Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: SvW74o3oly5bqsvD3H9qPX+htBwP2V8m8PI1NOgi7jE=
Subject key identifier: 36:08:66:10:07:A1:F5:35:11:0B:02:B7:8F:29:9E:19:F0:8D:37:5A
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019A2409F51BF91F2236EC2FAC3A909E6BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1706
Signing time: Mon 27 Oct 2025 05:00:23 +0000
Manifest this update: Mon 27 Oct 2025 05:00:23 +0000
Manifest next update: Tue 28 Oct 2025 05:00:23 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: TQh0gMwc5Hku+he+UVsyBud0Es++98jzmqrT4vrlLKw=)
2: MNlQF5nG0eeT7QS_s8UJC2BbGl4.roa (hash: msf9qspTIOl4MPPSDjXBam+bCbkt7kvUjAGSdIfDP0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:f5:1b:f9:1f:22:36:ec:2f:ac:3a:90:9e:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Oct 27 05:00:23 2025 GMT
Not After : Oct 28 05:00:23 2025 GMT
Subject: CN=3608661007a1f535110b02b78f299e19f08d375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:1e:22:e7:94:d3:d1:77:2e:67:5f:e7:6b:
cc:09:13:c3:0d:d6:3b:d5:48:de:c2:75:55:54:9a:
51:88:7c:39:49:5d:3c:57:0d:5b:ba:d3:da:56:52:
1b:fd:e6:93:ef:81:5f:d3:c0:25:a5:09:a7:22:f5:
ab:5a:10:2e:4d:26:bf:35:60:32:24:f4:58:09:ba:
8d:ce:23:c4:06:a2:d2:7d:3e:29:16:58:e9:69:63:
ea:f4:2e:54:c2:47:c1:6d:ca:71:ca:a7:be:97:c2:
37:a5:05:b0:93:10:35:94:ac:a2:f4:5c:25:7d:d7:
f8:23:77:04:58:7c:2a:10:d2:28:81:1b:71:b1:79:
cb:d7:3c:d3:77:b3:02:92:01:7b:8b:12:66:bd:84:
c5:98:b6:cb:85:21:73:54:27:40:f0:6b:9f:1b:17:
eb:4f:a9:03:27:ff:ae:9f:54:06:c3:8c:48:16:81:
d1:01:42:0a:58:fd:9d:be:94:15:92:7b:3f:12:3a:
52:4a:1d:bd:a8:f9:93:f6:b6:64:7d:3f:17:bb:36:
41:56:dd:05:b9:64:fd:cf:29:05:e6:4c:cc:17:3d:
e3:b8:ec:65:2d:e0:bf:ff:7c:b1:a6:07:65:54:a9:
9e:ec:7e:00:8e:98:bf:3e:d1:f5:a1:8e:8c:91:12:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:66:10:07:A1:F5:35:11:0B:02:B7:8F:29:9E:19:F0:8D:37:5A
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:75:3f:c0:f7:47:c5:b7:79:01:7f:6d:96:d1:4e:d9:ab:
5b:fa:3e:3c:43:67:7e:7d:17:7d:e9:89:8f:1f:66:ba:0d:a3:
24:62:23:95:02:4e:94:2e:49:e7:46:17:90:2d:c2:7b:1d:83:
9a:15:eb:ea:a2:e6:b3:5e:25:42:4b:e0:13:20:de:e4:54:2b:
24:01:8a:45:aa:43:72:f4:82:35:5e:48:28:b2:e8:e5:2f:62:
c7:d6:6b:94:1d:94:1f:56:e3:03:04:60:d8:78:44:6c:f1:2e:
f8:15:c1:7f:71:2c:2d:c4:42:ee:fb:67:39:fe:38:9f:96:66:
11:76:ae:17:03:50:02:bf:07:7a:ab:c8:92:8b:e3:76:d7:3b:
ae:ea:a0:c5:9f:81:0c:01:af:b8:37:79:53:2c:cb:e0:64:5a:
65:6d:89:01:4e:c7:da:c0:95:61:9e:4d:d7:60:45:ad:59:0b:
a6:b8:c9:73:7f:26:4a:1c:75:93:96:82:ff:c7:12:cb:6d:94:
31:c6:83:76:48:48:af:44:d8:94:70:a5:a5:59:04:2b:6e:64:
56:d2:f5:07:f8:44:0c:bc:3d:43:e1:0c:01:6b:48:ba:78:24:
91:90:56:53:40:a1:54:40:45:7c:e7:02:68:e5:7b:f0:66:bb:
0d:8a:ae:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokCfUb+R8iNuwvrDqQnmvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx
MzJjNDgwHhcNMjUxMDI3MDUwMDIzWhcNMjUxMDI4MDUwMDIzWjAzMTEwLwYDVQQD
EygzNjA4NjYxMDA3YTFmNTM1MTEwYjAyYjc4ZjI5OWUxOWYwOGQzNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMeIueU09F3Lmdf52vMCRPDDdY7
1UjewnVVVJpRiHw5SV08Vw1butPaVlIb/eaT74Ff08AlpQmnIvWrWhAuTSa/NWAy
JPRYCbqNziPEBqLSfT4pFljpaWPq9C5UwkfBbcpxyqe+l8I3pQWwkxA1lKyi9Fwl
fdf4I3cEWHwqENIogRtxsXnL1zzTd7MCkgF7ixJmvYTFmLbLhSFzVCdA8GufGxfr
T6kDJ/+un1QGw4xIFoHRAUIKWP2dvpQVkns/EjpSSh29qPmT9rZkfT8XuzZBVt0F
uWT9zykF5kzMFz3juOxlLeC//3yxpgdlVKme7H4Ajpi/PtH1oY6MkRLdIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYIZhAHofU1EQsCt48pnhnwjTdaMB8GA1UdIwQY
MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt
MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0
LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrl1P8D3
R8W3eQF/bZbRTtmrW/o+PENnfn0XfemJjx9mug2jJGIjlQJOlC5J50YXkC3Cex2D
mhXr6qLms14lQkvgEyDe5FQrJAGKRapDcvSCNV5IKLLo5S9ix9ZrlB2UH1bjAwRg
2HhEbPEu+BXBf3EsLcRC7vtnOf44n5ZmEXauFwNQAr8HeqvIkovjdtc7ruqgxZ+B
DAGvuDd5UyzL4GRaZW2JAU7H2sCVYZ5N12BFrVkLprjJc38mShx1k5aC/8cSy22U
McaDdkhIr0TYlHClpVkEK25kVtL1B/hEDLw9Q+EMAWtIungkkZBWU0ChVEBFfOcC
aOV78Ga7DYquew==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:04:19 2025 by rpki-client