Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: 55dOU0nStYgOwkmaCU4dEVEvbwrkkNjgmTs0q6pPAjg=
Subject key identifier: 22:06:5B:CE:E2:F9:E8:53:31:FA:B9:2B:77:B2:22:AA:A2:3C:27:68
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019A55644C5FC6EFFB5B1511B1FBC77A1B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 19:00:27 +0000
Manifest this update: Wed 05 Nov 2025 19:00:27 +0000
Manifest next update: Thu 06 Nov 2025 19:00:27 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: dpuECxlyy6O2F5crQvml4iwJZewvv8O1UNV/jtQ0iRQ=)
2: wFxMftMrQqOgNqLanUvVrEPuk0E.roa (hash: Kt7E8p9gxrWDn7h3MqNJ+mao+upazAnAmbSkQF2stto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:4c:5f:c6:ef:fb:5b:15:11:b1:fb:c7:7a:1b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Nov 5 19:00:27 2025 GMT
Not After : Nov 6 19:00:27 2025 GMT
Subject: CN=22065bcee2f9e85331fab92b77b222aaa23c2768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:be:bf:3b:c9:d8:27:d7:0a:64:9d:ba:90:
29:9c:06:35:59:5d:4f:a7:b8:f7:1f:7a:03:13:c6:
1b:38:97:2b:7f:e9:53:76:3e:1b:1d:b1:65:11:56:
af:ae:17:e6:b5:2a:ea:2f:7d:dd:ed:93:44:11:59:
d3:fa:71:b3:22:fd:bc:dc:62:af:6e:3b:36:16:d2:
bc:88:ef:b4:b6:16:93:3d:81:a3:3b:a4:78:88:d6:
ba:8f:b0:09:ff:86:d5:58:91:0a:d2:c5:41:a5:fc:
02:74:68:d4:52:84:c9:1d:55:69:d6:81:31:56:b3:
ae:15:fd:05:16:31:6c:2f:84:cb:62:33:7d:b7:f3:
ca:c9:45:59:66:fd:e6:a7:03:fa:f0:9e:a7:7e:fc:
89:0d:d4:8f:c2:43:ec:71:18:9a:a9:51:09:2f:49:
2e:7c:c8:3f:91:14:25:17:f8:41:5b:c3:78:52:10:
4e:d4:4b:50:60:4f:e8:4f:33:8e:29:24:e4:8c:74:
44:bc:63:a0:4d:68:2f:cf:2b:31:7f:af:1f:69:61:
bd:25:fe:cc:b2:54:c9:9b:9f:d9:cc:cc:cc:5d:a6:
94:fa:af:ab:54:d1:66:65:0f:5c:41:9f:56:40:15:
c5:33:c8:5b:ed:9f:0d:e6:ca:aa:14:3c:70:99:93:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:5B:CE:E2:F9:E8:53:31:FA:B9:2B:77:B2:22:AA:A2:3C:27:68
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:5b:77:d9:fb:a2:24:c8:f5:f8:3a:aa:79:57:6f:59:e1:
bb:9b:83:92:67:2d:9e:e4:53:99:4f:92:9c:0a:b0:7b:58:68:
33:88:d6:cd:66:00:de:6c:ee:28:7b:00:1a:ae:1e:78:a1:2c:
07:d7:86:19:8a:45:33:0c:f9:17:94:21:bd:dc:04:a9:ee:91:
60:d8:98:fd:41:4f:70:bc:d5:b8:95:e7:48:5b:17:b6:fd:47:
80:32:cb:5b:e5:2f:25:b4:c7:dc:eb:17:7d:a3:46:a1:ad:59:
b1:0d:59:dd:10:18:dc:e5:f1:41:2f:aa:86:8a:86:e4:a0:bc:
e5:50:bf:c7:97:c6:0d:73:6b:d5:68:94:0f:19:08:3f:fd:0c:
ec:e9:4b:66:a9:d2:e9:c3:32:5f:5b:27:5a:a4:5e:9e:de:50:
f4:ac:03:4c:5f:4a:4f:e5:f7:5e:58:7c:b0:04:6d:64:3e:1d:
d8:d0:dc:27:92:7d:8f:6f:a6:3f:35:aa:08:20:47:ef:6a:fd:
a8:98:34:38:1c:51:36:77:b8:b7:66:ca:71:d9:89:7f:cc:78:
ff:77:34:b4:b7:f2:62:88:9d:dd:e2:16:9d:f5:53:0b:93:32:
ea:1a:2d:ad:1c:a6:b1:a7:bd:97:79:37:51:5f:a0:c2:ed:dd:
e1:81:5a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVZExfxu/7WxURsfvHehuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjUxMTA1MTkwMDI3WhcNMjUxMTA2MTkwMDI3WjAzMTEwLwYDVQQD
EygyMjA2NWJjZWUyZjllODUzMzFmYWI5MmI3N2IyMjJhYWEyM2MyNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQu+vzvJ2CfXCmSdupApnAY1WV1P
p7j3H3oDE8YbOJcrf+lTdj4bHbFlEVavrhfmtSrqL33d7ZNEEVnT+nGzIv283GKv
bjs2FtK8iO+0thaTPYGjO6R4iNa6j7AJ/4bVWJEK0sVBpfwCdGjUUoTJHVVp1oEx
VrOuFf0FFjFsL4TLYjN9t/PKyUVZZv3mpwP68J6nfvyJDdSPwkPscRiaqVEJL0ku
fMg/kRQlF/hBW8N4UhBO1EtQYE/oTzOOKSTkjHREvGOgTWgvzysxf68faWG9Jf7M
slTJm5/ZzMzMXaaU+q+rVNFmZQ9cQZ9WQBXFM8hb7Z8N5sqqFDxwmZMUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIGW87i+ehTMfq5K3eyIqqiPCdoMB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmphbd9n7
oiTI9fg6qnlXb1nhu5uDkmctnuRTmU+SnAqwe1hoM4jWzWYA3mzuKHsAGq4eeKEs
B9eGGYpFMwz5F5QhvdwEqe6RYNiY/UFPcLzVuJXnSFsXtv1HgDLLW+UvJbTH3OsX
faNGoa1ZsQ1Z3RAY3OXxQS+qhoqG5KC85VC/x5fGDXNr1WiUDxkIP/0M7OlLZqnS
6cMyX1snWqRent5Q9KwDTF9KT+X3Xlh8sARtZD4d2NDcJ5J9j2+mPzWqCCBH72r9
qJg0OBxRNne4t2bKcdmJf8x4/3c0tLfyYoid3eIWnfVTC5My6hotrRymsae9l3k3
UV+gwu3d4YFaEQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:45 2025 by rpki-client