Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: cHWXYMkj+/aYXmiDma8A00mIglMD+ByiRRcA2Sfc7qA=
Subject key identifier: A2:C5:B5:10:E9:07:1A:6B:CB:A2:FB:18:C8:E6:E4:27:2F:3E:38:B5
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 019A4D3CB359BF1581B18CC4ED103819496F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:14 +0000
Manifest this update: Tue 04 Nov 2025 05:00:14 +0000
Manifest next update: Wed 05 Nov 2025 05:00:14 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: p1g3FRoVNw0TfwcNBXXoQqzt48xdcXSR6x88OWM25wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b3:59:bf:15:81:b1:8c:c4:ed:10:38:19:49:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Nov 4 05:00:14 2025 GMT
Not After : Nov 5 05:00:14 2025 GMT
Subject: CN=a2c5b510e9071a6bcba2fb18c8e6e4272f3e38b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:2c:f0:d6:bf:99:dc:6c:66:fe:90:9f:ce:
f2:3c:56:c0:98:07:bb:12:db:bf:a9:d1:48:c4:fa:
d1:43:1c:7b:09:19:81:02:fb:4d:14:83:83:40:df:
c6:ee:ca:25:76:cf:04:7c:88:d2:fe:6e:95:da:3f:
9b:ab:eb:22:a4:06:aa:8a:d8:c8:dc:d4:8c:cf:5d:
c8:0a:bc:27:6f:38:b7:50:88:5b:73:31:4f:c5:b8:
09:48:90:88:0d:da:1a:ab:f1:4d:3f:5a:97:58:82:
fe:d0:88:28:c8:9b:8e:bc:7c:a9:59:91:84:59:1f:
ea:b5:39:ce:07:82:e6:9b:b3:27:1a:3f:2c:a9:74:
18:e5:50:9c:4f:c8:ae:54:9a:da:94:f7:82:32:7f:
69:5b:7d:04:9b:94:9a:78:da:93:03:d3:de:42:db:
05:c7:74:de:63:4d:fa:06:de:36:4e:c8:0f:ad:89:
50:61:9c:dd:25:45:ad:e8:5f:6e:4a:db:67:14:b0:
59:cb:58:62:5e:52:89:c2:0f:fa:ea:f8:6a:78:f3:
ef:35:ed:35:f3:ed:95:ce:c0:f0:9f:71:3d:57:5f:
ac:05:4d:c9:7f:25:3e:ad:cf:0e:13:f2:13:2a:e2:
50:e6:cf:29:14:3b:0a:57:1f:5a:df:6f:ba:6e:ef:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:B5:10:E9:07:1A:6B:CB:A2:FB:18:C8:E6:E4:27:2F:3E:38:B5
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:45:41:c6:f9:16:25:56:df:e9:4e:f1:d8:ce:e0:51:45:0d:
f5:e7:72:a4:b7:56:81:90:f9:7e:47:ed:ed:60:38:37:a3:5c:
c9:4a:4c:1e:5c:f9:04:c5:06:a2:f8:81:4e:e4:be:e7:b4:c7:
63:3b:fc:29:e2:72:36:9b:a8:ff:84:bf:ab:22:68:e9:2f:70:
1f:11:82:81:b5:84:b5:f0:85:9c:72:3e:97:ff:1d:85:66:94:
a3:89:fc:6b:63:5b:f9:ff:63:40:20:a0:44:e4:12:3d:04:50:
a4:43:2e:37:e0:54:e4:af:84:fe:5a:d5:cf:34:b8:59:45:61:
d2:6e:9a:7a:e5:8e:de:1b:ba:b8:46:ff:b7:80:9c:40:be:53:
aa:f2:b3:59:2d:cb:73:99:aa:23:6f:ba:9c:89:4c:20:ca:ae:
f4:06:05:db:eb:52:5c:4b:b5:6c:a5:4c:68:2e:80:22:7a:1b:
b0:d0:22:11:04:8c:eb:73:2e:8b:4c:17:0d:47:7b:22:06:88:
c2:fd:58:13:6c:b0:34:d8:10:e3:7e:15:92:5d:b7:1b:28:f4:
cf:9d:11:ab:c6:e7:df:a5:c5:28:8f:d8:b1:a2:15:b5:13:e1:
7b:07:28:33:ee:14:3b:8c:3d:67:7a:72:5d:d8:92:d2:8a:8a:
e8:82:41:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPLNZvxWBsYzE7RA4GUlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NjI4ZjlmZGFhYjhiODU0OTRiYzMzODgwOTFhMTIyYjBi
YmE1YzgwHhcNMjUxMTA0MDUwMDE0WhcNMjUxMTA1MDUwMDE0WjAzMTEwLwYDVQQD
EyhhMmM1YjUxMGU5MDcxYTZiY2JhMmZiMThjOGU2ZTQyNzJmM2UzOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XMs8Na/mdxsZv6Qn87yPFbAmAe7
Etu/qdFIxPrRQxx7CRmBAvtNFIODQN/G7solds8EfIjS/m6V2j+bq+sipAaqitjI
3NSMz13ICrwnbzi3UIhbczFPxbgJSJCIDdoaq/FNP1qXWIL+0IgoyJuOvHypWZGE
WR/qtTnOB4Lmm7MnGj8sqXQY5VCcT8iuVJralPeCMn9pW30Em5SaeNqTA9PeQtsF
x3TeY036Bt42TsgPrYlQYZzdJUWt6F9uSttnFLBZy1hiXlKJwg/66vhqePPvNe01
8+2VzsDwn3E9V1+sBU3JfyU+rc8OE/ITKuJQ5s8pFDsKVx9a32+6bu9fKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLFtRDpBxpry6L7GMjm5CcvPji1MB8GA1UdIwQY
MBaAFBVij5/aq4uFSUvDOICRoSKwu6XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODkt
OTZmMDQwYmJiYTBkLzEvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODktOTZmMDQwYmJiYTBk
LzEvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0VBxvkW
JVbf6U7x2M7gUUUN9edypLdWgZD5fkft7WA4N6NcyUpMHlz5BMUGoviBTuS+57TH
Yzv8KeJyNpuo/4S/qyJo6S9wHxGCgbWEtfCFnHI+l/8dhWaUo4n8a2Nb+f9jQCCg
ROQSPQRQpEMuN+BU5K+E/lrVzzS4WUVh0m6aeuWO3hu6uEb/t4CcQL5TqvKzWS3L
c5mqI2+6nIlMIMqu9AYF2+tSXEu1bKVMaC6AInobsNAiEQSM63Mui0wXDUd7IgaI
wv1YE2ywNNgQ434Vkl23Gyj0z50Rq8bn36XFKI/YsaIVtRPhewcoM+4UO4w9Z3py
XdiS0oqK6IJBSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:27 2025 by rpki-client