Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: KaveRjgE1CLLSyazfDgW2MiuP7MNBHA7Ir+UCv/Ms3Q=
Subject key identifier: 16:96:24:69:F3:C0:DB:0F:0C:F6:DF:B7:AB:74:72:72:FE:AE:88:3B
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 019A4DE2115A4BCA17124E18D5FF36EB33ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0FE7
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: TEnohF+zp+dbwRy3oMffFBcl2wQ9HSQogHMkCzPSi1Q=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:5a:4b:ca:17:12:4e:18:d5:ff:36:eb:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=16962469f3c0db0f0cf6dfb7ab747272feae883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:84:8f:88:7d:b0:9e:bb:ea:a6:b8:98:a1:
e1:ad:f1:de:25:c8:e3:61:df:b7:87:4b:a1:38:16:
ff:69:fe:6c:a3:09:26:92:74:69:23:99:be:8b:22:
9a:ac:0d:00:45:d9:d1:a5:45:bb:ce:cd:48:d7:63:
cf:b8:b2:49:88:41:8f:77:47:c9:da:7c:ea:78:38:
48:d4:8f:02:a8:5b:f6:44:36:d3:93:c2:06:0e:a0:
61:27:0d:cd:b5:72:7b:2c:20:f9:e3:ef:5b:ef:1b:
c1:60:7c:b3:12:09:f6:ce:22:fd:05:d6:21:72:80:
ad:53:72:b6:fb:61:43:c4:c7:b5:01:64:e0:f5:4a:
24:55:0e:fe:98:4e:94:90:79:ca:f3:88:6d:e2:2d:
59:49:73:eb:58:a7:c5:94:e1:24:82:dd:86:af:3e:
61:c8:ec:f7:e0:cb:a9:72:2a:9c:2c:e2:83:74:cb:
19:23:43:c8:e5:30:a6:93:3f:f2:02:46:e5:9a:5c:
77:aa:00:3d:d8:0f:37:17:1f:0a:51:8a:5a:04:35:
9a:c3:87:44:7b:59:0f:c9:5a:42:9c:8a:a5:4d:10:
1e:87:6f:b5:5a:3f:ab:e0:47:08:ba:c4:22:8b:09:
79:0b:bc:dc:5c:a7:e2:4f:c6:74:68:32:4e:13:bd:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:24:69:F3:C0:DB:0F:0C:F6:DF:B7:AB:74:72:72:FE:AE:88:3B
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b4:bc:00:e3:cf:ce:4f:a9:a8:b9:f7:af:89:06:48:a8:3b:
9a:4f:c6:f6:4c:b8:7a:b5:19:4e:1d:70:7d:a4:a0:a7:47:ee:
61:4b:05:29:cf:e7:57:83:ab:21:2f:f4:cf:d6:98:64:bc:a2:
68:53:99:9c:89:e0:16:5a:72:92:e1:7d:18:d1:6a:c0:81:ff:
41:bd:21:b6:89:ca:a0:94:9f:19:6d:4d:3f:e1:e1:d8:25:ac:
8f:40:27:30:69:03:b0:d9:4b:d6:ea:19:2b:35:7c:e9:bd:a4:
77:cc:e1:75:1c:98:72:78:a6:4c:a3:0a:43:96:9b:ec:97:cc:
84:87:56:39:82:5d:f6:fc:76:6f:28:ff:c4:c2:2e:be:f2:f7:
3c:b7:1b:d4:54:27:1e:d7:d3:ab:e9:d0:62:72:a5:85:fd:b4:
15:c9:37:79:fe:7b:70:0a:83:2b:f5:e6:3b:57:d3:37:3d:11:
83:ad:1a:9d:3d:43:c4:a1:f4:fa:2f:57:aa:9a:57:70:ee:e9:
9c:9f:2a:35:0c:1b:5a:13:38:e0:b1:af:25:ac:ed:1d:ec:09:
62:0c:2d:ef:f1:13:52:da:14:da:e9:89:7e:93:63:51:f1:5e:
0f:b8:e1:3d:0c:d7:5f:4e:f5:e5:03:06:8a:a9:25:06:49:b6:
82:33:b4:5e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpN4hFaS8oXEk4Y1f826zPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjUxMTA0MDgwMDUyWhcNMjUxMTA1MDgwMDUyWjAzMTEwLwYDVQQD
EygxNjk2MjQ2OWYzYzBkYjBmMGNmNmRmYjdhYjc0NzI3MmZlYWU4ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aqEj4h9sJ676qa4mKHhrfHeJcjj
Yd+3h0uhOBb/af5sowkmknRpI5m+iyKarA0ARdnRpUW7zs1I12PPuLJJiEGPd0fJ
2nzqeDhI1I8CqFv2RDbTk8IGDqBhJw3NtXJ7LCD54+9b7xvBYHyzEgn2ziL9BdYh
coCtU3K2+2FDxMe1AWTg9UokVQ7+mE6UkHnK84ht4i1ZSXPrWKfFlOEkgt2Grz5h
yOz34MupciqcLOKDdMsZI0PI5TCmkz/yAkblmlx3qgA92A83Fx8KUYpaBDWaw4dE
e1kPyVpCnIqlTRAeh2+1Wj+r4EcIusQiiwl5C7zcXKfiT8Z0aDJOE7157QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBaWJGnzwNsPDPbft6t0cnL+rog7MB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrS8
AOPPzk+pqLn3r4kGSKg7mk/G9ky4erUZTh1wfaSgp0fuYUsFKc/nV4OrIS/0z9aY
ZLyiaFOZnIngFlpykuF9GNFqwIH/Qb0htonKoJSfGW1NP+Hh2CWsj0AnMGkDsNlL
1uoZKzV86b2kd8zhdRyYcnimTKMKQ5ab7JfMhIdWOYJd9vx2byj/xMIuvvL3PLcb
1FQnHtfTq+nQYnKlhf20Fck3ef57cAqDK/XmO1fTNz0Rg60anT1DxKH0+i9XqppX
cO7pnJ8qNQwbWhM44LGvJaztHewJYgwt7/ETUtoU2umJfpNjUfFeD7jhPQzXX071
5QMGiqklBkm2gjO0Xg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:28 2025 by rpki-client