
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier: GeQY+UwGQOS+xRLG0EaLr5S7yyGKkstirEpvEn9Vjr4=
Subject key identifier: 55:F2:A3:C5:D6:E4:7D:F4:C7:8D:29:F3:AD:73:55:E7:61:15:39:0A
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 019936F0F656A46FABECFA0359BEB5B99CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 04:03:05 +0000
Manifest this update: Thu 11 Sep 2025 04:03:05 +0000
Manifest next update: Fri 12 Sep 2025 04:03:05 +0000
Files and hashes: 1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: M3tXVJqsq4EPkXOPW7WkINpw3tfb1ETtdDmYkiInm50=)
4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
6: mFp3zFR1T75g9VSJshunQuImDjc.roa (hash: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=)
7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:f6:56:a4:6f:ab:ec:fa:03:59:be:b5:b9:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Sep 11 04:03:05 2025 GMT
Not After : Sep 12 04:03:05 2025 GMT
Subject: CN=55f2a3c5d6e47df4c78d29f3ad7355e76115390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:32:58:54:99:a4:eb:74:03:22:05:42:9d:
ea:10:b0:88:f4:9a:c5:29:2e:45:81:83:c3:2d:49:
92:56:06:45:bf:f2:62:80:3a:a1:dc:0e:f4:fd:b4:
87:a9:16:c3:74:17:4a:3d:1c:c2:12:ca:ed:99:da:
1e:e5:ed:ca:22:53:07:2a:66:1a:97:d5:d6:c9:68:
2a:03:56:3f:00:cc:0e:29:12:ad:83:12:03:dd:1d:
6d:0c:d4:4a:b4:28:b8:a1:de:67:a1:00:b5:b6:69:
cd:7d:4d:c3:8a:f6:4a:a9:51:78:b5:02:a4:87:29:
ac:6c:fb:cb:22:ab:85:00:6a:58:43:d6:3d:25:b1:
23:f5:64:87:22:a4:14:c6:1d:17:13:2c:9b:58:59:
b6:4c:f5:93:01:f9:39:42:09:1c:4b:b2:d0:ed:d4:
e0:6f:ed:84:45:3d:f1:77:17:00:b3:96:ec:90:c8:
47:d3:85:83:18:cd:66:44:f8:77:ac:b9:d0:09:4e:
06:18:98:c5:aa:c4:6f:8c:37:97:5b:da:7f:21:97:
70:f3:93:18:1b:94:5b:b3:93:aa:00:f1:24:b6:bb:
84:9b:2b:10:19:35:a1:91:6e:ed:b0:5a:52:20:47:
ed:f8:0a:2d:27:1e:00:da:fc:48:3a:a3:33:32:63:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F2:A3:C5:D6:E4:7D:F4:C7:8D:29:F3:AD:73:55:E7:61:15:39:0A
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:21:3c:11:26:cd:2e:53:4b:7d:21:d6:bb:97:b3:8a:a5:
fe:30:1c:c9:5d:62:24:75:77:e6:bc:2f:80:8e:b0:72:4d:33:
97:1e:11:5d:43:09:5f:44:97:b5:8f:57:1a:8e:45:fb:89:dd:
d9:09:fa:c3:e7:f4:d7:e3:1f:70:96:d2:a2:1e:3f:ed:76:02:
77:48:b1:83:73:af:83:30:be:f8:d2:47:f9:83:60:fc:62:b5:
05:52:29:9f:2b:22:ed:76:74:78:4f:f8:02:43:f0:ff:15:c7:
12:3a:12:d9:ca:fc:14:e0:23:61:a6:f3:8d:9f:c1:82:24:42:
08:e0:c9:57:23:71:e0:6f:ce:97:76:2f:ec:2f:35:10:34:bb:
ae:20:51:9a:ac:ff:4b:09:57:6f:95:26:e7:51:27:2a:b2:f5:
0a:bb:12:72:20:60:8f:96:81:3f:0b:f3:3a:70:e6:df:71:77:
f7:f8:7c:69:21:ef:80:22:38:8c:b0:10:d1:f1:b1:a7:15:11:
ed:d4:60:cb:a8:a5:5b:f2:6f:0e:6d:c7:06:54:6a:5b:25:0b:
38:54:0c:7e:12:eb:0a:b3:c6:e0:2e:ae:7e:25:72:e9:93:7e:
60:11:3f:50:2a:56:e0:44:56:b6:3a:17:0f:0e:e0:30:37:41:
12:80:bb:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk28PZWpG+r7PoDWb61uZz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj
YTM3NzEwHhcNMjUwOTExMDQwMzA1WhcNMjUwOTEyMDQwMzA1WjAzMTEwLwYDVQQD
Eyg1NWYyYTNjNWQ2ZTQ3ZGY0Yzc4ZDI5ZjNhZDczNTVlNzYxMTUzOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPcyWFSZpOt0AyIFQp3qELCI9JrF
KS5FgYPDLUmSVgZFv/JigDqh3A70/bSHqRbDdBdKPRzCEsrtmdoe5e3KIlMHKmYa
l9XWyWgqA1Y/AMwOKRKtgxID3R1tDNRKtCi4od5noQC1tmnNfU3DivZKqVF4tQKk
hymsbPvLIquFAGpYQ9Y9JbEj9WSHIqQUxh0XEyybWFm2TPWTAfk5QgkcS7LQ7dTg
b+2ERT3xdxcAs5bskMhH04WDGM1mRPh3rLnQCU4GGJjFqsRvjDeXW9p/IZdw85MY
G5Rbs5OqAPEktruEmysQGTWhkW7tsFpSIEft+AotJx4A2vxIOqMzMmOmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXyo8XW5H30x40p861zVedhFTkKMB8GA1UdIwQY
MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt
ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3
LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT8hPBEm
zS5TS30h1ruXs4ql/jAcyV1iJHV35rwvgI6wck0zlx4RXUMJX0SXtY9XGo5F+4nd
2Qn6w+f01+MfcJbSoh4/7XYCd0ixg3OvgzC++NJH+YNg/GK1BVIpnysi7XZ0eE/4
AkPw/xXHEjoS2cr8FOAjYabzjZ/BgiRCCODJVyNx4G/Ol3Yv7C81EDS7riBRmqz/
SwlXb5Um51EnKrL1CrsSciBgj5aBPwvzOnDm33F39/h8aSHvgCI4jLAQ0fGxpxUR
7dRgy6ilW/JvDm3HBlRqWyULOFQMfhLrCrPG4C6ufiVy6ZN+YBE/UCpW4ERWtjoX
Dw7gMDdBEoC7Nw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 13:27:54 2025 by rpki-client