Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: Aawb2bV++yohScx6YjVVuSKCW6LT9Qe52Kso8okydi8=
Subject key identifier: 60:D7:F5:8F:30:26:75:B5:34:40:9D:27:31:F9:ED:88:A2:3D:E7:50
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019A4FCFD916A2EFA917A32545E9CB012DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: RwlQYlEY3WlWGtlB69UEkv5O5X5fcXNjD56QJ23Bmww=)
2: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (hash: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d9:16:a2:ef:a9:17:a3:25:45:e9:cb:01:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=60d7f58f302675b534409d2731f9ed88a23de750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:cf:3f:16:ca:cb:b0:59:5d:24:04:14:98:
30:d2:f3:1a:09:00:75:a8:5a:21:92:c8:8a:01:b0:
5b:2a:45:75:93:2a:83:bf:97:fc:07:33:59:74:10:
63:9f:9e:94:f5:b3:93:23:ef:72:9d:ff:2c:73:e3:
e7:67:fc:02:43:ac:ab:20:26:6e:0e:ba:c4:6d:4c:
1b:25:fb:2d:4c:fa:9d:01:91:56:3b:36:a0:d9:82:
c7:98:8a:e3:00:d9:82:9e:3f:b3:7b:b6:a7:84:b5:
4f:1d:ea:3d:40:e2:1c:28:b1:d1:09:ed:fc:99:cb:
71:66:a8:04:14:47:91:20:22:0e:45:2e:0e:74:d6:
68:eb:7f:71:a8:c6:26:11:fe:f6:40:34:2c:a9:5d:
cf:f3:96:da:b9:79:0b:b1:36:de:2b:69:90:4e:eb:
ba:de:56:95:62:8a:41:48:47:05:c6:a1:43:95:98:
6d:48:4d:9a:78:46:ca:de:90:54:f5:44:5b:1e:ab:
03:f5:41:43:0c:41:9f:54:2b:9f:ea:e6:18:ea:79:
56:5a:59:88:ec:3c:ea:81:7e:2c:b2:b8:e5:1f:a5:
47:8a:ce:43:d7:cf:c7:93:26:c3:7b:ec:cb:db:bc:
a7:43:ff:ba:10:df:38:4e:0a:0f:5f:61:0c:c0:6e:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:F5:8F:30:26:75:B5:34:40:9D:27:31:F9:ED:88:A2:3D:E7:50
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:ce:57:73:ac:bd:41:a8:5d:32:fd:7f:2a:a1:97:8b:0c:
b6:a7:00:f9:df:8f:d7:0b:98:ec:78:aa:14:c9:bd:e8:09:a5:
1e:cb:1d:9c:07:f5:c9:d5:51:eb:3c:b1:57:23:8d:03:7b:15:
0a:ed:10:87:95:d3:9a:32:84:82:6f:4a:45:b8:27:4d:4f:37:
9a:dc:06:38:9a:ff:35:cd:8d:80:8a:ef:0b:f9:2e:c4:03:b0:
b2:59:fb:63:9d:30:cf:ff:0b:a6:6c:5e:fe:f7:f7:93:3f:19:
e7:ee:ef:a7:1f:ea:63:1a:11:5f:a7:63:b7:0c:f0:16:21:c4:
db:8c:ec:23:48:d0:19:00:d7:b5:e3:46:15:f7:c1:70:4b:ce:
38:72:47:ff:c0:8a:c1:a2:77:34:d3:0d:7e:41:52:44:5c:90:
e1:a3:f7:de:10:5a:14:2c:ee:c7:68:3e:35:92:b7:a6:0a:4a:
60:c2:68:cc:09:15:59:7e:b9:64:b7:97:94:94:10:27:95:62:
80:44:1c:c4:3a:48:70:08:5e:52:24:d2:a8:bc:6c:47:8f:82:
3d:0d:05:15:e8:e4:8b:b9:95:ff:7a:58:21:4c:d2:bb:6e:9e:
bb:25:f5:69:bf:fe:4a:1d:0c:e4:1d:4f:1e:e6:8c:91:7e:5e:
98:4a:ab:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz9kWou+pF6MlRenLAS3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjUxMTA0MTcwMDEyWhcNMjUxMTA1MTcwMDEyWjAzMTEwLwYDVQQD
Eyg2MGQ3ZjU4ZjMwMjY3NWI1MzQ0MDlkMjczMWY5ZWQ4OGEyM2RlNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NfPPxbKy7BZXSQEFJgw0vMaCQB1
qFohksiKAbBbKkV1kyqDv5f8BzNZdBBjn56U9bOTI+9ynf8sc+PnZ/wCQ6yrICZu
DrrEbUwbJfstTPqdAZFWOzag2YLHmIrjANmCnj+ze7anhLVPHeo9QOIcKLHRCe38
mctxZqgEFEeRICIORS4OdNZo639xqMYmEf72QDQsqV3P85bauXkLsTbeK2mQTuu6
3laVYopBSEcFxqFDlZhtSE2aeEbK3pBU9URbHqsD9UFDDEGfVCuf6uYY6nlWWlmI
7DzqgX4ssrjlH6VHis5D18/HkybDe+zL27ynQ/+6EN84TgoPX2EMwG5+8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDX9Y8wJnW1NECdJzH57YiiPedQMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2LOV3Os
vUGoXTL9fyqhl4sMtqcA+d+P1wuY7HiqFMm96AmlHssdnAf1ydVR6zyxVyONA3sV
Cu0Qh5XTmjKEgm9KRbgnTU83mtwGOJr/Nc2NgIrvC/kuxAOwsln7Y50wz/8Lpmxe
/vf3kz8Z5+7vpx/qYxoRX6djtwzwFiHE24zsI0jQGQDXteNGFffBcEvOOHJH/8CK
waJ3NNMNfkFSRFyQ4aP33hBaFCzux2g+NZK3pgpKYMJozAkVWX65ZLeXlJQQJ5Vi
gEQcxDpIcAheUiTSqLxsR4+CPQ0FFejki7mV/3pYIUzSu26euyX1ab/+Sh0M5B1P
HuaMkX5emEqrEg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:46 2025 by rpki-client