Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: KFvbh+94JKxYM1TDEK4U9yBCtZ5GJo5Wjt3g+BpNiiI=
Subject key identifier: ED:CF:B9:7B:6A:64:64:A7:7F:1A:31:E4:04:05:77:06:D1:F0:1A:8F
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019A4EF5DD44D4DA33CEB96DBA05236F446E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:02:06 +0000
Manifest this update: Tue 04 Nov 2025 13:02:06 +0000
Manifest next update: Wed 05 Nov 2025 13:02:06 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: 2x7LaTAFP5vPG4Tsr/vQdyioze6gwRaRa95cgRtPrkc=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dd:44:d4:da:33:ce:b9:6d:ba:05:23:6f:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Nov 4 13:02:06 2025 GMT
Not After : Nov 5 13:02:06 2025 GMT
Subject: CN=edcfb97b6a6464a77f1a31e404057706d1f01a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:f9:2c:b5:2e:d6:e4:75:3e:b5:b5:4f:72:
d1:04:5f:56:e3:7f:84:d7:ed:bd:01:a7:51:ec:7f:
55:69:7c:9f:39:77:54:36:56:63:60:0e:a3:22:9a:
75:26:60:11:ee:70:8b:0d:0f:14:40:ab:bf:b1:94:
d8:4e:08:7a:04:91:b0:b6:67:8c:e3:c0:14:44:93:
f1:53:a6:67:92:15:5a:27:4b:1a:2b:3c:be:2d:6f:
28:fb:56:2f:a5:c1:52:ee:5e:6a:ed:eb:e9:c7:af:
be:09:fa:cd:31:2c:56:62:07:c6:96:05:b8:8e:7c:
fb:43:29:2d:e3:dd:1c:e6:78:f9:91:86:8b:b6:37:
2f:48:b8:30:99:48:8b:ba:4c:22:a5:73:67:d0:cb:
65:e1:a3:ea:04:be:62:47:e0:1d:a5:64:57:1c:ba:
27:a1:97:f5:58:9d:d9:10:83:02:74:53:09:0f:b2:
77:74:a9:50:a6:95:25:cf:65:29:53:c4:3c:01:29:
7b:44:36:b1:ba:e4:f5:99:9a:45:03:ff:b1:98:71:
3a:d2:8c:06:b5:37:92:e9:33:68:13:c3:37:27:65:
33:55:da:cd:53:07:1e:2e:4c:21:d1:01:72:57:d9:
fb:b7:23:4d:02:9d:d7:ce:3f:c5:2a:bc:ce:4d:af:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:B9:7B:6A:64:64:A7:7F:1A:31:E4:04:05:77:06:D1:F0:1A:8F
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dc:d8:ca:ff:a2:81:6c:e6:52:1f:5c:4e:f0:fb:d2:c1:42:
ca:57:c6:0a:c4:7f:02:4b:82:0d:79:a1:b4:81:f0:62:f3:48:
da:f6:4d:c6:90:c7:2a:1b:9d:42:38:45:6b:0d:0a:52:24:05:
e1:f3:75:3f:92:ed:1d:3e:7b:7b:60:10:77:4d:12:ae:ce:bc:
5e:39:74:56:8c:8e:9f:11:85:fa:e1:47:9c:be:f8:80:98:5b:
bd:d2:b1:56:ff:9e:b3:3f:2a:a9:13:77:9e:b3:76:12:61:0a:
8a:31:3d:81:2a:58:5e:1a:cd:4c:72:67:68:49:18:29:c8:04:
d5:9c:92:48:dd:08:3c:fe:9f:40:e9:a0:2e:86:9e:e5:c9:39:
9e:f0:52:d4:f9:3f:ca:2c:68:12:ae:5c:89:31:5e:ee:ac:55:
9f:c8:29:39:35:7e:77:d2:53:81:6e:6b:ac:f3:13:7d:3a:4b:
b1:53:59:f1:4b:27:f3:3a:3d:8d:d2:ec:67:7f:07:25:cb:bc:
50:c3:e7:f1:a5:59:64:99:a9:db:53:c0:51:f0:b5:97:a0:00:
53:19:f2:34:cf:17:83:8d:81:02:a4:e8:e8:fb:2a:aa:13:af:
5b:c7:20:32:8f:c0:76:fe:84:5c:9a:ee:66:c0:6c:d6:25:12:
f1:0e:f9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9d1E1NozzrltugUjb0RuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjUxMTA0MTMwMjA2WhcNMjUxMTA1MTMwMjA2WjAzMTEwLwYDVQQD
EyhlZGNmYjk3YjZhNjQ2NGE3N2YxYTMxZTQwNDA1NzcwNmQxZjAxYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tj5LLUu1uR1PrW1T3LRBF9W43+E
1+29AadR7H9VaXyfOXdUNlZjYA6jIpp1JmAR7nCLDQ8UQKu/sZTYTgh6BJGwtmeM
48AURJPxU6ZnkhVaJ0saKzy+LW8o+1YvpcFS7l5q7evpx6++CfrNMSxWYgfGlgW4
jnz7Qykt490c5nj5kYaLtjcvSLgwmUiLukwipXNn0Mtl4aPqBL5iR+AdpWRXHLon
oZf1WJ3ZEIMCdFMJD7J3dKlQppUlz2UpU8Q8ASl7RDaxuuT1mZpFA/+xmHE60owG
tTeS6TNoE8M3J2UzVdrNUwceLkwh0QFyV9n7tyNNAp3Xzj/FKrzOTa85mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3PuXtqZGSnfxox5AQFdwbR8BqPMB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9zYyv+i
gWzmUh9cTvD70sFCylfGCsR/AkuCDXmhtIHwYvNI2vZNxpDHKhudQjhFaw0KUiQF
4fN1P5LtHT57e2AQd00Srs68Xjl0VoyOnxGF+uFHnL74gJhbvdKxVv+esz8qqRN3
nrN2EmEKijE9gSpYXhrNTHJnaEkYKcgE1ZySSN0IPP6fQOmgLoae5ck5nvBS1Pk/
yixoEq5ciTFe7qxVn8gpOTV+d9JTgW5rrPMTfTpLsVNZ8Usn8zo9jdLsZ38HJcu8
UMPn8aVZZJmp21PAUfC1l6AAUxnyNM8Xg42BAqTo6PsqqhOvW8cgMo/Adv6EXJru
ZsBs1iUS8Q75eg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:37 2025 by rpki-client