Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: 2PkTn2plAXcRmx8KT0+UcXP/HQ8w6jJswgyGErS8CBM=
Subject key identifier: 97:39:70:95:B5:4A:7D:16:10:D0:86:70:31:D0:85:A6:79:AB:98:15
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019A54C097918CB62F5AFAAD84F183B283A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 16A4
Signing time: Wed 05 Nov 2025 16:01:39 +0000
Manifest this update: Wed 05 Nov 2025 16:01:39 +0000
Manifest next update: Thu 06 Nov 2025 16:01:39 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: Y97H3HnDQwrGgS2BO9q82ZIljOTKIVvA69xiHPBOtbI=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:97:91:8c:b6:2f:5a:fa:ad:84:f1:83:b2:83:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Nov 5 16:01:39 2025 GMT
Not After : Nov 6 16:01:39 2025 GMT
Subject: CN=97397095b54a7d1610d0867031d085a679ab9815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:b9:85:ca:43:c5:c2:f1:7f:10:20:ea:ba:
99:a7:42:5a:93:c0:ae:38:48:30:44:8a:86:55:0c:
8b:b1:d5:71:41:13:dc:5e:8c:d9:a4:5c:dd:b1:09:
9d:09:c9:c0:61:dd:7e:2d:88:f2:3a:72:40:c6:41:
ed:c5:2e:98:af:06:cf:2e:f6:84:bb:76:f3:f1:72:
66:b6:45:9e:c7:d2:88:71:09:bd:65:ac:60:b2:4e:
b4:5b:a1:17:6e:1e:c0:65:d3:68:e0:13:45:98:84:
69:db:5c:16:b0:4e:cc:f0:5a:db:d5:12:e4:2c:41:
f8:ce:fb:f7:68:ac:9b:99:4a:b9:80:88:a3:10:29:
4d:de:dc:c8:76:77:1b:e4:78:73:c5:7f:f6:51:da:
20:83:bc:61:ba:5c:6b:40:1d:d3:b3:e5:42:ac:6d:
0e:92:d5:ff:d3:e7:77:06:a0:6a:b9:40:ea:fe:77:
9b:38:81:16:e3:ec:26:f8:d7:20:87:b9:b8:fe:c2:
39:80:a1:86:3c:2d:87:4a:4b:36:24:4a:25:22:01:
21:9e:c1:29:3d:9c:14:02:15:fb:6a:bf:17:d8:5a:
94:c6:ec:fc:21:f8:b3:64:44:99:d8:62:9b:20:de:
7f:52:4d:8d:d3:cd:0f:66:7e:5e:c3:fb:4b:ac:b1:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:70:95:B5:4A:7D:16:10:D0:86:70:31:D0:85:A6:79:AB:98:15
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:8c:76:ce:44:5a:ee:77:27:7a:02:96:74:40:3b:4c:ba:
99:a6:48:dc:f9:a6:bf:3c:da:77:8a:ce:b3:ac:8c:f4:4f:76:
0a:12:9e:60:8c:d1:ec:46:6f:52:6b:7e:d7:86:a5:a4:55:4e:
8e:f3:b7:50:ed:e5:da:23:b4:63:6c:2f:04:6a:9a:2e:1f:10:
4b:d6:7c:c1:0c:c9:ea:57:24:3f:54:0c:f4:9f:7f:de:85:d1:
e7:30:09:32:96:41:a6:64:37:3a:96:3f:bf:ac:c9:52:10:d2:
8e:55:01:76:a0:34:28:40:c6:55:8b:b5:ec:ff:c2:92:9b:12:
66:a8:2e:55:ae:0b:7d:06:57:7a:8c:e7:8b:4b:4c:5a:ce:bf:
1d:c3:cc:49:ee:70:a8:41:c0:24:6d:78:2a:ec:cf:53:e2:15:
8c:5c:c3:18:6d:f3:9a:40:33:8e:31:91:bd:11:89:7d:08:4a:
b5:eb:34:0e:bc:bc:d2:d4:e9:45:76:20:00:45:47:b1:a6:69:
ca:84:a7:37:c4:bb:78:db:94:2f:77:21:86:07:78:5a:9c:f0:
1c:64:95:36:47:5a:b7:b2:4c:1c:ed:28:ef:fe:0f:64:a4:43:
aa:3f:14:ba:d6:ce:80:b4:cb:d6:29:71:aa:4a:58:11:66:a8:
de:53:37:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwJeRjLYvWvqthPGDsoOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjUxMTA1MTYwMTM5WhcNMjUxMTA2MTYwMTM5WjAzMTEwLwYDVQQD
Eyg5NzM5NzA5NWI1NGE3ZDE2MTBkMDg2NzAzMWQwODVhNjc5YWI5ODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnu5hcpDxcLxfxAg6rqZp0Jak8Cu
OEgwRIqGVQyLsdVxQRPcXozZpFzdsQmdCcnAYd1+LYjyOnJAxkHtxS6YrwbPLvaE
u3bz8XJmtkWex9KIcQm9Zaxgsk60W6EXbh7AZdNo4BNFmIRp21wWsE7M8Frb1RLk
LEH4zvv3aKybmUq5gIijEClN3tzIdncb5HhzxX/2Udogg7xhulxrQB3Ts+VCrG0O
ktX/0+d3BqBquUDq/nebOIEW4+wm+Ncgh7m4/sI5gKGGPC2HSks2JEolIgEhnsEp
PZwUAhX7ar8X2FqUxuz8IfizZESZ2GKbIN5/Uk2N080PZn5ew/tLrLFj9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc5cJW1Sn0WENCGcDHQhaZ5q5gVMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiWMds5E
Wu53J3oClnRAO0y6maZI3Pmmvzzad4rOs6yM9E92ChKeYIzR7EZvUmt+14alpFVO
jvO3UO3l2iO0Y2wvBGqaLh8QS9Z8wQzJ6lckP1QM9J9/3oXR5zAJMpZBpmQ3OpY/
v6zJUhDSjlUBdqA0KEDGVYu17P/CkpsSZqguVa4LfQZXeozni0tMWs6/HcPMSe5w
qEHAJG14KuzPU+IVjFzDGG3zmkAzjjGRvRGJfQhKtes0Dry80tTpRXYgAEVHsaZp
yoSnN8S7eNuUL3chhgd4WpzwHGSVNkdat7JMHO0o7/4PZKRDqj8UutbOgLTL1ilx
qkpYEWao3lM35g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:16 2025 by rpki-client