Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
File: FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft (raw, json)
Hash identifier: KLVxMppUlP1GgYaxEL0F5UFte8gAooGpvzEYb42K9xg=
Subject key identifier: 42:25:01:1B:53:16:BB:B1:40:D6:EA:48:11:6F:93:9A:D4:B2:7F:C0
Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
Certificate issuer: /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Certificate serial: 019A4F2B4CED93E58B247E307F5DEA6BE2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl (hash: xsbowyEYXGn6gM0yku/cQ3HSGkeitE0ZR0ccRFFcnaA=)
2: PyQ8fu5pDLbvLBuzcMMxIAkMsmo.roa (hash: mZg5dPb6uDIAF/lQgfs5kl+MW8uT39zjW3CSCFzbS/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4c:ed:93:e5:8b:24:7e:30:7f:5d:ea:6b:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=4225011b5316bbb140d6ea48116f939ad4b27fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:7e:56:19:7a:17:19:3c:53:c4:df:d7:4f:
8e:c3:aa:f2:ca:0b:89:ad:b8:b4:86:a7:53:04:79:
a0:b3:70:d5:f3:33:84:a7:10:09:0b:f5:e0:54:2e:
48:6b:44:07:37:e5:06:dd:0e:6b:78:9d:93:a3:40:
69:b9:0f:a8:b2:02:63:5e:68:03:82:23:47:03:1b:
d7:70:69:99:ea:5f:f2:22:05:21:47:29:97:25:74:
6e:2b:ed:b5:da:e4:05:98:df:ad:8c:1a:ef:db:24:
27:8c:c0:ee:66:af:53:ec:b3:42:c8:66:03:22:d1:
49:9f:f9:62:b5:b4:86:dd:8f:39:bd:c1:bc:c0:55:
ab:ec:cd:13:ec:25:80:55:c6:b0:fa:22:02:e1:e3:
88:62:95:5c:1c:78:41:9a:da:97:d1:23:af:41:70:
2d:4a:d1:37:21:0b:9f:8a:5c:ab:74:91:70:97:d4:
4b:91:a4:ce:5c:99:ae:30:7e:8f:11:54:4a:da:28:
b2:22:31:2f:5e:fc:8e:e0:66:96:20:df:95:b0:8d:
13:83:ea:8a:d2:ff:d7:27:92:48:02:cd:9e:c9:26:
b4:34:5b:02:ff:75:a1:fd:06:9c:58:b2:49:58:c9:
89:6e:a9:21:7a:55:4a:ee:d5:13:10:2e:78:2c:e4:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:01:1B:53:16:BB:B1:40:D6:EA:48:11:6F:93:9A:D4:B2:7F:C0
X509v3 Authority Key Identifier:
keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f4:d9:65:1f:9e:e6:4b:9f:03:1f:6e:3b:04:8c:2a:dd:a5:
a8:70:08:11:1e:55:7e:2c:ee:7a:36:e9:32:4a:23:66:e0:d6:
96:99:e5:42:ab:d9:c2:1c:f8:bd:52:32:6b:62:6d:ea:aa:54:
34:de:54:19:13:11:1d:b4:ff:37:a9:34:9c:f9:a3:1d:b1:56:
6b:9f:f8:7f:f3:1f:12:ec:c9:9f:a9:29:0f:f2:d3:2a:0b:17:
44:42:e4:97:bb:d7:cd:b0:c5:57:80:0a:52:df:56:ab:64:36:
1a:fe:ac:b6:2f:b0:73:54:c1:43:38:37:ea:d5:10:66:eb:9b:
32:6e:c6:4f:9c:85:66:f1:84:de:64:bb:ca:b3:8e:23:40:8f:
a1:f1:7c:07:39:43:b7:df:4f:a4:19:30:6c:bf:10:da:e4:0c:
38:59:8a:d8:2a:d4:1f:a9:06:eb:d0:88:04:8e:a2:14:05:9c:
dd:5f:36:40:c1:0e:ed:59:2e:94:20:7f:a4:89:53:46:b5:bf:
5c:56:fe:75:a4:c5:1b:48:8b:38:35:b2:5a:30:1d:c6:5f:ff:
e1:59:28:d9:28:df:34:79:31:23:2c:51:b0:df:84:88:55:f1:
ff:40:ad:4c:cd:55:81:81:d2:5d:a7:be:3b:58:9e:7f:fd:ce:
dd:76:d9:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK0ztk+WLJH4wf13qa+LLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGI3ZmY5YmMxOTYyZWJjZWMwYmU0MzVjY2MyNzJkNzUx
YTFjMTYwHhcNMjUxMTA0MTQwMDI4WhcNMjUxMTA1MTQwMDI4WjAzMTEwLwYDVQQD
Eyg0MjI1MDExYjUzMTZiYmIxNDBkNmVhNDgxMTZmOTM5YWQ0YjI3ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIx+Vhl6Fxk8U8Tf10+Ow6ryyguJ
rbi0hqdTBHmgs3DV8zOEpxAJC/XgVC5Ia0QHN+UG3Q5reJ2To0BpuQ+osgJjXmgD
giNHAxvXcGmZ6l/yIgUhRymXJXRuK+212uQFmN+tjBrv2yQnjMDuZq9T7LNCyGYD
ItFJn/litbSG3Y85vcG8wFWr7M0T7CWAVcaw+iIC4eOIYpVcHHhBmtqX0SOvQXAt
StE3IQufilyrdJFwl9RLkaTOXJmuMH6PEVRK2iiyIjEvXvyO4GaWIN+VsI0Tg+qK
0v/XJ5JIAs2eySa0NFsC/3Wh/QacWLJJWMmJbqkhelVK7tUTEC54LOT+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIlARtTFruxQNbqSBFvk5rUsn/AMB8GA1UdIwQY
MBaAFBULf/m8GWLrzsC+Q1zMJy11GhwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUt
MTBjZDIwZmFiMzg2LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUtMTBjZDIwZmFiMzg2
LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/TZZR+e
5kufAx9uOwSMKt2lqHAIER5VfizuejbpMkojZuDWlpnlQqvZwhz4vVIya2Jt6qpU
NN5UGRMRHbT/N6k0nPmjHbFWa5/4f/MfEuzJn6kpD/LTKgsXRELkl7vXzbDFV4AK
Ut9Wq2Q2Gv6sti+wc1TBQzg36tUQZuubMm7GT5yFZvGE3mS7yrOOI0CPofF8BzlD
t99PpBkwbL8Q2uQMOFmK2CrUH6kG69CIBI6iFAWc3V82QMEO7VkulCB/pIlTRrW/
XFb+daTFG0iLODWyWjAdxl//4Vko2SjfNHkxIyxRsN+EiFXx/0CtTM1VgYHSXae+
O1ief/3O3XbZ3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:17 2025 by rpki-client