Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: 1/hqeTJR4C7ATiOUGcdFEi4D9KTtavGmOG/jdPyxLfE=
Subject key identifier: F8:43:4F:B9:75:E8:53:6B:6D:4A:8E:3E:24:6F:9F:C3:34:4B:24:AA
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019A334627B8C4572758B8EFABE3587EFA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 0124
Signing time: Thu 30 Oct 2025 04:00:26 +0000
Manifest this update: Thu 30 Oct 2025 04:00:26 +0000
Manifest next update: Fri 31 Oct 2025 04:00:26 +0000
Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=)
2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: tG3oh2kJ7Dn/zZdI6QCkK+DYwWknC4pFrllF0EoZtUo=)
3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:27:b8:c4:57:27:58:b8:ef:ab:e3:58:7e:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Oct 30 04:00:26 2025 GMT
Not After : Oct 31 04:00:26 2025 GMT
Subject: CN=f8434fb975e8536b6d4a8e3e246f9fc3344b24aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:1c:d6:a2:97:74:e4:93:cf:a8:3e:56:c6:
9c:94:41:27:1c:b4:1f:67:58:e7:71:63:3f:92:dd:
72:58:1d:3e:93:3e:8f:c2:6a:f5:4f:c2:60:85:50:
ef:05:90:c0:5e:22:76:b0:94:20:00:e4:ad:29:44:
b8:f4:b2:64:e9:5a:60:0c:a4:39:1f:91:cf:50:50:
9f:98:0a:35:2d:fc:f6:22:9e:8f:e3:50:10:e0:e9:
26:dd:d2:ed:f3:52:f3:bb:a0:e6:26:aa:0b:f3:8b:
25:74:df:6b:3a:40:0a:ee:c4:f2:19:35:ca:a3:f8:
d5:14:fb:71:ea:b4:ad:94:d6:49:72:8f:30:55:09:
97:55:a5:69:31:2d:9f:8e:07:2e:7c:4f:bd:d5:46:
8c:ae:56:c4:4d:0d:ec:ba:17:fb:2f:37:cf:8f:5d:
0e:ce:79:8a:f6:d1:a0:36:0b:89:4f:32:c6:04:69:
b6:7e:c1:6b:05:c4:26:cd:61:2a:41:5c:ac:c4:8d:
12:9a:a8:79:0e:ee:c8:c3:57:21:90:55:df:92:74:
32:d1:51:4f:3d:74:f9:78:8f:16:d5:a5:97:8b:40:
e9:d3:36:70:07:92:26:c1:1b:38:7d:a2:3c:e6:d7:
2c:a3:f2:1a:39:5f:ae:7f:bb:89:69:b2:13:cc:34:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:4F:B9:75:E8:53:6B:6D:4A:8E:3E:24:6F:9F:C3:34:4B:24:AA
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:59:27:96:42:bd:45:a1:8b:b4:ae:2e:96:47:9d:87:9d:0a:
4a:f2:54:f3:dc:c5:77:eb:b6:72:c7:c9:39:67:2a:05:be:23:
6c:3b:17:44:91:0a:6a:57:6e:4f:9f:9d:b6:99:02:7f:37:b9:
c3:91:5e:cf:b4:25:86:2c:cb:32:3b:7e:40:ba:9c:12:02:4a:
36:40:b5:43:18:25:22:02:20:1b:75:24:33:b1:04:62:2e:8e:
ad:1d:0a:98:af:a2:a4:67:e5:ee:7e:23:f6:1f:1b:10:ac:01:
b5:20:cc:c7:a0:e9:52:1e:7b:cc:6c:ae:15:c3:2d:98:55:b7:
df:30:c9:3b:c5:2d:e4:51:9b:82:a5:95:4d:54:2a:d6:34:5d:
d4:16:5b:7d:89:a0:a2:06:44:df:37:1b:c4:be:97:22:4f:c3:
07:36:74:f1:42:3e:53:63:99:4c:e2:19:fa:fd:13:db:7c:82:
35:06:a5:32:fa:22:b2:ed:59:0f:e8:da:d2:25:63:4a:89:26:
23:46:38:22:e7:50:60:e4:7f:94:f0:6d:27:6f:e8:70:c3:f5:
6f:f4:d4:a3:a9:99:c5:bf:8b:d2:b2:87:d0:fa:1e:0b:61:82:
98:90:c6:e3:e0:6d:8f:55:a9:38:f5:da:76:12:92:6f:99:78:
8d:82:73:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZozRie4xFcnWLjvq+NYfvpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi
ZGIzYjkwHhcNMjUxMDMwMDQwMDI2WhcNMjUxMDMxMDQwMDI2WjAzMTEwLwYDVQQD
EyhmODQzNGZiOTc1ZTg1MzZiNmQ0YThlM2UyNDZmOWZjMzM0NGIyNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDEc1qKXdOSTz6g+VsaclEEnHLQf
Z1jncWM/kt1yWB0+kz6Pwmr1T8JghVDvBZDAXiJ2sJQgAOStKUS49LJk6VpgDKQ5
H5HPUFCfmAo1Lfz2Ip6P41AQ4Okm3dLt81Lzu6DmJqoL84sldN9rOkAK7sTyGTXK
o/jVFPtx6rStlNZJco8wVQmXVaVpMS2fjgcufE+91UaMrlbETQ3suhf7LzfPj10O
znmK9tGgNguJTzLGBGm2fsFrBcQmzWEqQVysxI0Smqh5Du7Iw1chkFXfknQy0VFP
PXT5eI8W1aWXi0Dp0zZwB5ImwRs4faI85tcso/IaOV+uf7uJabITzDQatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhDT7l16FNrbUqOPiRvn8M0SySqMB8GA1UdIwQY
MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt
NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk
LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFknlkK9
RaGLtK4ulkedh50KSvJU89zFd+u2csfJOWcqBb4jbDsXRJEKalduT5+dtpkCfze5
w5Fez7QlhizLMjt+QLqcEgJKNkC1QxglIgIgG3UkM7EEYi6OrR0KmK+ipGfl7n4j
9h8bEKwBtSDMx6DpUh57zGyuFcMtmFW33zDJO8Ut5FGbgqWVTVQq1jRd1BZbfYmg
ogZE3zcbxL6XIk/DBzZ08UI+U2OZTOIZ+v0T23yCNQalMvoisu1ZD+ja0iVjSokm
I0Y4IudQYOR/lPBtJ2/ocMP1b/TUo6mZxb+L0rKH0PoeC2GCmJDG4+Btj1WpOPXa
dhKSb5l4jYJz1w==
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:14:44 2025 by rpki-client