
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier: DZrhxaEFskMRmJ61oMZt5PaWTxZjI6XPBXPWWQ5vuhU=
Subject key identifier: 91:24:BE:43:0D:1E:A6:2F:F7:18:EC:66:78:60:5B:8A:5D:B6:A4:89
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019A53ACE4731432BD782717C2FE2920BB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number: 04D5
Signing time: Wed 05 Nov 2025 11:00:30 +0000
Manifest this update: Wed 05 Nov 2025 11:00:30 +0000
Manifest next update: Thu 06 Nov 2025 11:00:30 +0000
Files and hashes: 1: 0Hi1ARM6YdHR635BjkbmQXIIeaY.roa (hash: uqdk5JESW21KQoxuuRx7U0sUvzVO/rEE1MEj4EEFx0M=)
2: 1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa (hash: sdWRgTuLAn51+8HXVLa0jTAQ8mRzO7dfL4mFOSXplrM=)
3: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=)
4: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=)
5: 2cq1P4ZZ6UgiNYpOTVH-QcalGJI.roa (hash: fmH1CIvCoESiHgfxGKptTnPIXfqs2dEuOrOdNgFQtUI=)
6: 76jBSZXqoCLYuDx37Tg4k-XUZVs.roa (hash: MscmAcdESi3fGqr0XkNp+WZ2R9GaWQ30ttgidFzjvE8=)
7: 7LtUkCfnFV91w_Qgt3azxsZGlDI.roa (hash: i1o3vDAN7Yv1q7SUHLsRiMIQog9Vz1PLu8QgwEX9G30=)
8: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=)
9: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: v+kc+pdv9K2JFKFjlM+blTwVHU2S0JxOJGioE4grm+Y=)
10: GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa (hash: WROjdaGli8Fi41MZppDPsHHJ/iTpg3Lqh4RMCj2LsKM=)
11: KY68jLeDujJbynrOgN-K9-lu_Eo.roa (hash: ile+eHNeTiPprnxFVEw1DNOI8w4SlEdrRqsqP3bCU9I=)
12: MCSENiRFKrhWZu8OQyzGyZey3X0.roa (hash: 19Lj/9aGeP94OmDKLkzUjkTMV0n5d9Schy39XGUO2Qo=)
13: MJtGqW7EBoBUv03MjLuA1rZGnFk.roa (hash: JHIhHbc+O3brVI4S29z9gJ9Jp7NY0cEpDDfJ3vUoSrQ=)
14: RBkQeOg-cgnPNjuK2cCJOQuYiHA.roa (hash: 2lb1scbNaCJBrzBBGo6DCjWa1PrAoi+G5fKlUn8AhFk=)
15: VrA43_lENWCEq5e-EJkTnsrrads.roa (hash: 7iv9/Y9JLmuanA9gvQkMgB5xXNxOffJsR8spN772f4Q=)
16: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=)
17: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=)
18: d4I51w20scF0qqj486GiV-nYoLE.roa (hash: BmIi2OiasNN95IJMu0tNLgXYd8MOoQKfmXcF14LcfbE=)
19: dwxVTJjwRdmFY55JH2yvjXmSVts.roa (hash: Lh23QBiX92su9UHZMQr+EOFIPCcgDPrhS+6BAN9DBAs=)
20: kA6CHPfPdas7hoxpTjyG1FQEu_U.roa (hash: URBA5QHXvsO4eLiy7HZHrf75n0PShSo0ZJWH9NZIu7o=)
21: oIZkbFh2rYt3XpJYVYkOZH0cDdI.roa (hash: ij/8lRqxAhYsxBCOQ9wLcin0JCfdPrFZRBiaCoTZFyA=)
22: rBrLXTtbaFpNMmdOZ1lQtzIs3_Y.roa (hash: BVyl3ZvtBKgJmC3ItVuKwD6mSCVRNqNBYJIW8AiZkl8=)
23: s3JX7MMd2F6H8sckTYHSRvimPE8.roa (hash: HEFhP2d7tonS6fNCUG/BahZ2ttIC+7YOH25ofTG5Rts=)
24: tX83MalTXdxiqqKD5-CvMXvUHYE.roa (hash: EiFCgDrZs5g5FClYohDKlMNZ76a5Sc2a32RqLnVgonw=)
25: taeDw9RW8HvsYXrOqqTDJ80VR30.roa (hash: 1W3/AMRkO5ZrM8JjZnDlNP0Qz3/F1UlCB8epuYiTNf0=)
26: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (hash: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=)
27: xzw-iLYE7PjgPRA3s0J5ta4vgGk.roa (hash: 8fNNUayk9xaDv3BqHb5aWmhN0EnRv3IhyFiUJxPH5r0=)
28: yGxT3VcI2quR0RtOu-KHmgw_iSI.roa (hash: 7U61WOOnhm7TQXCYjDcXX/K3dVnujrxrS89EhpP1ZcQ=)
29: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:e4:73:14:32:bd:78:27:17:c2:fe:29:20:bb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Nov 5 11:00:30 2025 GMT
Not After : Nov 6 11:00:30 2025 GMT
Subject: CN=9124be430d1ea62ff718ec6678605b8a5db6a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:c6:3f:1c:7b:0e:33:04:a8:9b:a9:0d:0b:
41:8c:f6:ff:76:32:bc:9b:86:78:25:24:69:ed:28:
62:a1:3e:17:d8:f5:25:f3:5c:7d:a3:80:28:c9:d8:
fb:3a:cd:31:c0:ff:a3:8d:f9:d4:3d:93:c6:5a:47:
9e:ec:81:7b:c6:fd:4c:77:63:d2:d2:79:1b:28:c4:
19:ff:92:bc:1c:07:4a:1c:b7:60:a1:a6:73:e0:b2:
93:33:ef:42:91:50:de:a1:ea:67:73:4e:01:04:94:
41:45:de:e8:64:36:9f:f4:18:8b:78:39:81:34:96:
ca:ec:1b:2d:e2:b7:ec:a8:f9:e9:82:7f:5c:91:d4:
25:b9:33:46:22:6e:c6:d6:64:cf:b4:72:f1:99:1c:
d5:38:96:20:35:0c:6d:4f:6f:ff:d0:4e:a5:e1:c9:
5d:63:9d:32:83:dc:f4:3b:cc:20:f2:70:c5:b6:69:
09:a2:02:9b:e4:c8:f2:af:de:81:a0:55:c9:40:09:
f5:95:65:e5:a3:a5:98:bf:51:5c:8c:11:f9:48:8c:
55:64:e5:de:20:c1:9a:c8:53:e5:cf:62:9f:08:ef:
60:22:8a:76:b6:2c:a1:e6:99:2e:87:a0:16:80:cb:
7b:95:95:99:b7:d8:b3:d0:5a:da:40:89:31:79:3c:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:24:BE:43:0D:1E:A6:2F:F7:18:EC:66:78:60:5B:8A:5D:B6:A4:89
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:ea:56:6b:06:a5:08:b4:7a:5c:67:32:73:52:58:a3:c1:
7b:3e:b5:f6:d6:f3:eb:d9:fa:6b:9b:79:24:8a:fc:6e:c0:89:
cb:ac:e2:93:4e:2e:36:cc:f1:32:93:3b:9f:55:e5:27:54:ea:
61:cf:81:c1:e1:ec:db:b7:21:11:33:ef:46:e3:34:cf:67:0b:
f9:a6:e5:c0:5d:57:80:07:33:4a:f1:d7:2f:b8:f4:d9:e6:8f:
0f:82:44:cb:7e:a3:2b:f2:b9:57:8e:02:73:15:da:4c:c9:15:
fd:3c:bf:27:37:58:29:4f:5e:40:e8:7b:b7:cd:37:30:51:e7:
cf:fb:74:2f:64:f5:08:32:de:a4:db:b0:bc:8f:58:53:06:ac:
01:b5:0f:14:72:d0:b2:b6:62:14:30:29:df:26:d1:ee:a4:06:
06:66:a0:cc:2a:77:ec:e0:42:cb:e0:a1:73:e0:82:d8:e0:99:
48:ba:c5:ae:1f:1e:99:9a:b5:8a:11:0d:69:af:a8:52:94:aa:
0c:6d:40:de:eb:db:3b:20:ae:48:5d:f6:31:ce:bc:f4:a3:d3:
7b:0d:9b:5d:c3:15:5c:2f:85:a7:26:95:97:34:bd:48:ca:30:
ed:ad:04:47:91:69:db:33:4a:97:92:4e:f8:d7:50:60:89:25:
55:f8:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:58:31 2025 by rpki-client