Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: fUYzJsvcb5Egg/MfDTTrLLLX7ZfPpnWYFRnbUHCDBRY=
Subject key identifier: FF:1E:F7:3E:15:66:62:2A:44:25:99:1A:24:04:9D:E5:8E:F6:A5:2B
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019A4E4FE882D993B428C303350B58F6497D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:50 +0000
Manifest this update: Tue 04 Nov 2025 10:00:50 +0000
Manifest next update: Wed 05 Nov 2025 10:00:50 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: Jy5KUc4UVPLw80tut6rLEhQqvy5b1cgaw6e+JD2TfC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e8:82:d9:93:b4:28:c3:03:35:0b:58:f6:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Nov 4 10:00:50 2025 GMT
Not After : Nov 5 10:00:50 2025 GMT
Subject: CN=ff1ef73e1566622a4425991a24049de58ef6a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:88:7c:14:00:92:50:4e:ea:86:f9:8f:fc:
54:94:fc:74:e6:64:ca:c7:d6:5f:2f:45:52:e8:e7:
b6:19:53:56:12:b8:7e:0c:f4:21:c5:7c:d0:5c:88:
95:71:ff:9f:7b:75:49:af:c7:51:f8:dd:35:e3:5e:
b7:68:7f:bf:d9:9f:90:90:50:d0:65:f7:04:71:24:
58:5c:d0:b4:e0:d6:9a:d5:45:22:a3:24:93:34:72:
2f:14:32:e5:45:79:99:2a:20:d7:d3:f9:d0:7a:98:
3f:5b:6d:0e:80:77:0d:aa:55:94:69:64:df:69:54:
01:8a:dd:e8:4f:2e:cd:07:51:5a:2d:81:33:bc:04:
3b:cf:b3:97:77:b6:a2:64:9b:61:d0:2e:d1:59:3a:
db:5c:dd:85:f9:4b:b5:02:6d:9c:68:39:0e:9c:4a:
90:ae:ee:be:ff:2d:16:8d:c7:ba:5d:0c:d0:ba:e7:
b4:68:cd:d7:37:7c:c6:86:a0:ac:76:5b:ed:34:ca:
6c:89:51:92:ca:7f:10:46:49:ed:a6:89:7f:0d:22:
64:3a:a6:18:77:85:62:29:aa:99:32:fb:08:6c:a3:
40:b2:e9:e3:73:8d:46:2b:17:3e:43:9f:8e:8d:eb:
da:70:00:77:42:24:c3:d8:bb:46:37:a5:ab:78:90:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:F7:3E:15:66:62:2A:44:25:99:1A:24:04:9D:E5:8E:F6:A5:2B
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7d:3f:d3:22:4c:a2:6d:19:24:dc:5c:78:34:27:16:6b:34:
39:7d:c6:2b:04:c9:eb:8b:f2:d8:6d:9c:65:eb:93:ec:78:b0:
7b:44:2c:7a:fb:bf:67:b6:4a:63:3b:38:dc:f9:05:16:44:b4:
e8:20:a2:86:1c:94:35:e4:de:7e:e8:7a:9c:66:08:e6:f8:5b:
5b:6b:34:d2:2b:3c:f3:5f:1a:04:1a:ca:d6:a5:bd:6d:af:2c:
9f:5a:95:60:c7:0c:0a:6c:b4:5b:77:15:15:bb:34:df:35:2e:
9e:fb:16:30:a0:d4:b9:ad:03:63:94:4c:95:b6:ed:bf:12:d2:
76:e1:c2:c1:9d:aa:29:ca:87:7c:c4:3b:cc:f0:15:b5:75:66:
67:6c:e3:71:d5:f5:ee:2e:e9:64:d1:28:4c:e6:c5:95:78:77:
fa:96:ab:24:4f:3c:21:a9:c1:9b:b1:1b:23:f1:62:b9:41:58:
eb:f5:f1:2e:90:85:cd:b4:90:c5:90:04:ad:fe:b6:84:70:5d:
f0:31:85:08:51:ec:4c:d2:2c:62:81:dd:3b:b4:d2:50:1a:10:
84:95:d4:44:a2:86:24:8e:c2:4e:23:0a:e7:4f:2e:3d:f9:9e:
dc:ef:11:f0:a2:33:4a:52:e1:fa:b2:61:d2:01:f8:5f:af:34:
a9:b6:f6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT+iC2ZO0KMMDNQtY9kl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0Y2JhMWIwYzMwNWNjNjJmOTI5N2MyZDk5MTg5OTQ1Yjk3
Nzk1ZTEwHhcNMjUxMTA0MTAwMDUwWhcNMjUxMTA1MTAwMDUwWjAzMTEwLwYDVQQD
EyhmZjFlZjczZTE1NjY2MjJhNDQyNTk5MWEyNDA0OWRlNThlZjZhNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfSIfBQAklBO6ob5j/xUlPx05mTK
x9ZfL0VS6Oe2GVNWErh+DPQhxXzQXIiVcf+fe3VJr8dR+N014163aH+/2Z+QkFDQ
ZfcEcSRYXNC04Naa1UUioySTNHIvFDLlRXmZKiDX0/nQepg/W20OgHcNqlWUaWTf
aVQBit3oTy7NB1FaLYEzvAQ7z7OXd7aiZJth0C7RWTrbXN2F+Uu1Am2caDkOnEqQ
ru6+/y0Wjce6XQzQuue0aM3XN3zGhqCsdlvtNMpsiVGSyn8QRkntpol/DSJkOqYY
d4ViKaqZMvsIbKNAsunjc41GKxc+Q5+OjevacAB3QiTD2LtGN6WreJCPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8e9z4VZmIqRCWZGiQEneWO9qUrMB8GA1UdIwQY
MBaAFBTLobDDBcxi+Sl8LZkYmUW5d5XhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNGExNjctNjZhNy00ZmU3LWJjNDYt
MjMxMWZmODc3NzIyLzEvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNGExNjctNjZhNy00ZmU3LWJjNDYtMjMxMWZmODc3NzIy
LzEvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtH0/0yJM
om0ZJNxceDQnFms0OX3GKwTJ64vy2G2cZeuT7Hiwe0Qsevu/Z7ZKYzs43PkFFkS0
6CCihhyUNeTefuh6nGYI5vhbW2s00is8818aBBrK1qW9ba8sn1qVYMcMCmy0W3cV
Fbs03zUunvsWMKDUua0DY5RMlbbtvxLSduHCwZ2qKcqHfMQ7zPAVtXVmZ2zjcdX1
7i7pZNEoTObFlXh3+parJE88IanBm7EbI/FiuUFY6/XxLpCFzbSQxZAErf62hHBd
8DGFCFHsTNIsYoHdO7TSUBoQhJXURKKGJI7CTiMK508uPfme3O8R8KIzSlLh+rJh
0gH4X680qbb2GQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:12 2025 by rpki-client