Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: iGdiXwXd4vEK+ewlIfqS+a4OzCxFWW1i2Cd/pQOBlPw=
Subject key identifier: 9F:9D:0B:64:B5:62:DA:24:80:0B:24:F9:24:9D:6D:C7:38:75:24:C4
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019A53E413CA08866779803EEE67E7BE6440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: D1
Signing time: Wed 05 Nov 2025 12:00:47 +0000
Manifest this update: Wed 05 Nov 2025 12:00:47 +0000
Manifest next update: Thu 06 Nov 2025 12:00:47 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: REV0kEOFEJSjqfUZwxI+ksu6KxPqAv+MCmrEEeQhGpE=)
2: X-F4EV-F2ag_5pD7ZZ_5QP_Tg_k.roa (hash: 1FxaidkVHdKLmVU/qFLpds7lpUrV/YLVa1N6wBCOD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:13:ca:08:86:67:79:80:3e:ee:67:e7:be:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Nov 5 12:00:47 2025 GMT
Not After : Nov 6 12:00:47 2025 GMT
Subject: CN=9f9d0b64b562da24800b24f9249d6dc7387524c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:e6:d7:31:2f:31:fb:be:2a:28:66:6e:a8:
b9:6d:e0:f5:74:1f:93:fc:2b:78:05:bd:31:5e:6b:
e9:f3:37:c2:9f:2f:18:34:98:a6:45:62:38:fc:d8:
20:32:20:f4:66:9b:30:7b:b2:10:2c:a3:d7:fd:6f:
56:5e:b3:9e:d3:0e:b0:84:f0:a8:c8:c7:1a:d1:65:
63:87:13:13:69:e5:05:f2:c3:95:e4:51:69:5f:d7:
31:e5:dd:e6:e1:5a:f0:a3:a2:cc:04:68:89:e4:6a:
12:3b:63:db:c8:c1:b3:88:3a:4f:86:fe:ff:59:58:
d2:b1:82:68:60:9f:b2:6f:2f:26:88:2b:8f:81:a9:
fd:1b:36:1c:dd:eb:08:d9:f2:2d:ff:9a:5a:fa:97:
5a:99:54:ed:fe:2f:03:65:3c:56:71:78:4d:ab:39:
e0:ed:32:fa:15:99:6c:44:66:03:78:d4:ff:5f:80:
c2:e4:61:68:65:78:32:92:4c:86:4b:e0:4a:d8:94:
7a:4c:cb:17:27:47:ee:a5:75:b2:45:2f:c8:6c:53:
83:d7:45:67:73:b4:e5:e3:e9:2a:c1:18:4e:ef:53:
e4:cc:db:3d:03:7a:9c:31:aa:e9:55:ae:4b:b0:f8:
7e:14:29:66:11:b6:c3:15:2e:b9:6f:0c:ba:33:81:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:0B:64:B5:62:DA:24:80:0B:24:F9:24:9D:6D:C7:38:75:24:C4
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:16:4e:aa:86:9e:21:4f:69:4c:a1:bd:80:87:bf:92:ca:
c1:ae:64:9e:6a:21:72:72:25:9b:17:b0:b2:63:21:a9:60:a5:
b9:d3:d1:bd:65:d7:93:89:26:fd:80:eb:c9:31:00:0f:fc:e4:
92:31:3c:cf:a9:38:6d:0b:47:55:94:22:72:98:4e:33:ce:fa:
30:2c:65:ae:e4:ee:46:c9:b8:ec:82:90:64:ec:71:4b:97:a7:
ff:82:17:73:b0:d0:dd:cf:05:2f:05:18:7e:2f:f5:20:92:81:
d4:f4:69:ce:6a:08:b4:3d:ab:80:0c:3a:df:66:16:e0:92:e0:
d5:a7:d1:5e:ef:6b:e0:4a:21:cf:99:eb:ea:02:88:c4:0d:dd:
e4:e7:a7:23:4c:f0:db:94:da:a9:18:e5:7a:f2:81:88:d4:a2:
a6:2f:d7:5e:79:32:52:1a:6c:31:d6:0b:93:cb:f6:3e:95:58:
36:04:c4:b5:7a:a8:be:d5:42:6a:7d:d4:56:bc:01:60:50:d3:
a3:5b:c2:35:e5:cd:dd:ae:7b:fe:cc:db:82:17:fd:af:a8:47:
0e:fd:ec:8a:91:bf:c1:74:bc:5e:d2:c0:64:bd:35:f8:ab:98:
ac:4f:a3:d4:fd:35:df:cb:9d:21:d0:ce:f7:34:de:13:d2:30:
db:2c:9d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5BPKCIZneYA+7mfnvmRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5
NGEyNTIwHhcNMjUxMTA1MTIwMDQ3WhcNMjUxMTA2MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZjlkMGI2NGI1NjJkYTI0ODAwYjI0ZjkyNDlkNmRjNzM4NzUyNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouTm1zEvMfu+Kihmbqi5beD1dB+T
/Ct4Bb0xXmvp8zfCny8YNJimRWI4/NggMiD0Zpswe7IQLKPX/W9WXrOe0w6whPCo
yMca0WVjhxMTaeUF8sOV5FFpX9cx5d3m4Vrwo6LMBGiJ5GoSO2PbyMGziDpPhv7/
WVjSsYJoYJ+yby8miCuPgan9GzYc3esI2fIt/5pa+pdamVTt/i8DZTxWcXhNqzng
7TL6FZlsRGYDeNT/X4DC5GFoZXgykkyGS+BK2JR6TMsXJ0fupXWyRS/IbFOD10Vn
c7Tl4+kqwRhO71PkzNs9A3qcMarpVa5LsPh+FClmEbbDFS65bwy6M4GwuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+dC2S1YtokgAsk+SSdbcc4dSTEMB8GA1UdIwQY
MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt
MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl
LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1IWTqqG
niFPaUyhvYCHv5LKwa5knmohcnIlmxewsmMhqWCludPRvWXXk4km/YDryTEAD/zk
kjE8z6k4bQtHVZQicphOM876MCxlruTuRsm47IKQZOxxS5en/4IXc7DQ3c8FLwUY
fi/1IJKB1PRpzmoItD2rgAw632YW4JLg1afRXu9r4Eohz5nr6gKIxA3d5OenI0zw
25TaqRjlevKBiNSipi/XXnkyUhpsMdYLk8v2PpVYNgTEtXqovtVCan3UVrwBYFDT
o1vCNeXN3a57/szbghf9r6hHDv3sipG/wXS8XtLAZL01+KuYrE+j1P0138udIdDO
9zTeE9Iw2yydbQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:47:55 2025 by rpki-client