Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: UtPSQIhTHw/fW/9R6eYYbTAzVU6PDRtKcTRdfvIGptg=
Subject key identifier: E7:50:52:1C:85:BF:CE:60:C7:64:E6:7E:37:54:BB:61:B3:11:9A:75
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019A71B80F58C8FEBBC658C328DB7E53B74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: cjFUBD5r3LsXpWiCG9Ws42G3+gzFQxasrYF/Pi+jsQ8=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:58:c8:fe:bb:c6:58:c3:28:db:7e:53:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=e750521c85bfce60c764e67e3754bb61b3119a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:92:6f:62:79:80:2b:21:3a:e6:3d:41:29:
19:00:0d:b7:d9:d8:c9:55:21:db:98:22:4c:60:77:
5a:5e:02:21:dd:e6:cd:f2:86:19:c8:fe:be:81:8b:
89:a4:99:b9:d7:f0:60:7e:e1:3c:a5:47:50:1f:2a:
50:0c:98:51:d9:50:51:65:5e:0a:22:0f:1a:47:be:
eb:fa:e9:e0:a1:63:74:f9:1c:43:53:9f:d9:0d:f7:
70:b5:b4:3a:6b:2a:d1:b2:9a:60:5d:76:01:80:83:
80:5a:8b:30:fe:65:df:87:65:8f:2c:fa:47:09:de:
2e:8a:3c:6a:21:37:ba:f2:61:59:28:57:ff:46:6a:
c5:31:ae:7e:ef:bc:61:47:49:fc:c4:f5:8b:9e:e1:
a5:53:63:3a:d4:77:4d:04:47:8a:27:c4:02:66:0c:
bd:85:c2:30:19:b3:fd:51:96:d6:1d:81:cc:cb:6e:
6a:80:30:77:f5:53:87:42:f8:85:a7:ea:8b:82:93:
91:12:52:19:d9:f2:94:cb:fa:2a:b1:38:41:16:3b:
0b:50:df:db:78:ef:98:58:cd:8d:11:05:fb:6e:1c:
c3:04:47:64:3e:a9:1e:66:7a:81:b3:dc:61:84:e3:
3f:16:71:cb:9e:ab:66:87:98:25:97:0a:e3:63:08:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:52:1C:85:BF:CE:60:C7:64:E6:7E:37:54:BB:61:B3:11:9A:75
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:96:f0:61:7c:a8:52:9e:aa:b1:31:a3:38:b3:e7:07:cc:
b7:42:b8:04:30:bb:03:95:5a:02:83:2b:95:76:3a:3d:92:63:
41:24:57:be:03:e0:06:cb:9f:67:eb:a5:89:ae:b8:ec:65:1c:
2d:c2:03:96:0e:4a:e7:7c:57:95:bf:7c:28:e3:87:01:18:04:
68:cd:16:f1:5a:2d:ab:02:f9:92:a4:ae:77:f6:b8:4f:0d:06:
66:9e:96:7e:ec:b3:90:60:4a:3c:bc:37:dd:aa:04:f9:40:62:
29:c3:dc:c9:40:d5:ea:22:28:9d:46:64:92:f1:9e:2e:f3:50:
58:05:23:c3:3b:93:8b:c1:a0:0c:32:e6:0c:b7:10:c3:25:94:
f8:1e:3f:4c:46:bc:d8:7c:be:fb:9c:b6:3f:52:a8:98:20:62:
da:16:3e:24:4a:19:3b:7a:28:f9:a0:b6:cf:1e:ef:42:45:aa:
bf:e0:d1:1c:4b:97:b8:86:ac:0a:32:9d:0e:aa:b8:a0:dc:fa:
83:21:18:3c:87:1f:0d:2a:57:ee:43:0b:15:62:6c:c2:d3:81:
51:1a:0a:54:62:f0:4b:cd:26:43:b6:91:bc:1c:ab:04:23:b1:
e3:39:aa:25:1b:dd:7d:62:1a:e4:54:76:3a:c9:47:62:66:a8:
ef:8c:e7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuA9YyP67xljDKNt+U7dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjUxMTExMDcwMTE5WhcNMjUxMTEyMDcwMTE5WjAzMTEwLwYDVQQD
EyhlNzUwNTIxYzg1YmZjZTYwYzc2NGU2N2UzNzU0YmI2MWIzMTE5YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNmSb2J5gCshOuY9QSkZAA232djJ
VSHbmCJMYHdaXgIh3ebN8oYZyP6+gYuJpJm51/BgfuE8pUdQHypQDJhR2VBRZV4K
Ig8aR77r+ungoWN0+RxDU5/ZDfdwtbQ6ayrRsppgXXYBgIOAWosw/mXfh2WPLPpH
Cd4uijxqITe68mFZKFf/RmrFMa5+77xhR0n8xPWLnuGlU2M61HdNBEeKJ8QCZgy9
hcIwGbP9UZbWHYHMy25qgDB39VOHQviFp+qLgpORElIZ2fKUy/oqsThBFjsLUN/b
eO+YWM2NEQX7bhzDBEdkPqkeZnqBs9xhhOM/FnHLnqtmh5gllwrjYwjg1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdQUhyFv85gx2TmfjdUu2GzEZp1MB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI+W8GF8
qFKeqrExoziz5wfMt0K4BDC7A5VaAoMrlXY6PZJjQSRXvgPgBsufZ+ulia647GUc
LcIDlg5K53xXlb98KOOHARgEaM0W8VotqwL5kqSud/a4Tw0GZp6WfuyzkGBKPLw3
3aoE+UBiKcPcyUDV6iIonUZkkvGeLvNQWAUjwzuTi8GgDDLmDLcQwyWU+B4/TEa8
2Hy++5y2P1KomCBi2hY+JEoZO3oo+aC2zx7vQkWqv+DRHEuXuIasCjKdDqq4oNz6
gyEYPIcfDSpX7kMLFWJswtOBURoKVGLwS80mQ7aRvByrBCOx4zmqJRvdfWIa5FR2
OslHYmao74zn/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client