Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: FrvsmQ5lpcZ1UTC9hnmCEJ6i4AZdOrz4yAksdGMAUrM=
Subject key identifier: 87:47:AE:BE:12:A5:E7:3A:04:A6:AC:25:D5:2F:FC:E9:F6:D3:5E:5D
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 019A7113573B13ABE19F98212003BA59C32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: 7vLHaBLTKb6VMfykazb9uLWIiJW4pQPwOD4+MBx0YFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:57:3b:13:ab:e1:9f:98:21:20:03:ba:59:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=8747aebe12a5e73a04a6ac25d52ffce9f6d35e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:3f:00:3d:b3:62:b6:9d:9f:9a:e6:a9:db:
0b:1c:9c:c4:3c:58:65:72:50:1b:66:77:21:4a:dc:
41:32:82:e2:d6:ae:f8:d8:64:b5:81:a2:58:9a:74:
40:17:73:58:e5:38:69:d2:23:75:f5:90:87:73:d0:
6a:09:fe:d2:a3:af:84:ed:33:35:54:bb:cf:68:52:
97:9c:2e:f5:43:e1:22:02:2d:35:27:5e:57:fb:d1:
fc:53:05:47:e3:81:a8:91:ff:72:5d:09:a9:a6:0b:
bf:47:5c:06:51:41:3f:82:52:12:2a:95:d0:ca:c3:
21:25:2b:85:f6:cd:ce:4c:e9:1a:4e:bf:5d:6d:75:
ce:32:66:45:b9:f6:7e:f2:75:a7:dc:30:d1:f5:ea:
bb:3c:7a:ad:02:bd:c6:f5:b2:e2:b4:6a:3f:fd:94:
b6:2e:cb:27:f4:9e:b7:50:83:3a:c2:d5:f6:b4:aa:
46:72:9e:8d:40:ce:e5:c0:de:9b:ac:33:cc:e5:26:
2d:37:3b:78:30:8d:9e:0b:d2:44:03:4a:08:18:bb:
73:5b:f9:ac:a1:e4:69:9e:bf:d6:dc:51:81:5f:18:
f6:b8:e0:75:e2:77:78:c9:e3:60:6b:c1:6b:60:6b:
cb:3b:90:33:30:e2:00:8e:91:ce:91:19:ac:f1:b3:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:AE:BE:12:A5:E7:3A:04:A6:AC:25:D5:2F:FC:E9:F6:D3:5E:5D
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:ca:cd:06:cf:ee:3e:1f:7e:06:23:84:55:6d:31:44:2c:
5a:b2:a1:d5:26:d0:b0:0e:5a:e8:d2:83:d2:69:67:0e:30:db:
09:78:fd:6d:8d:c8:7e:d6:2f:a6:b0:f1:a7:7f:0c:4a:07:fa:
a6:43:fa:3e:f5:2e:0f:6d:7b:5c:c2:ac:e5:a3:32:69:e7:92:
7a:2a:7c:3f:04:1e:3a:6f:4e:ef:08:35:bc:ca:72:5f:14:93:
51:10:56:06:c1:4a:68:13:5c:69:bf:a4:28:fd:90:ab:2a:2c:
d8:ef:35:fc:c9:3a:ec:fc:c2:80:d2:b0:1d:e3:c4:6b:c7:a5:
be:14:74:bb:06:43:47:c3:94:2b:f6:e9:db:37:e6:1d:98:11:
3b:68:69:bd:de:8b:44:bb:cf:f6:f5:e8:7a:b3:ae:1e:2e:d0:
07:38:12:77:7a:80:a9:d9:4c:10:31:97:67:b1:15:f3:c5:8d:
87:0e:66:10:96:af:93:27:28:f1:76:cb:5a:b3:79:2f:94:15:
8e:a9:1b:18:e0:f3:c8:67:0d:1b:29:1e:7f:36:69:f7:d5:88:
82:67:a3:e6:a4:35:e3:22:30:c0:56:b6:ba:9f:f6:1c:b9:8c:
b5:40:4b:0d:ca:1c:b4:d4:ba:c9:e0:e6:3d:7a:69:b9:d1:31:
33:e1:3c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1c7E6vhn5ghIAO6WcMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTA0ZWUwNGIxMjgyM2U4NTNmZjI0M2QzNjU1MWU0Y2U2
ODNhNzMwHhcNMjUxMTExMDQwMTI0WhcNMjUxMTEyMDQwMTI0WjAzMTEwLwYDVQQD
Eyg4NzQ3YWViZTEyYTVlNzNhMDRhNmFjMjVkNTJmZmNlOWY2ZDM1ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU4/AD2zYradn5rmqdsLHJzEPFhl
clAbZnchStxBMoLi1q742GS1gaJYmnRAF3NY5Thp0iN19ZCHc9BqCf7So6+E7TM1
VLvPaFKXnC71Q+EiAi01J15X+9H8UwVH44Gokf9yXQmppgu/R1wGUUE/glISKpXQ
ysMhJSuF9s3OTOkaTr9dbXXOMmZFufZ+8nWn3DDR9eq7PHqtAr3G9bLitGo//ZS2
Lssn9J63UIM6wtX2tKpGcp6NQM7lwN6brDPM5SYtNzt4MI2eC9JEA0oIGLtzW/ms
oeRpnr/W3FGBXxj2uOB14nd4yeNga8FrYGvLO5AzMOIAjpHOkRms8bNAcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdHrr4Spec6BKasJdUv/On2015dMB8GA1UdIwQY
MBaAFBagTuBLEoI+hT/yQ9NlUeTOaDpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYt
NTkwZmI5NDlkMTA0LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYtNTkwZmI5NDlkMTA0
LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2jKzQbP
7j4ffgYjhFVtMUQsWrKh1SbQsA5a6NKD0mlnDjDbCXj9bY3IftYvprDxp38MSgf6
pkP6PvUuD217XMKs5aMyaeeSeip8PwQeOm9O7wg1vMpyXxSTURBWBsFKaBNcab+k
KP2Qqyos2O81/Mk67PzCgNKwHePEa8elvhR0uwZDR8OUK/bp2zfmHZgRO2hpvd6L
RLvP9vXoerOuHi7QBzgSd3qAqdlMEDGXZ7EV88WNhw5mEJavkyco8XbLWrN5L5QV
jqkbGODzyGcNGykefzZp99WIgmej5qQ14yIwwFa2up/2HLmMtUBLDcoctNS6yeDm
PXppudExM+E8aQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:46 2025 by rpki-client