Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: fcQ+lBzT/UuJUwHB5qx7LxYi3XOF+SJ5L4YY/vZtJ74=
Subject key identifier: 67:E7:CD:1B:AA:63:54:23:27:9D:6B:6E:75:70:7E:9C:E3:79:70:E7
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019A5D8BDC76B36C34D1210F1108F03C425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 16FB
Signing time: Fri 07 Nov 2025 09:00:38 +0000
Manifest this update: Fri 07 Nov 2025 09:00:38 +0000
Manifest next update: Sat 08 Nov 2025 09:00:38 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: xZ0FaH59BGm+aK/pJoxAKWciZmzPtVtTZDdQDeEscBY=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:8b:dc:76:b3:6c:34:d1:21:0f:11:08:f0:3c:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Nov 7 09:00:38 2025 GMT
Not After : Nov 8 09:00:38 2025 GMT
Subject: CN=67e7cd1baa635423279d6b6e75707e9ce37970e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:fd:7e:38:54:b9:03:b2:5c:2c:c4:9f:92:
38:4d:ed:24:88:d4:5f:11:b4:3e:89:d5:bb:da:5b:
36:46:09:24:13:46:e8:b0:fc:82:ab:8c:fa:9b:dc:
d6:78:ae:72:7a:9d:06:38:8d:10:8c:b4:ab:53:08:
51:da:86:c5:37:ba:b8:9e:93:97:e7:bd:27:7b:db:
29:f7:fb:99:c9:3f:b6:b2:48:44:57:e9:2d:d4:d3:
5f:81:dc:05:16:f1:7f:eb:9a:7c:ec:32:b5:39:2d:
20:45:c6:e3:6a:58:68:72:f7:06:b9:91:ee:16:8a:
51:a3:ff:e6:ca:1e:2b:12:4f:6b:da:c5:27:74:b8:
e0:8e:34:44:a7:18:c7:8d:66:3b:c8:6b:ae:74:b1:
61:a1:8f:53:3d:bc:a8:2d:7f:ec:60:d6:7e:e3:11:
09:2e:2f:a8:a8:76:3c:6d:ce:52:6a:55:22:68:c2:
62:20:96:16:d4:db:b2:f5:65:83:de:6f:cd:14:b1:
c2:2b:a3:74:ca:bd:c0:e7:a0:5a:d3:2d:0b:99:d8:
55:48:1a:94:e6:e4:43:2a:c3:0e:fd:0e:3a:24:aa:
51:96:b6:e8:71:d4:36:41:34:72:6e:35:b2:8b:de:
3a:85:7d:6a:0e:80:74:a8:a1:48:f8:b3:0e:21:aa:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:CD:1B:AA:63:54:23:27:9D:6B:6E:75:70:7E:9C:E3:79:70:E7
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b2:da:25:fb:e4:ae:b9:b0:c7:bf:2a:e7:93:d1:3b:4c:ec:
50:e9:71:ca:d6:ca:d6:19:da:2a:23:8b:9f:56:99:4e:41:d1:
26:21:1a:26:85:fe:1b:d2:d8:28:4b:b2:50:e2:6e:d9:f0:b7:
f5:51:26:b9:4e:9a:01:8c:96:14:13:86:9a:0d:2f:cd:82:71:
02:e6:00:d9:5b:f6:98:99:25:f5:ee:48:5b:d4:90:df:90:c7:
9b:8e:98:1a:90:a6:fc:69:b1:6a:cc:a7:bb:6e:6a:81:6c:47:
56:d9:ee:bb:8d:ad:11:98:59:40:9b:24:bb:f1:3f:f3:5b:36:
13:2f:20:01:e8:cf:53:c9:fb:0d:2f:bf:4a:9e:cc:ba:a4:ce:
8c:7b:9e:33:97:80:c6:25:ab:65:8c:1a:77:8f:a8:1a:e9:a6:
28:07:05:c1:26:27:60:e4:fe:bf:75:8f:de:6a:bf:c3:4b:e6:
ca:ac:da:8a:6e:15:f7:b5:7a:a0:81:da:72:70:48:bc:6f:ff:
ad:fe:37:08:1f:be:a9:81:71:2a:dc:86:5f:b3:48:aa:5a:45:
3a:9b:71:88:c6:d0:3a:ad:f9:32:75:05:5f:d3:52:e7:d1:3f:
f5:b4:a6:26:68:b8:84:f0:f3:a6:c4:e0:e0:a8:aa:69:6b:62:
17:b8:0b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdi9x2s2w00SEPEQjwPEJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk
YjZjZTcwHhcNMjUxMTA3MDkwMDM4WhcNMjUxMTA4MDkwMDM4WjAzMTEwLwYDVQQD
Eyg2N2U3Y2QxYmFhNjM1NDIzMjc5ZDZiNmU3NTcwN2U5Y2UzNzk3MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+39fjhUuQOyXCzEn5I4Te0kiNRf
EbQ+idW72ls2RgkkE0bosPyCq4z6m9zWeK5yep0GOI0QjLSrUwhR2obFN7q4npOX
570ne9sp9/uZyT+2skhEV+kt1NNfgdwFFvF/65p87DK1OS0gRcbjalhocvcGuZHu
FopRo//myh4rEk9r2sUndLjgjjREpxjHjWY7yGuudLFhoY9TPbyoLX/sYNZ+4xEJ
Li+oqHY8bc5SalUiaMJiIJYW1Nuy9WWD3m/NFLHCK6N0yr3A56Ba0y0LmdhVSBqU
5uRDKsMO/Q46JKpRlrbocdQ2QTRybjWyi946hX1qDoB0qKFI+LMOIartSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfnzRuqY1QjJ51rbnVwfpzjeXDnMB8GA1UdIwQY
MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt
ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz
LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbLaJfvk
rrmwx78q55PRO0zsUOlxytbK1hnaKiOLn1aZTkHRJiEaJoX+G9LYKEuyUOJu2fC3
9VEmuU6aAYyWFBOGmg0vzYJxAuYA2Vv2mJkl9e5IW9SQ35DHm46YGpCm/Gmxasyn
u25qgWxHVtnuu42tEZhZQJsku/E/81s2Ey8gAejPU8n7DS+/Sp7MuqTOjHueM5eA
xiWrZYwad4+oGummKAcFwSYnYOT+v3WP3mq/w0vmyqzaim4V97V6oIHacnBIvG//
rf43CB++qYFxKtyGX7NIqlpFOptxiMbQOq35MnUFX9NS59E/9bSmJmi4hPDzpsTg
4KiqaWtiF7gL8w==
-----END CERTIFICATE-----
Generated at Fri Nov 7 13:40:59 2025 by rpki-client