Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: UFlzGdinpqSgj4tzIHIcsEdGxcMrfCjzJ5Ah6LUaArQ=
Subject key identifier: E7:5D:5F:36:B1:53:5D:CC:D8:CA:8C:F0:A7:13:CD:FF:50:CA:61:53
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 019A2F696A70B9043022092491AF5E37D971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 10:00:28 +0000
Manifest this update: Wed 29 Oct 2025 10:00:28 +0000
Manifest next update: Thu 30 Oct 2025 10:00:28 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: +7hm915LADF0xq+QsEn5PZ/J2O5Qhc0n5GCjWIjNoxs=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:6a:70:b9:04:30:22:09:24:91:af:5e:37:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Oct 29 10:00:28 2025 GMT
Not After : Oct 30 10:00:28 2025 GMT
Subject: CN=e75d5f36b1535dccd8ca8cf0a713cdff50ca6153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:6a:51:59:52:85:23:79:78:53:f7:20:b9:
15:e2:a1:38:15:9d:b5:5a:0f:22:dc:c6:db:88:fc:
b0:94:56:4d:9d:55:fe:1e:e4:92:a8:f3:61:83:43:
24:e5:b8:58:45:26:fe:e3:22:ed:28:35:12:1b:ea:
17:63:46:df:e7:10:a8:9c:3d:f6:79:05:b5:fa:08:
ca:72:36:1e:40:84:9b:33:7d:fe:1f:45:3a:3f:24:
b6:e4:35:d0:1e:5b:f8:80:73:f5:1f:43:8c:02:4b:
00:a5:c2:74:9b:64:5b:8a:f2:65:92:a0:56:82:38:
b8:0e:96:67:73:10:2b:10:fa:dc:c6:44:2a:19:94:
3e:45:31:1c:22:7d:ef:16:7e:7b:be:c7:36:3c:d0:
dd:a8:e3:d0:fe:8b:91:5c:29:87:00:23:e3:0c:48:
4b:e8:1f:e3:d6:f1:0b:56:da:c1:fc:91:a8:f5:e0:
c3:d0:71:24:78:ea:ed:24:36:c5:f2:00:02:aa:fa:
17:4a:e7:01:7b:51:7f:68:7a:2d:e8:0e:c6:97:0a:
4b:0a:c0:48:93:a9:7d:33:ca:f7:5c:e2:83:b0:bb:
5e:0a:d8:1f:f7:92:57:a9:82:2d:86:45:ee:cd:48:
59:ac:e9:f6:b9:d3:ae:4e:00:0e:53:67:f8:ac:fd:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:5F:36:B1:53:5D:CC:D8:CA:8C:F0:A7:13:CD:FF:50:CA:61:53
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7a:97:49:71:04:dd:48:e0:89:06:8f:bc:c9:e8:98:16:7d:
79:4b:c0:76:5b:95:fe:83:c4:75:00:49:a5:de:6f:f8:7a:5b:
7f:6e:da:76:9f:f6:3e:99:2a:1a:43:81:23:fd:f6:80:54:02:
05:ae:00:c4:e6:85:35:d5:9b:3c:62:1c:b8:fc:be:d8:3c:b3:
40:ee:05:06:b5:a7:92:cf:89:d3:50:33:75:29:0b:96:66:2f:
10:ba:57:58:75:32:48:bd:d9:b6:ed:e0:91:93:9f:4b:5c:c9:
ee:c5:9f:fb:88:db:d2:19:8c:3a:43:d7:1b:18:ca:e3:ae:54:
c1:8a:37:54:d3:60:a1:13:56:87:a7:65:bb:27:78:b4:4d:24:
13:80:71:a1:3f:b7:02:3a:c6:f7:c8:68:00:81:54:78:75:63:
52:5f:27:59:d5:5b:fe:d5:78:e2:a2:b2:05:0f:ee:64:26:f2:
64:3f:cb:f8:72:54:7e:ab:d8:91:25:3c:7d:0d:ae:b2:5f:39:
24:28:c6:bb:4f:62:e0:e6:27:69:f3:5d:80:7a:42:8d:ac:28:
d4:c1:ac:2c:40:64:ad:56:67:97:b5:3b:1e:07:e4:ff:83:9d:
9b:c7:ac:d6:5d:18:d7:dd:20:ba:21:9e:c7:32:fc:96:35:89:
35:6e:57:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZovaWpwuQQwIgkkka9eN9lxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzY2YTc4NmU2ZWYzMTY3NGJlYzY4MzNjNzhhZWJlYzE2
MzM5NzIwHhcNMjUxMDI5MTAwMDI4WhcNMjUxMDMwMTAwMDI4WjAzMTEwLwYDVQQD
EyhlNzVkNWYzNmIxNTM1ZGNjZDhjYThjZjBhNzEzY2RmZjUwY2E2MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQhqUVlShSN5eFP3ILkV4qE4FZ21
Wg8i3MbbiPywlFZNnVX+HuSSqPNhg0Mk5bhYRSb+4yLtKDUSG+oXY0bf5xConD32
eQW1+gjKcjYeQISbM33+H0U6PyS25DXQHlv4gHP1H0OMAksApcJ0m2RbivJlkqBW
gji4DpZncxArEPrcxkQqGZQ+RTEcIn3vFn57vsc2PNDdqOPQ/ouRXCmHACPjDEhL
6B/j1vELVtrB/JGo9eDD0HEkeOrtJDbF8gACqvoXSucBe1F/aHot6A7GlwpLCsBI
k6l9M8r3XOKDsLteCtgf95JXqYIthkXuzUhZrOn2udOuTgAOU2f4rP04aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOddXzaxU13M2MqM8KcTzf9QymFTMB8GA1UdIwQY
MBaAFBTGanhubvMWdL7Ggzx4rr7BYzlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWIt
MzllNzZkYjJmODA4LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWItMzllNzZkYjJmODA4
LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnqXSXEE
3UjgiQaPvMnomBZ9eUvAdluV/oPEdQBJpd5v+Hpbf27adp/2PpkqGkOBI/32gFQC
Ba4AxOaFNdWbPGIcuPy+2DyzQO4FBrWnks+J01AzdSkLlmYvELpXWHUySL3Ztu3g
kZOfS1zJ7sWf+4jb0hmMOkPXGxjK465UwYo3VNNgoRNWh6dluyd4tE0kE4BxoT+3
AjrG98hoAIFUeHVjUl8nWdVb/tV44qKyBQ/uZCbyZD/L+HJUfqvYkSU8fQ2usl85
JCjGu09i4OYnafNdgHpCjawo1MGsLEBkrVZnl7U7Hgfk/4Odm8es1l0Y190guiGe
xzL8ljWJNW5X2g==
-----END CERTIFICATE-----
Generated at Wed Oct 29 15:41:21 2025 by rpki-client