Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: hbAUG9qiOhaI6ouKwkW9BcXwuMyY0HtGMKZmrNWUuow=
Subject key identifier: 70:16:AF:6F:57:D8:6E:15:43:0F:83:23:75:C9:6E:2A:B9:EA:9C:D5
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019A232DEC8994854CABFE16A802DD471B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 01:00:03 +0000
Manifest this update: Mon 27 Oct 2025 01:00:03 +0000
Manifest next update: Tue 28 Oct 2025 01:00:03 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: BOwEzj0fEGWqhiYdZxi5UZlsudxYGwz7VbDQrw4gMfE=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2d:ec:89:94:85:4c:ab:fe:16:a8:02:dd:47:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Oct 27 01:00:03 2025 GMT
Not After : Oct 28 01:00:03 2025 GMT
Subject: CN=7016af6f57d86e15430f832375c96e2ab9ea9cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:62:80:16:a9:86:1d:27:9f:89:d2:c4:0d:
20:93:f4:4e:00:f4:84:3f:92:f6:08:e8:2b:38:c2:
01:44:eb:54:df:54:9c:78:a8:99:d9:57:73:f0:3c:
88:54:85:0a:38:95:89:bf:dd:0f:11:49:f0:f8:ca:
be:66:d9:ac:d9:ed:80:53:1c:2e:3f:cb:cf:f5:7c:
d8:ad:95:d9:d0:99:71:29:fd:19:e7:be:8d:2b:59:
e3:84:7e:76:ab:af:e0:8f:a7:cc:f6:f2:b1:e6:8d:
2c:3f:69:aa:12:31:24:74:fe:c5:c8:a9:c0:fe:a0:
d5:5d:36:73:29:10:10:9a:ae:14:7b:85:af:22:2a:
b0:db:13:97:ca:a6:53:a8:ee:0f:df:88:21:03:e5:
a8:94:c7:bb:85:12:eb:f6:03:5f:75:0b:8c:fc:23:
ae:8a:e0:6e:c3:b8:45:bc:19:3d:12:b8:07:d3:07:
02:ad:5b:1c:e8:ee:e3:49:dc:b9:3f:84:6a:f3:28:
b1:82:96:b7:dc:fa:cf:1e:94:4d:9d:de:7f:54:6d:
f6:5b:67:16:3b:cb:64:f5:82:93:14:a7:d3:d4:f2:
52:95:3a:16:b0:c5:49:b9:28:30:c7:2e:4c:e1:7c:
48:fc:e3:a3:58:6d:fa:dd:2f:e3:7e:40:ba:45:8f:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:AF:6F:57:D8:6E:15:43:0F:83:23:75:C9:6E:2A:B9:EA:9C:D5
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:49:46:d8:f9:58:17:c0:09:4b:a3:bd:b0:10:07:ec:87:
d5:f7:9e:c5:dd:fa:39:63:6d:d7:e3:bc:d2:66:65:bf:ae:85:
e0:52:c8:fe:c3:9c:f7:4b:a2:5a:75:8b:9c:0f:a7:00:00:c5:
42:52:b2:40:df:25:67:fa:5d:b7:7f:d6:ea:aa:1d:3b:26:ca:
80:e3:50:f0:3b:ff:9e:1b:88:19:8e:3f:55:60:be:c6:e5:0b:
36:3d:f4:49:8f:60:25:96:be:25:a2:64:ba:c3:49:9e:0b:c2:
9c:c8:a9:b8:c9:83:cb:ab:87:99:c1:d2:c5:52:1a:49:b2:a7:
45:55:36:0a:bb:8a:79:cb:bb:b3:88:e8:82:bf:40:f6:cd:63:
c6:20:3d:61:67:cf:74:fb:dc:97:1d:92:44:f4:7f:41:5d:8f:
c2:67:60:04:87:e8:5f:bf:59:2e:e9:8d:43:e8:ff:3b:a0:3c:
cd:7f:bf:86:2a:8f:72:60:e6:19:9a:ec:31:9e:62:79:73:1f:
9f:c3:9d:b1:26:ab:42:de:ea:69:67:ca:8f:84:a3:43:62:5d:
b9:bb:6c:0c:6c:48:79:95:63:41:5e:07:8b:ed:be:c1:d4:06:
0f:78:c3:82:53:ef:50:18:c8:91:26:13:e2:4f:a0:bb:0a:e9:
8f:de:03:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLeyJlIVMq/4WqALdRxsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw
ZDllNzMwHhcNMjUxMDI3MDEwMDAzWhcNMjUxMDI4MDEwMDAzWjAzMTEwLwYDVQQD
Eyg3MDE2YWY2ZjU3ZDg2ZTE1NDMwZjgzMjM3NWM5NmUyYWI5ZWE5Y2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvligBaphh0nn4nSxA0gk/ROAPSE
P5L2COgrOMIBROtU31SceKiZ2Vdz8DyIVIUKOJWJv90PEUnw+Mq+Ztms2e2AUxwu
P8vP9XzYrZXZ0JlxKf0Z576NK1njhH52q6/gj6fM9vKx5o0sP2mqEjEkdP7FyKnA
/qDVXTZzKRAQmq4Ue4WvIiqw2xOXyqZTqO4P34ghA+WolMe7hRLr9gNfdQuM/COu
iuBuw7hFvBk9ErgH0wcCrVsc6O7jSdy5P4Rq8yixgpa33PrPHpRNnd5/VG32W2cW
O8tk9YKTFKfT1PJSlToWsMVJuSgwxy5M4XxI/OOjWG363S/jfkC6RY+ZNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAWr29X2G4VQw+DI3XJbiq56pzVMB8GA1UdIwQY
MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt
NzQ1NGExOWQzMmQxLzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx
LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+FJRtj5
WBfACUujvbAQB+yH1feexd36OWNt1+O80mZlv66F4FLI/sOc90uiWnWLnA+nAADF
QlKyQN8lZ/pdt3/W6qodOybKgONQ8Dv/nhuIGY4/VWC+xuULNj30SY9gJZa+JaJk
usNJngvCnMipuMmDy6uHmcHSxVIaSbKnRVU2CruKecu7s4jogr9A9s1jxiA9YWfP
dPvclx2SRPR/QV2PwmdgBIfoX79ZLumNQ+j/O6A8zX+/hiqPcmDmGZrsMZ5ieXMf
n8OdsSarQt7qaWfKj4SjQ2JdubtsDGxIeZVjQV4Hi+2+wdQGD3jDglPvUBjIkSYT
4k+guwrpj94DXw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:19 2025 by rpki-client