Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: WChqCNlQGF/WRx5p50nQ0RRXLzOlxTsibWR7YOUdEKU=
Subject key identifier: DD:D4:06:DC:AF:1C:99:6B:6D:F1:A4:91:ED:56:20:80:E3:7F:ED:B1
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019A71B76FDC748642369F81AE9C8E984368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0E82
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: xxcdOjUwVeoFyiJdtS9wnlhV7/eWaqZbayvwAYjEYFs=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6f:dc:74:86:42:36:9f:81:ae:9c:8e:98:43:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=ddd406dcaf1c996b6df1a491ed562080e37fedb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:83:57:81:7f:4f:6e:21:07:07:51:3d:9a:
7d:f3:b1:b4:07:56:a0:88:61:9c:39:28:41:2b:a9:
0a:30:c3:ac:d5:e0:93:ea:18:61:5f:d4:95:5e:f5:
98:14:69:48:a3:4e:28:57:72:28:ba:66:46:4b:c9:
aa:0c:ae:f1:9d:f8:d3:0c:ea:70:b7:13:30:54:51:
fa:03:28:84:90:0c:53:76:19:7a:4a:07:23:dd:89:
a2:bb:64:0d:28:8d:72:fb:45:bb:82:8b:c8:e6:41:
03:f1:a7:9b:eb:1d:a0:d1:b2:e6:f8:a1:bb:42:e7:
ce:68:29:d4:9b:be:24:f4:fa:f6:81:2a:0e:f5:b1:
aa:39:ba:d6:b8:7b:17:df:f5:33:7e:00:d0:6a:a3:
63:72:5d:9b:6d:26:1a:6f:a6:f4:ed:f4:47:2b:6a:
75:52:7b:c0:2a:7b:4f:df:1a:73:c3:34:6c:34:b3:
fb:22:8d:24:27:99:a0:dd:9d:32:69:a6:76:f2:8f:
81:4f:be:6f:ed:ea:e0:d2:e5:ae:4d:1b:39:3d:a7:
d5:5c:ed:57:b2:fa:18:f8:41:9b:fd:93:8e:f5:fc:
c5:14:95:3b:ae:40:3e:83:d4:f5:1c:9e:73:2e:18:
fe:04:90:56:00:ae:cb:c0:07:7f:ac:0a:82:78:42:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:06:DC:AF:1C:99:6B:6D:F1:A4:91:ED:56:20:80:E3:7F:ED:B1
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4d:15:18:f7:f8:10:f4:c6:be:59:9f:19:e3:54:de:2a:30:
2c:ac:a9:08:5a:4f:01:bd:3d:21:45:37:98:20:86:1c:74:4f:
7e:15:75:62:73:69:73:65:9a:c7:1c:80:8c:e6:f4:5f:55:8f:
5b:a3:22:71:bc:c9:e1:4f:01:96:fa:29:ab:05:db:02:cf:81:
b8:03:0c:17:3c:18:91:6c:b1:e4:68:9f:cb:99:d1:78:55:e8:
37:d4:cf:67:4f:98:3e:bc:1b:e8:66:fd:7b:2d:62:f6:9c:3a:
17:74:39:f5:e7:a9:d6:7b:70:87:60:aa:ed:24:3f:58:ae:e8:
5e:09:bd:d4:ae:61:11:75:51:75:47:1f:97:a9:2e:ea:85:13:
2d:da:81:6c:63:dd:da:93:77:a8:05:d3:35:bb:08:5c:2a:ec:
ec:a8:a6:88:6a:77:ac:7a:24:fe:29:d3:f4:13:25:16:e7:fc:
19:35:63:1e:68:90:38:48:98:3a:6c:27:9e:d9:6d:4e:de:5c:
5f:85:cd:0b:5e:b6:e3:ba:f6:21:cc:5c:8d:80:9b:c2:a1:31:
7d:28:f0:8e:ec:f6:9c:56:1f:3f:07:b6:0d:90:0f:ba:7a:a0:
d0:72:6a:eb:28:da:0a:db:1b:45:65:a8:37:5f:49:16:4b:a7:
f5:f2:24:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt2/cdIZCNp+BrpyOmENoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjUxMTExMDcwMDM4WhcNMjUxMTEyMDcwMDM4WjAzMTEwLwYDVQQD
EyhkZGQ0MDZkY2FmMWM5OTZiNmRmMWE0OTFlZDU2MjA4MGUzN2ZlZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyDV4F/T24hBwdRPZp987G0B1ag
iGGcOShBK6kKMMOs1eCT6hhhX9SVXvWYFGlIo04oV3IoumZGS8mqDK7xnfjTDOpw
txMwVFH6AyiEkAxTdhl6Sgcj3Ymiu2QNKI1y+0W7govI5kED8aeb6x2g0bLm+KG7
QufOaCnUm74k9Pr2gSoO9bGqObrWuHsX3/UzfgDQaqNjcl2bbSYab6b07fRHK2p1
UnvAKntP3xpzwzRsNLP7Io0kJ5mg3Z0yaaZ28o+BT75v7erg0uWuTRs5PafVXO1X
svoY+EGb/ZOO9fzFFJU7rkA+g9T1HJ5zLhj+BJBWAK7LwAd/rAqCeEIzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3UBtyvHJlrbfGkke1WIIDjf+2xMB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR00VGPf4
EPTGvlmfGeNU3iowLKypCFpPAb09IUU3mCCGHHRPfhV1YnNpc2WaxxyAjOb0X1WP
W6MicbzJ4U8BlvopqwXbAs+BuAMMFzwYkWyx5Gify5nReFXoN9TPZ0+YPrwb6Gb9
ey1i9pw6F3Q59eep1ntwh2Cq7SQ/WK7oXgm91K5hEXVRdUcfl6ku6oUTLdqBbGPd
2pN3qAXTNbsIXCrs7KimiGp3rHok/inT9BMlFuf8GTVjHmiQOEiYOmwnntltTt5c
X4XNC16247r2IcxcjYCbwqExfSjwjuz2nFYfPwe2DZAPunqg0HJq6yjaCtsbRWWo
N19JFkun9fIkmw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:08 2025 by rpki-client