Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: OvBQrRKr+rELDe1zfajGAtNEWdiQKjMcnvQ9sm4PPR4=
Subject key identifier: 09:DC:11:95:18:33:5B:AD:08:B0:1D:D0:43:C1:53:82:7D:7F:07:A6
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019A7112B9916444575F0B699A5091485720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: BFVQI4bE339SXeCJzj451xPUo6Tl8vYo09MQ7WPm7RE=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b9:91:64:44:57:5f:0b:69:9a:50:91:48:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=09dc119518335bad08b01dd043c153827d7f07a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:cf:47:01:3f:9f:6a:3c:36:43:14:66:49:
ad:e5:77:80:15:7d:52:49:d3:0a:fe:cd:7c:52:26:
69:56:cd:a0:fd:27:4c:31:f2:1e:58:ca:73:2d:74:
e0:5b:25:6c:16:b9:ae:4f:ab:bf:dd:dd:e5:ba:fe:
a3:2d:1d:e3:a7:f4:c7:a6:e6:ab:61:f3:be:44:af:
4e:f7:4b:f0:3e:74:be:98:9c:e4:d3:fe:a0:a9:1f:
b2:cf:d9:41:f3:42:e0:53:80:95:6f:5c:ed:74:ad:
73:c6:1b:d1:96:5c:e9:13:ee:5f:b6:6e:54:4d:d3:
86:b5:7a:d2:ac:7a:70:8a:a5:67:92:ba:bd:5c:3a:
6f:d4:92:14:18:3a:94:40:fd:23:61:29:a5:4e:1a:
72:ed:d0:1b:01:01:89:c2:a1:07:cb:be:ef:03:d7:
db:3d:3b:55:43:16:64:ff:7b:58:1f:d4:82:fd:1e:
2a:7a:1c:8d:76:36:9f:6d:ff:5d:7c:b5:aa:4e:ea:
66:9a:f5:28:0b:7f:3d:26:a6:76:f7:1f:ec:6d:0b:
9a:e5:37:45:12:12:84:34:c9:65:8f:f4:bb:4f:80:
08:69:c0:49:f5:1d:fb:4d:3d:bc:f4:7a:e4:51:f4:
51:18:14:1e:33:ea:82:c4:6d:f9:6a:33:56:eb:87:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:11:95:18:33:5B:AD:08:B0:1D:D0:43:C1:53:82:7D:7F:07:A6
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ea:b3:11:1e:80:ac:31:d6:24:1f:cb:66:d7:14:41:c9:a3:
2d:8f:37:7a:5b:0b:1b:fc:0b:5b:c8:92:22:dd:5d:85:5f:72:
64:50:ee:26:03:32:35:1f:4d:cf:0f:37:3b:22:f6:cf:2c:9a:
ba:61:8e:73:54:1a:31:d9:24:6b:63:5b:95:6e:79:12:e4:c6:
9a:b4:de:79:dd:29:be:05:1b:c1:aa:04:b4:3b:f7:56:cc:32:
1b:7b:ea:48:84:02:22:d2:10:fd:17:b8:ad:9c:92:32:23:0a:
bb:48:0d:9e:23:ce:77:41:c7:fa:44:ed:dc:b5:e0:b1:f2:89:
c6:32:68:6b:d0:ef:27:d7:94:fa:58:da:85:ab:62:13:6c:56:
88:99:20:51:0e:31:04:3b:20:c7:ab:5b:02:19:da:f5:4e:9e:
fa:89:63:fe:3e:10:11:3f:dd:cc:1f:00:8f:d3:19:46:87:b0:
43:a0:41:4f:a9:1c:e5:a5:49:98:7c:23:ce:c0:1b:c6:83:8e:
23:be:99:59:03:13:45:5d:28:6f:c1:e9:20:83:d9:33:6d:dd:
f1:c6:32:61:9e:b3:7d:51:b9:b7:a2:c8:ee:2e:fe:52:b5:ec:
7d:e8:d5:69:3e:b1:c2:9c:e0:83:61:1c:90:00:fb:66:16:1c:
06:8e:16:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErmRZERXXwtpmlCRSFcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw
NmM2NzkwHhcNMjUxMTExMDQwMDQzWhcNMjUxMTEyMDQwMDQzWjAzMTEwLwYDVQQD
EygwOWRjMTE5NTE4MzM1YmFkMDhiMDFkZDA0M2MxNTM4MjdkN2YwN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfDPRwE/n2o8NkMUZkmt5XeAFX1S
SdMK/s18UiZpVs2g/SdMMfIeWMpzLXTgWyVsFrmuT6u/3d3luv6jLR3jp/THpuar
YfO+RK9O90vwPnS+mJzk0/6gqR+yz9lB80LgU4CVb1ztdK1zxhvRllzpE+5ftm5U
TdOGtXrSrHpwiqVnkrq9XDpv1JIUGDqUQP0jYSmlThpy7dAbAQGJwqEHy77vA9fb
PTtVQxZk/3tYH9SC/R4qehyNdjafbf9dfLWqTupmmvUoC389JqZ29x/sbQua5TdF
EhKENMllj/S7T4AIacBJ9R37TT289HrkUfRRGBQeM+qCxG35ajNW64cj6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAncEZUYM1utCLAd0EPBU4J9fwemMB8GA1UdIwQY
MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt
ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl
LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+qzER6A
rDHWJB/LZtcUQcmjLY83elsLG/wLW8iSIt1dhV9yZFDuJgMyNR9Nzw83OyL2zyya
umGOc1QaMdkka2NblW55EuTGmrTeed0pvgUbwaoEtDv3VswyG3vqSIQCItIQ/Re4
rZySMiMKu0gNniPOd0HH+kTt3LXgsfKJxjJoa9DvJ9eU+ljahatiE2xWiJkgUQ4x
BDsgx6tbAhna9U6e+olj/j4QET/dzB8Aj9MZRoewQ6BBT6kc5aVJmHwjzsAbxoOO
I76ZWQMTRV0ob8HpIIPZM23d8cYyYZ6zfVG5t6LI7i7+UrXsfejVaT6xwpzgg2Ec
kAD7ZhYcBo4Wbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client