Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier: K8ofOsphLMzR/EvQecjbnLjA68iA2V75hYh9q9giNeA=
Subject key identifier: 2C:5F:29:0D:FD:8E:60:09:4F:BB:D3:8A:7D:61:1A:BF:F1:74:DF:FE
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial: 019A511992B902F4C30F8749332D58F627FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number: 15FA
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: pk/x2y7K3jVMw0zCCKE5OwxJA7dLHEFXxlnBai3wF/g=)
2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:92:b9:02:f4:c3:0f:87:49:33:2d:58:f6:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=2c5f290dfd8e60094fbbd38a7d611abff174dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:5a:f0:e1:66:94:35:46:53:62:48:2b:00:
96:b0:07:07:a9:b1:a0:97:57:52:d7:79:57:8d:dd:
71:3a:cd:e8:be:d4:73:68:f9:72:fa:ca:24:b0:ee:
dc:15:ac:3e:0a:9d:4c:b8:58:38:f8:1a:2b:d3:6d:
39:cf:19:33:f6:8a:1e:1f:a6:ca:62:65:2c:c7:e5:
90:38:e2:2d:ba:99:6c:2a:6b:9b:f3:31:7f:ac:67:
61:9b:08:7d:7a:bb:70:53:05:8f:9a:d8:3a:4b:b2:
73:45:11:eb:3e:10:e1:3e:42:ef:9f:d7:e8:a4:db:
a0:18:fb:34:2c:43:8c:95:47:1f:6f:fb:ea:65:6a:
ee:45:fe:6a:81:39:82:29:20:51:23:d1:76:d7:db:
25:a0:93:39:73:f8:b7:f0:77:8d:93:ca:3a:4f:f4:
4c:fe:79:e4:3f:eb:1a:30:8d:a3:a2:05:13:bd:08:
b8:1b:df:59:47:a3:4b:57:4f:5f:d5:31:50:71:2c:
87:bf:00:d4:aa:c6:02:b6:a7:63:f1:28:37:7f:d8:
91:e1:9a:3b:36:77:2c:e1:b4:98:33:67:21:db:46:
89:18:57:18:08:b0:b8:94:ab:79:9b:09:74:a8:46:
5d:14:5d:6f:f9:90:31:17:fe:5f:0e:1c:d3:8a:34:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:29:0D:FD:8E:60:09:4F:BB:D3:8A:7D:61:1A:BF:F1:74:DF:FE
X509v3 Authority Key Identifier:
keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:42:bd:09:9d:47:09:cc:39:20:9b:73:e9:e8:52:59:1f:51:
27:b2:6b:70:80:43:c9:ec:04:4a:e5:2d:92:cb:a4:34:71:32:
22:41:c2:ed:ba:a6:f8:f7:21:75:6c:56:c2:c9:7e:5a:27:a0:
51:e6:e4:81:ee:69:dd:7c:80:0d:8f:09:3c:22:44:e0:e4:9e:
79:7a:98:24:e2:f9:b2:4c:df:4c:10:14:91:cc:4b:e6:bd:f2:
cb:a3:91:d2:1e:eb:e8:a2:66:d0:9c:e9:52:f0:a5:95:c9:38:
53:87:58:5c:56:69:b6:52:88:8b:99:2f:b0:f7:52:87:86:23:
b3:d5:bf:6a:44:0b:f9:b5:3b:9d:a4:22:24:f2:11:40:ed:f5:
e8:8c:13:cb:03:e9:52:ce:20:b7:c3:a8:17:8e:8b:9a:09:54:
f8:ca:03:a1:dd:61:4b:1e:d3:10:d6:2d:33:23:b8:77:c7:6e:
e3:16:ce:0f:4e:04:91:4d:ed:2b:32:c6:15:52:ef:be:bc:a4:
06:56:cf:ab:43:5e:01:c0:c9:64:c9:9f:5e:d4:54:21:d4:81:
d8:6c:bc:4e:bd:f1:fa:db:e5:70:f4:9b:d9:fa:be:53:6a:5b:
01:1e:3d:05:51:d2:fc:48:18:59:e1:f1:f3:28:27:2d:fa:be:
bb:60:6c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGZK5AvTDD4dJMy1Y9if/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YjcxODAwZGRkYzQ5N2Y2MGY5ZWRiNzgzM2M5NDk3M2Fi
N2RjMWMwHhcNMjUxMTA0MjMwMDIxWhcNMjUxMTA1MjMwMDIxWjAzMTEwLwYDVQQD
EygyYzVmMjkwZGZkOGU2MDA5NGZiYmQzOGE3ZDYxMWFiZmYxNzRkZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAZa8OFmlDVGU2JIKwCWsAcHqbGg
l1dS13lXjd1xOs3ovtRzaPly+soksO7cFaw+Cp1MuFg4+Bor0205zxkz9ooeH6bK
YmUsx+WQOOItuplsKmub8zF/rGdhmwh9ertwUwWPmtg6S7JzRRHrPhDhPkLvn9fo
pNugGPs0LEOMlUcfb/vqZWruRf5qgTmCKSBRI9F219sloJM5c/i38HeNk8o6T/RM
/nnkP+saMI2jogUTvQi4G99ZR6NLV09f1TFQcSyHvwDUqsYCtqdj8Sg3f9iR4Zo7
Nncs4bSYM2ch20aJGFcYCLC4lKt5mwl0qEZdFF1v+ZAxF/5fDhzTijQClQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxfKQ39jmAJT7vTin1hGr/xdN/+MB8GA1UdIwQY
MBaAFBS3GADd3El/YPntt4M8lJc6t9wcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQt
ZGRmMGI4YjA5NjE2LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQtZGRmMGI4YjA5NjE2
LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUK9CZ1H
Ccw5IJtz6ehSWR9RJ7JrcIBDyewESuUtksukNHEyIkHC7bqm+PchdWxWwsl+Wieg
Uebkge5p3XyADY8JPCJE4OSeeXqYJOL5skzfTBAUkcxL5r3yy6OR0h7r6KJm0Jzp
UvCllck4U4dYXFZptlKIi5kvsPdSh4Yjs9W/akQL+bU7naQiJPIRQO316IwTywPp
Us4gt8OoF46LmglU+MoDod1hSx7TENYtMyO4d8du4xbOD04EkU3tKzLGFVLvvryk
BlbPq0NeAcDJZMmfXtRUIdSB2Gy8Tr3x+tvlcPSb2fq+U2pbAR49BVHS/EgYWeHx
8ygnLfq+u2BsHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:58 2025 by rpki-client