Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File: Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier: I1OPIRsqewdp5c9gKg6iEwolEObrAGG8ymVQq10i8Rc=
Subject key identifier: 42:0E:45:62:3B:02:A8:0C:BA:5C:41:DF:26:66:F1:78:40:8B:F1:06
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer: /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial: 019A4EF43D7DE47F712718C4CA7D64669E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: Iz2mUI2RbB7AhnwwbmzOc+98FkvIE3Vc1VMuilkV+s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3d:7d:e4:7f:71:27:18:c4:ca:7d:64:66:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=420e45623b02a80cba5c41df2666f178408bf106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:8f:99:11:5d:fa:92:d8:92:0f:52:a7:01:
c3:4b:cf:ca:0f:f2:d2:0c:5f:02:e6:04:6e:9b:4b:
2d:dd:4b:ef:09:a0:01:97:1c:91:36:5f:7f:24:00:
6d:ff:78:e5:f0:32:b1:b1:fa:31:e1:94:e1:b5:db:
98:d9:0e:9f:ca:4c:a6:ae:8d:3b:0c:76:17:b9:b7:
a5:3a:21:a8:f7:b3:d9:cc:7e:c1:b1:67:86:84:96:
d2:95:e9:4e:e3:d8:5d:cc:20:d2:51:b0:aa:3c:a2:
74:dc:26:e4:b4:93:97:68:04:b6:50:ae:ef:04:2c:
61:7e:00:03:6f:11:9c:ef:3d:c7:7a:e9:39:33:9a:
9b:8b:0b:0b:3a:66:b3:4e:83:75:c8:0f:02:7f:31:
90:ba:68:8a:ab:ec:2a:58:84:39:c6:df:9a:88:75:
75:20:ef:48:9c:eb:33:54:cc:e1:ba:50:4f:17:97:
a3:15:68:56:17:e3:44:a6:49:ba:2b:9d:fe:aa:c4:
8c:5c:a3:6c:8e:d7:62:36:51:37:d2:d1:ff:16:61:
24:9d:9a:10:89:84:2c:dd:36:4f:cb:ec:d3:cd:b8:
30:10:09:4a:ac:8a:23:80:20:78:32:aa:38:04:5d:
9e:dc:ca:0f:fc:d9:6d:4e:6b:35:43:c6:5b:c4:dc:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:45:62:3B:02:A8:0C:BA:5C:41:DF:26:66:F1:78:40:8B:F1:06
X509v3 Authority Key Identifier:
keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:0c:33:36:d5:ad:6b:13:25:0b:40:15:99:29:0a:91:56:
4a:81:a9:99:ed:40:fd:87:b6:18:aa:39:4b:50:b6:e7:3a:f0:
2d:98:05:21:d9:f3:7c:bd:10:74:02:e1:a2:31:fb:07:a9:8f:
a9:77:bd:1b:a2:61:ff:09:6e:da:9b:7b:af:d4:2f:2f:a1:b4:
7d:53:3b:6b:f5:cf:88:1c:6b:a8:00:84:cb:90:26:a8:a6:fd:
33:66:68:ed:cd:ce:03:f0:df:5d:4a:bb:8d:24:d7:9d:df:0c:
59:d8:9b:dc:c9:64:02:02:10:f5:9c:5c:68:dd:fb:be:ee:65:
2c:2a:bc:77:cd:b7:9b:cf:18:fd:d0:d3:24:41:8f:1e:5e:10:
a2:cd:f9:66:87:f1:6e:86:57:09:79:42:9c:97:91:ef:32:34:
1e:84:0d:c1:83:81:43:fe:d5:7f:45:94:50:28:28:04:13:22:
22:47:d9:8b:cc:85:d3:17:56:0f:e4:3c:c6:c1:e1:55:8f:d5:
f3:ba:ed:3f:27:ec:b1:0a:69:c5:02:41:fb:9c:82:9f:36:2f:
f4:0d:3c:88:96:5e:22:81:83:ee:02:e1:24:c0:4d:b1:ea:0e:
87:35:fb:8b:ad:a1:f6:6d:c8:ea:3c:20:08:96:69:58:91:56:
83:f9:d6:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9D195H9xJxjEyn1kZp5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MGE1YzZhMWQ4YzIwNjUxZDU2M2UzZjEwYmJhM2E4M2Rm
OGUwYmQwHhcNMjUxMTA0MTMwMDIwWhcNMjUxMTA1MTMwMDIwWjAzMTEwLwYDVQQD
Eyg0MjBlNDU2MjNiMDJhODBjYmE1YzQxZGYyNjY2ZjE3ODQwOGJmMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSqPmRFd+pLYkg9SpwHDS8/KD/LS
DF8C5gRum0st3UvvCaABlxyRNl9/JABt/3jl8DKxsfox4ZThtduY2Q6fykymro07
DHYXubelOiGo97PZzH7BsWeGhJbSlelO49hdzCDSUbCqPKJ03CbktJOXaAS2UK7v
BCxhfgADbxGc7z3Heuk5M5qbiwsLOmazToN1yA8CfzGQumiKq+wqWIQ5xt+aiHV1
IO9InOszVMzhulBPF5ejFWhWF+NEpkm6K53+qsSMXKNsjtdiNlE30tH/FmEknZoQ
iYQs3TZPy+zTzbgwEAlKrIojgCB4Mqo4BF2e3MoP/NltTms1Q8ZbxNyoMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIORWI7AqgMulxB3yZm8XhAi/EGMB8GA1UdIwQY
MBaAFBcKXGodjCBlHVY+PxC7o6g9+OC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEt
MDk2ZjZjZTllZDZjLzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEtMDk2ZjZjZTllZDZj
LzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGsMMzbV
rWsTJQtAFZkpCpFWSoGpme1A/Ye2GKo5S1C25zrwLZgFIdnzfL0QdALhojH7B6mP
qXe9G6Jh/wlu2pt7r9QvL6G0fVM7a/XPiBxrqACEy5AmqKb9M2Zo7c3OA/DfXUq7
jSTXnd8MWdib3MlkAgIQ9ZxcaN37vu5lLCq8d823m88Y/dDTJEGPHl4Qos35Zofx
boZXCXlCnJeR7zI0HoQNwYOBQ/7Vf0WUUCgoBBMiIkfZi8yF0xdWD+Q8xsHhVY/V
87rtPyfssQppxQJB+5yCnzYv9A08iJZeIoGD7gLhJMBNseoOhzX7i62h9m3I6jwg
CJZpWJFWg/nW5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:35 2025 by rpki-client