Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier: 0/gn23tS3Cb0do0Jn5QgU6mgLDrYYIaaDwH53qme6Hk=
Subject key identifier: B7:4D:A0:74:93:77:78:BD:49:A9:0A:63:0C:D4:B5:34:1C:62:1B:3B
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial: 019A4F994D8980B9D2DE4B3B7F8F9D42A76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: Og6KHF1eGjuj0zzie78JyMk9SfG97fOSOOFWrbonzp4=)
2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:89:80:b9:d2:de:4b:3b:7f:8f:9d:42:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=b74da074937778bd49a90a630cd4b5341c621b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:07:5e:52:a1:98:0b:25:e6:ac:02:12:93:
8e:5a:34:07:6c:94:c5:48:4e:bd:a8:93:1a:3c:c8:
55:a2:8b:28:86:fd:9f:4e:55:91:e3:f8:e1:df:4f:
d3:74:b8:aa:4e:74:25:b2:a7:e0:a0:4d:fc:e3:cb:
20:f4:1d:fb:2b:5d:ad:4c:23:9f:74:23:c4:e7:cc:
10:74:ee:e2:b5:71:1d:83:0a:4c:47:00:73:59:3c:
e9:84:79:36:ef:a9:a2:2e:61:5d:d4:84:d8:ea:27:
5d:52:30:c7:18:c2:a5:10:8f:5b:59:1f:73:27:cc:
da:c5:71:b6:2c:6b:d6:7c:6f:23:25:da:f7:b1:08:
54:32:d2:ec:32:4d:5b:be:89:9d:18:43:17:88:03:
03:b9:24:89:48:06:a8:9e:dd:69:d2:d8:7e:7b:61:
55:ef:e6:fb:a3:29:ed:2d:f4:4d:dc:04:8c:dc:1d:
87:49:e3:4a:25:b7:da:1b:09:51:82:7f:99:1f:6f:
b4:55:0b:c6:df:d9:1f:0b:63:6e:45:78:97:9d:ca:
3e:fe:27:11:a0:dc:ff:fb:f3:30:61:fe:5b:88:44:
83:b8:ca:18:62:98:03:c3:37:de:07:9b:c4:5b:ec:
ff:64:3f:3d:ff:43:2d:8f:9f:76:dd:ef:2c:ed:6a:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:A0:74:93:77:78:BD:49:A9:0A:63:0C:D4:B5:34:1C:62:1B:3B
X509v3 Authority Key Identifier:
keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:1f:7d:7e:6f:89:83:5b:0e:23:34:e5:4e:b1:53:9e:2b:
6f:a3:de:f0:0f:e7:c7:49:da:a7:5c:86:d9:3f:e0:bf:63:af:
53:49:32:dd:b5:52:4a:ac:e5:17:1b:85:64:15:9c:45:fd:a2:
05:d2:72:e1:0b:5a:b0:11:6a:20:5e:2b:5e:64:3d:ef:f4:e1:
73:16:d0:27:1a:6a:fc:cb:65:1d:b1:aa:99:ce:e8:e3:66:9a:
69:aa:0f:c8:32:42:22:2e:d2:91:6a:5b:b2:b3:b3:b8:f4:89:
9b:17:c2:99:28:24:82:ba:ed:19:4f:75:a2:6b:92:a5:a7:91:
19:33:c6:1c:07:3e:8d:f2:b6:2f:90:28:10:ce:66:d6:79:1a:
52:f1:86:f7:b7:a7:fe:75:6c:81:a6:91:1c:34:b4:0b:76:8d:
dc:6d:94:88:ff:9b:cc:f1:61:61:66:f5:d2:37:e7:99:3c:9f:
13:26:b0:88:0e:6f:25:09:13:95:4b:52:21:70:4f:82:46:bd:
2f:ff:e0:a7:51:ef:ec:c2:60:91:f0:1d:7e:5c:31:48:ca:c0:
82:ea:3c:37:ef:2f:a3:58:fd:89:3c:40:76:9e:0f:69:f9:ad:
af:24:89:e5:a0:d6:1b:4c:ac:68:f1:94:d2:ff:88:c6:8e:d8:
d0:88:9f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmU2JgLnS3ks7f4+dQqdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2
YzI2YzAwHhcNMjUxMTA0MTYwMDM4WhcNMjUxMTA1MTYwMDM4WjAzMTEwLwYDVQQD
EyhiNzRkYTA3NDkzNzc3OGJkNDlhOTBhNjMwY2Q0YjUzNDFjNjIxYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RAHXlKhmAsl5qwCEpOOWjQHbJTF
SE69qJMaPMhVoosohv2fTlWR4/jh30/TdLiqTnQlsqfgoE3848sg9B37K12tTCOf
dCPE58wQdO7itXEdgwpMRwBzWTzphHk276miLmFd1ITY6iddUjDHGMKlEI9bWR9z
J8zaxXG2LGvWfG8jJdr3sQhUMtLsMk1bvomdGEMXiAMDuSSJSAaont1p0th+e2FV
7+b7oyntLfRN3ASM3B2HSeNKJbfaGwlRgn+ZH2+0VQvG39kfC2NuRXiXnco+/icR
oNz/+/MwYf5biESDuMoYYpgDwzfeB5vEW+z/ZD89/0Mtj5923e8s7WoNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdNoHSTd3i9SakKYwzUtTQcYhs7MB8GA1UdIwQY
MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt
ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0
LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0sffX5v
iYNbDiM05U6xU54rb6Pe8A/nx0nap1yG2T/gv2OvU0ky3bVSSqzlFxuFZBWcRf2i
BdJy4QtasBFqIF4rXmQ97/ThcxbQJxpq/MtlHbGqmc7o42aaaaoPyDJCIi7SkWpb
srOzuPSJmxfCmSgkgrrtGU91omuSpaeRGTPGHAc+jfK2L5AoEM5m1nkaUvGG97en
/nVsgaaRHDS0C3aN3G2UiP+bzPFhYWb10jfnmTyfEyawiA5vJQkTlUtSIXBPgka9
L//gp1Hv7MJgkfAdflwxSMrAguo8N+8vo1j9iTxAdp4PafmtrySJ5aDWG0ysaPGU
0v+Ixo7Y0IifuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:10 2025 by rpki-client