Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: 4m3+u1WtkdzVXf/guA1MmPCKWMrUveVe3zChf3LpJts=
Subject key identifier: AD:AC:9A:A5:3B:AC:F0:11:47:F1:45:42:8C:8B:22:93:A6:4D:66:53
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 019A1A61F2BF8D8A46773411AFB606DBF016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 08:00:17 +0000
Manifest this update: Sat 25 Oct 2025 08:00:17 +0000
Manifest next update: Sun 26 Oct 2025 08:00:17 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: b0TmBq+A6Sjx44/0xDcpyLPqSyJ1JXDulcDfcc3jhrk=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:f2:bf:8d:8a:46:77:34:11:af:b6:06:db:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Oct 25 08:00:17 2025 GMT
Not After : Oct 26 08:00:17 2025 GMT
Subject: CN=adac9aa53bacf01147f145428c8b2293a64d6653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:25:80:0d:90:21:5c:5c:2c:91:3f:47:86:
79:12:27:25:e7:86:a6:af:f2:42:99:9d:e1:0b:87:
f1:c4:27:81:61:c0:59:36:f6:74:9e:33:9e:60:ec:
31:f3:5a:6c:d3:54:11:0e:e8:b8:98:70:da:99:8f:
ac:cd:89:23:40:1a:60:aa:33:ae:f6:38:1c:c7:ea:
f4:ba:6c:ab:f1:b4:63:f2:79:61:4f:43:be:4c:57:
e3:a8:87:b8:16:9a:bd:bf:17:d0:63:f4:fb:5e:fc:
0d:4e:72:b2:36:f0:be:9b:4d:a5:34:67:42:90:4e:
c9:35:ff:78:ec:87:48:98:ab:75:e6:51:5f:cd:8b:
fb:36:ed:e8:01:c9:39:0c:10:9a:d1:93:95:9b:8e:
72:8c:eb:aa:b2:46:10:b6:66:c1:c9:3f:65:68:8d:
eb:b2:7b:45:27:b1:e5:b2:24:d6:f7:86:6a:b4:01:
c4:d7:81:37:3d:a0:21:69:76:00:14:75:3b:14:92:
fd:06:8e:31:14:ae:d9:14:b5:bf:3c:83:f6:aa:73:
d1:8d:e2:7e:f2:c6:1b:4f:4b:84:6f:32:24:7f:b9:
19:7b:30:3b:99:33:c4:e0:42:7c:97:1f:cc:6d:42:
c9:bf:f2:88:da:66:5b:d5:f7:86:eb:be:fc:a0:3b:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:9A:A5:3B:AC:F0:11:47:F1:45:42:8C:8B:22:93:A6:4D:66:53
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:fc:e7:4a:63:8a:c3:46:f4:b2:18:a1:22:25:ea:8f:51:
f0:f6:8f:7c:d0:76:ad:0f:a5:3b:60:c0:d9:d7:e2:a0:fc:34:
12:30:a8:42:b3:bc:e7:32:06:48:db:12:c0:ab:2e:80:f9:c9:
b9:9f:68:d7:f1:a6:09:4d:73:10:98:21:4f:58:b7:44:bc:f1:
81:74:41:97:c4:5d:b7:fc:8f:07:d5:5e:ce:50:07:8b:72:e3:
6a:e7:b3:aa:ad:b9:70:90:fc:7c:10:bb:78:53:6b:b0:71:66:
46:93:3c:9f:12:c5:9b:63:29:fe:47:11:7b:fe:73:6c:42:d3:
ff:fd:2e:4d:12:91:56:2f:64:c7:a4:21:92:45:3a:8c:d0:d2:
39:e2:2b:dc:f4:8a:ed:bb:b2:d6:24:27:b3:c7:a1:d0:5a:d4:
57:0a:c6:1a:c1:04:37:80:0f:3d:ab:3d:62:c7:6e:82:eb:1a:
89:89:0c:08:e7:3e:47:73:29:62:88:7c:73:92:18:21:f2:3d:
69:f8:f1:d5:dc:bc:41:e7:38:a0:cd:5a:70:03:e2:c2:dd:54:
e0:c7:ec:fd:59:db:b1:84:b4:99:5a:4a:31:6e:ec:f2:74:3a:
63:53:db:62:0a:9e:79:f4:77:d2:97:f0:3b:09:d8:a5:14:9a:
48:26:81:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaYfK/jYpGdzQRr7YG2/AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk
ODUyMGUwHhcNMjUxMDI1MDgwMDE3WhcNMjUxMDI2MDgwMDE3WjAzMTEwLwYDVQQD
EyhhZGFjOWFhNTNiYWNmMDExNDdmMTQ1NDI4YzhiMjI5M2E2NGQ2NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ewlgA2QIVxcLJE/R4Z5Eicl54am
r/JCmZ3hC4fxxCeBYcBZNvZ0njOeYOwx81ps01QRDui4mHDamY+szYkjQBpgqjOu
9jgcx+r0umyr8bRj8nlhT0O+TFfjqIe4Fpq9vxfQY/T7XvwNTnKyNvC+m02lNGdC
kE7JNf947IdImKt15lFfzYv7Nu3oAck5DBCa0ZOVm45yjOuqskYQtmbByT9laI3r
sntFJ7HlsiTW94ZqtAHE14E3PaAhaXYAFHU7FJL9Bo4xFK7ZFLW/PIP2qnPRjeJ+
8sYbT0uEbzIkf7kZezA7mTPE4EJ8lx/MbULJv/KI2mZb1feG6778oDvQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2smqU7rPARR/FFQoyLIpOmTWZTMB8GA1UdIwQY
MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt
OGNkNDJjZWRlMjIwLzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw
LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq7850pj
isNG9LIYoSIl6o9R8PaPfNB2rQ+lO2DA2dfioPw0EjCoQrO85zIGSNsSwKsugPnJ
uZ9o1/GmCU1zEJghT1i3RLzxgXRBl8Rdt/yPB9VezlAHi3Ljauezqq25cJD8fBC7
eFNrsHFmRpM8nxLFm2Mp/kcRe/5zbELT//0uTRKRVi9kx6QhkkU6jNDSOeIr3PSK
7buy1iQns8eh0FrUVwrGGsEEN4APPas9YsdugusaiYkMCOc+R3MpYoh8c5IYIfI9
afjx1dy8Qec4oM1acAPiwt1U4Mfs/VnbsYS0mVpKMW7s8nQ6Y1PbYgqeefR30pfw
OwnYpRSaSCaBDg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:38 2025 by rpki-client