Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: K4zjTN/6jkiyQkh1XGYxn4BmP1CacOin24gdCMM8tUU=
Subject key identifier: 0A:27:30:EA:E1:AE:E1:98:AE:03:18:CF:53:7C:2D:0B:EF:0C:82:B3
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019A4EF5B3C9A55DB22FEC104A4E6CF05AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: WPkxv1bepfqdF+sWhZRyyfddftYnY3EL0duma8f9s38=)
2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b3:c9:a5:5d:b2:2f:ec:10:4a:4e:6c:f0:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=0a2730eae1aee198ae0318cf537c2d0bef0c82b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:0b:51:09:4f:36:40:03:79:21:35:3c:a8:
a1:21:1a:21:38:f2:d7:8e:02:ac:36:55:20:03:4f:
fb:47:cf:c1:5c:00:35:49:31:73:a4:85:a2:ad:e8:
ad:4c:2b:88:50:04:3c:bb:c5:40:44:38:17:d0:d4:
b6:84:1a:b0:e5:5f:94:c1:c1:46:dc:5b:e5:76:d6:
5f:ed:87:da:a9:9e:ca:bf:08:8a:5d:32:07:04:27:
67:6d:df:9f:00:67:87:c5:f1:ef:78:4d:1b:de:a3:
dc:df:7a:bc:12:a1:d7:97:04:2a:74:ae:f8:6a:3e:
6c:af:a8:6a:09:95:2b:ff:ed:1a:41:49:e8:00:c2:
1e:a2:d7:a3:da:d7:21:8e:92:c5:81:20:f3:6e:54:
6b:a7:ea:04:f5:6a:b9:45:7b:7a:c5:d1:f8:91:c1:
8a:0f:ba:2f:6d:07:a1:0f:7b:6e:51:b2:cf:ac:b0:
78:b4:93:c8:8d:2f:dd:8d:37:4a:ab:5e:fb:ea:d9:
03:ab:6a:2e:dd:c9:cb:fa:d7:a4:1f:8e:6a:4c:cb:
ef:3b:d4:a6:07:3b:68:f0:d1:52:33:15:bd:f3:8d:
4a:48:33:5d:32:e5:b0:0b:bd:29:b5:1d:09:d8:f9:
09:7c:b8:38:e5:f8:67:0c:77:09:ee:f7:9f:4b:a4:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:30:EA:E1:AE:E1:98:AE:03:18:CF:53:7C:2D:0B:EF:0C:82:B3
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:dd:9a:b6:89:a8:48:31:c9:78:c3:f4:fc:ad:7a:18:b1:
cf:37:75:7c:49:05:c6:d4:5d:d9:0e:cc:6a:a1:bd:4c:5e:02:
67:1e:83:d9:42:0c:dd:1b:e7:46:fb:96:91:08:64:35:97:9c:
a4:96:85:38:03:07:d6:7e:cf:4b:f0:52:a3:25:e4:5e:54:78:
17:37:25:d3:02:b2:b5:c6:de:2b:dc:f3:ad:c7:29:9b:7d:03:
86:18:b1:73:5d:7c:06:61:7b:7a:2f:b9:c8:96:92:54:28:40:
90:bb:2b:33:86:3b:e8:e1:35:17:e5:12:b2:3a:dd:f9:28:32:
49:2e:61:26:1a:a5:88:d8:f9:1e:1f:2d:d8:0d:d4:4c:a7:14:
16:f8:bf:41:66:6c:85:b3:c9:01:cc:a4:bd:83:5b:70:2f:a7:
57:44:be:8c:c8:50:be:9f:f4:56:d9:85:fb:02:cc:3d:f7:2c:
5c:7f:66:73:cf:b2:0d:bf:db:27:79:c3:fd:af:73:f1:9e:2a:
c0:a3:f7:77:6a:32:48:9f:5a:76:4b:47:f5:2c:29:7f:3b:0a:
1e:45:e7:7d:c5:bb:33:7e:8d:99:0e:01:83:3b:de:32:90:80:
80:ce:fb:0e:f5:79:41:8d:f4:39:27:92:5c:f9:bf:e0:90:99:
f9:fd:9c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bPJpV2yL+wQSk5s8FqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm
MDkxZWQwHhcNMjUxMTA0MTMwMTU2WhcNMjUxMTA1MTMwMTU2WjAzMTEwLwYDVQQD
EygwYTI3MzBlYWUxYWVlMTk4YWUwMzE4Y2Y1MzdjMmQwYmVmMGM4MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbULUQlPNkADeSE1PKihIRohOPLX
jgKsNlUgA0/7R8/BXAA1STFzpIWireitTCuIUAQ8u8VARDgX0NS2hBqw5V+UwcFG
3FvldtZf7YfaqZ7KvwiKXTIHBCdnbd+fAGeHxfHveE0b3qPc33q8EqHXlwQqdK74
aj5sr6hqCZUr/+0aQUnoAMIeotej2tchjpLFgSDzblRrp+oE9Wq5RXt6xdH4kcGK
D7ovbQehD3tuUbLPrLB4tJPIjS/djTdKq1776tkDq2ou3cnL+tekH45qTMvvO9Sm
Bzto8NFSMxW9841KSDNdMuWwC70ptR0J2PkJfLg45fhnDHcJ7vefS6RqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAonMOrhruGYrgMYz1N8LQvvDIKzMB8GA1UdIwQY
MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt
NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm
LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzzdmraJ
qEgxyXjD9Pytehixzzd1fEkFxtRd2Q7MaqG9TF4CZx6D2UIM3RvnRvuWkQhkNZec
pJaFOAMH1n7PS/BSoyXkXlR4Fzcl0wKytcbeK9zzrccpm30Dhhixc118BmF7ei+5
yJaSVChAkLsrM4Y76OE1F+USsjrd+SgySS5hJhqliNj5Hh8t2A3UTKcUFvi/QWZs
hbPJAcykvYNbcC+nV0S+jMhQvp/0VtmF+wLMPfcsXH9mc8+yDb/bJ3nD/a9z8Z4q
wKP3d2oySJ9adktH9SwpfzsKHkXnfcW7M36NmQ4BgzveMpCAgM77DvV5QY30OSeS
XPm/4JCZ+f2cag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:24 2025 by rpki-client