Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: h+DcJhxDqAQiyZY9DboRIFkxYo3B4zW1LAksXuEmwk0=
Subject key identifier: C4:62:17:EE:34:4F:02:5E:32:45:B8:A9:4E:B1:98:43:6C:E3:E6:D8
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 019A71EEC8EAB04670396B9DFC2CEE992974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: oG8aIFxITTydBJARZQxzbBoK2mbjVZAp55LrfFZftWk=)
2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c8:ea:b0:46:70:39:6b:9d:fc:2c:ee:99:29:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=c46217ee344f025e3245b8a94eb198436ce3e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:f7:b6:78:cc:b4:a1:ea:fc:1d:bb:bd:3d:
5c:dc:f7:b1:b5:08:4b:27:5e:87:a2:24:c3:dc:85:
e6:19:50:ea:e5:40:37:a2:c7:64:0f:3a:bf:9d:d4:
e5:c9:d6:c6:7f:78:3f:31:a4:7a:37:75:51:2e:19:
36:c2:93:df:d5:49:41:55:c3:94:e8:75:27:88:a5:
c2:8f:14:2a:09:ea:ba:45:e2:da:05:53:03:45:a6:
e7:89:94:39:ff:49:d7:23:bd:a7:1e:ac:67:cc:2b:
52:32:b3:13:b5:58:24:f5:6c:b5:0b:bf:44:be:9b:
72:96:73:d2:74:2d:46:cc:5d:1b:31:22:8d:ae:77:
a2:b1:22:5d:70:7c:e6:87:38:c0:9f:fc:85:38:85:
17:1a:9f:0c:a1:86:87:87:35:e6:54:0d:6f:1e:2c:
6d:9b:0b:64:5d:52:09:b4:89:b6:e6:c0:a8:f9:81:
63:e1:91:f9:d1:28:61:98:50:cf:9c:2b:33:f1:73:
e8:1d:e0:04:22:ff:cb:b3:a4:ee:58:17:8e:41:4b:
e0:0d:17:f9:03:ae:50:a2:1b:bb:37:a4:3c:36:7d:
28:36:8a:26:16:f0:ae:dd:e7:98:33:7a:ba:dc:9a:
cc:af:5b:da:9e:57:36:97:0a:98:a1:07:79:2d:74:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:17:EE:34:4F:02:5E:32:45:B8:A9:4E:B1:98:43:6C:E3:E6:D8
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e5:35:63:b8:68:78:7b:31:ab:71:2f:91:44:5f:df:29:79:
bf:69:81:be:0c:14:0e:47:fa:77:d2:92:4d:45:d3:d1:cc:4c:
b7:e2:ef:cd:19:ed:83:e1:2a:3c:fb:be:90:c3:2d:ea:22:f7:
31:d4:bc:d6:33:fa:2b:04:86:1a:cc:3d:d7:93:4a:2c:42:05:
bb:87:35:52:73:ec:b2:db:00:12:a6:1e:e8:49:b0:99:57:bc:
c4:c8:b2:91:d6:dc:b8:93:d5:7e:47:a6:09:c6:71:a6:fd:fa:
b8:48:8b:69:44:01:ec:a0:69:f4:33:a9:9d:b7:7f:99:22:0d:
29:56:c4:da:01:01:02:09:5b:4e:6d:54:fe:7d:0f:12:1b:16:
44:59:4e:e6:ea:06:e7:c7:d2:34:0f:ee:d7:ad:2b:23:62:4d:
80:c7:63:0b:65:15:f0:09:3d:6e:5c:cb:10:0b:28:29:6b:f2:
2b:aa:43:20:ed:73:ce:29:bb:ad:92:7f:55:50:82:c1:e4:cb:
7c:61:d3:18:30:08:0a:d8:65:99:70:18:10:dc:b1:a3:d4:28:
7f:12:6d:33:81:c2:11:ea:0b:51:5e:9e:a8:8d:f1:8c:30:e2:
b2:e1:8e:a1:39:73:39:3f:e6:86:26:9d:fe:ba:e4:dd:43:3e:
9c:ed:d1:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sjqsEZwOWud/CzumSl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTlkMGJjMDQ0Y2RhYTIzNDE4MDlkMDAwZjBmYzRlMWRl
ZGIzNDUwHhcNMjUxMTExMDgwMTA1WhcNMjUxMTEyMDgwMTA1WjAzMTEwLwYDVQQD
EyhjNDYyMTdlZTM0NGYwMjVlMzI0NWI4YTk0ZWIxOTg0MzZjZTNlNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a33tnjMtKHq/B27vT1c3PextQhL
J16HoiTD3IXmGVDq5UA3osdkDzq/ndTlydbGf3g/MaR6N3VRLhk2wpPf1UlBVcOU
6HUniKXCjxQqCeq6ReLaBVMDRabniZQ5/0nXI72nHqxnzCtSMrMTtVgk9Wy1C79E
vptylnPSdC1GzF0bMSKNrneisSJdcHzmhzjAn/yFOIUXGp8MoYaHhzXmVA1vHixt
mwtkXVIJtIm25sCo+YFj4ZH50ShhmFDPnCsz8XPoHeAEIv/Ls6TuWBeOQUvgDRf5
A65Qohu7N6Q8Nn0oNoomFvCu3eeYM3q63JrMr1vanlc2lwqYoQd5LXRBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRiF+40TwJeMkW4qU6xmENs4+bYMB8GA1UdIwQY
MBaAFBcZ0LwETNqiNBgJ0ADw/E4d7bNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUt
MDRhYzBhNWU4MTQzLzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUtMDRhYzBhNWU4MTQz
LzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOU1Y7ho
eHsxq3EvkURf3yl5v2mBvgwUDkf6d9KSTUXT0cxMt+LvzRntg+EqPPu+kMMt6iL3
MdS81jP6KwSGGsw915NKLEIFu4c1UnPsstsAEqYe6EmwmVe8xMiykdbcuJPVfkem
CcZxpv36uEiLaUQB7KBp9DOpnbd/mSINKVbE2gEBAglbTm1U/n0PEhsWRFlO5uoG
58fSNA/u160rI2JNgMdjC2UV8Ak9blzLEAsoKWvyK6pDIO1zzim7rZJ/VVCCweTL
fGHTGDAICthlmXAYENyxo9QofxJtM4HCEeoLUV6eqI3xjDDisuGOoTlzOT/mhiad
/rrk3UM+nO3RKQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client