8:9c:a0:f5:60:42:bf:e2:39:
f4:41:f3:c4:42:5d:5b:6f:83:49:71:1e:65:a2:d8:70:ac:7d:
17:16:1e:10:c6:80:f8:f5:46:78:9d:f6:9b:52:a6:b9:85:6d:
af:c4:68:1f:f0:cc:4f:7c:0e:bc:ef:a9:c8:dd:96:cd:f8:c0:
c4:27:40:25:f8:6e:8a:04:73:ee:6d:3d:ca:ae:3f:78:79:60:
4d:f4:85:c0:c7:dd:67:85:18:07:8d:62:55:e6:52:b9:95:20:
9b:24:4f:1c:3a:71:8b:6e:2b:30:56:48:be:6e:ef:69:a9:28:
ea:89:95:e3:49:6b:24:fc:dd:0c:ad:6e:f6:ef:0a:b6:fb:bf:
82:c4:a5:b8:53:68:28:df:cd:fe:fc:1e:f2:98:bd:d6:fd:95:
f8:55:fe:22:23:ec:83:f2:b2:a9:ec:d0:62:42:21:9f:5b:da:
c2:79:dd:6f:b1:b0:e8:e7:06:1d:2e:c6:09:a6:49:aa:1b:ae:
c4:f7:a9:d0:e4:63:f4:c1:69:be:d6:80:47:9e:f3:17:2f:dd:
cd:1a:ec:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoRKX3FmLPJ0koa0SPOJVuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjUxMDIzMTMwMjAzWhcNMjUxMDI0MTMwMjAzWjAzMTEwLwYDVQQD
Eyg2NDBhNWYwMWQxY2FlMWFiNTQ3M2ExNGRiYjA5MGQ0ZDE1NGFkNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLIVWNpQmNJXoKbKomHti/fb8MQP
2xq5egzZgKnTdbNlYxjTj97GrbPdEOhzNn609nlYwt2UBUAmMrrES3Wjw45LWOjz
hVg/1BgdiNkKchJgEhDnUMY66Y2GlqkFH5d9hsuIQxwt4yfePhUo9BbqpGWIGEXj
TtoZ1tIHI401o7bBHPcw2YlpBnM/MsE3iHsjFcOuEPxXjXFRkHWyXlxT+5FmDNQQ
V6moiEklSIM9AWJBg4kfCL2nj7LYP+Q1ZVdC/lFTWxOmCILWNR/Npv0ZXpaXBil5
8EHY2FEkrr2q9BiL5Uah0TRRNnwTLEesORpfWV7RUldYOcYWX4NH02cflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQKXwHRyuGrVHOhTbsJDU0VStaXMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJQnpe59
+YEK3+QN+gJIcsBLNxEcc0cJPBMg+1G+zSI1/g+73mVzV/mnG3QAuJyg9WBCv+I5
9EHzxEJdW2+DSXEeZaLYcKx9FxYeEMaA+PVGeJ32m1KmuYVtr8RoH/DMT3wOvO+p
yN2WzfjAxCdAJfhuigRz7m09yq4/eHlgTfSFwMfdZ4UYB41iVeZSuZUgmyRPHDpx
i24rMFZIvm7vaako6omV40lrJPzdDK1u9u8Ktvu/gsSluFNoKN/N/vwe8pi91v2V
+FX+IiPsg/KyqezQYkIhn1vawnndb7Gw6OcGHS7GCaZJqhuuxPep0ORj9MFpvtaA
R57zFy/dzRrs3w==
-----END CERTIFICATE-----
Generated at Thu Oct 23 21:03:33 2025 by rpki-client