Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: /0MSYm9EADl18bdh393YxE8/tZMOEOZFzMdxl/3PgJs=
Subject key identifier: EE:DC:ED:71:22:6F:89:69:87:E8:EB:6A:DC:A6:C7:F8:13:3E:44:28
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 019A71B8C9F16728ED8039DFECC8139BF038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 144F
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: IQpt1lUqKkrGiBjELhZi4spXM/xcdhI9zvsNeH3jmRg=)
3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c9:f1:67:28:ed:80:39:df:ec:c8:13:9b:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=eedced71226f896987e8eb6adca6c7f8133e4428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:46:20:76:7d:da:2b:28:c8:b8:78:d8:de:
cc:30:19:02:4b:b0:01:f0:a0:76:ee:36:13:43:cc:
2c:d0:47:32:1f:d6:b7:5e:b8:b1:b5:90:b0:5a:86:
c7:5f:7e:18:b9:b9:76:c2:cd:5d:3a:03:e5:e0:92:
1c:3f:b5:d7:9f:b1:95:89:5a:a0:14:3c:60:fe:bc:
76:18:1f:d8:ca:38:0e:c8:ab:b4:87:2d:db:7f:69:
b8:7f:a3:cd:78:75:6b:97:80:09:5d:99:38:4f:8b:
78:d8:1d:43:92:ea:ae:41:57:7c:45:02:7b:cb:7f:
b4:85:59:5b:f7:2d:74:9e:43:01:fe:00:a4:b1:52:
6e:cd:5b:8e:6e:85:f0:e8:47:81:84:a9:aa:45:96:
a4:2e:cc:a9:27:4e:a5:1a:2b:ea:0d:96:54:62:b0:
1b:65:67:05:58:f4:3f:d0:20:63:65:a5:47:9c:e1:
8d:1a:e8:fc:fa:b8:8d:3b:ac:82:17:4f:dc:73:38:
fe:89:83:1e:b6:ef:bd:f2:62:c8:cf:ca:01:e2:1c:
ac:a7:ba:54:a0:58:95:a2:68:4f:9b:06:29:ab:b4:
b5:ec:b6:e4:d2:be:21:83:37:16:10:04:47:89:11:
17:60:9a:f3:27:9a:7d:9c:e0:aa:a6:18:f3:c7:4e:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:ED:71:22:6F:89:69:87:E8:EB:6A:DC:A6:C7:F8:13:3E:44:28
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:5c:3a:7e:90:42:9a:37:28:90:c9:04:0f:e2:45:b3:95:
8d:51:c8:44:fb:f5:82:12:8a:2e:41:da:6e:fb:55:66:33:07:
e0:ab:ba:72:dd:b5:a6:59:28:da:47:0d:f2:6c:8f:4d:e8:cc:
5f:20:96:a2:6b:a6:1e:b5:bf:0f:a2:b7:50:28:a1:04:b8:36:
92:af:0e:33:db:0a:af:0c:6a:2b:d7:34:62:70:65:a4:f2:24:
80:77:c9:38:98:16:46:6d:05:9d:0b:65:c5:a2:9f:22:b7:d7:
69:56:76:83:3f:e7:83:8f:49:04:4c:a9:23:e4:7e:94:79:18:
a0:d9:7c:03:05:01:06:08:07:a5:69:26:95:a4:ea:61:c2:c2:
c6:2c:c3:06:2b:8d:92:bd:17:1b:9c:18:12:35:a4:0d:ea:0a:
6f:45:db:48:cc:44:8d:c9:6e:f0:70:8f:53:61:a7:0f:34:21:
22:cb:6a:c4:8e:d5:e1:f4:45:cd:82:c8:8c:49:00:43:f9:c2:
79:18:22:5c:58:88:b4:75:71:8a:db:4c:ba:ae:59:e8:fd:c8:
c5:2d:39:58:6e:3b:f5:70:b9:dc:6f:7c:2b:59:e6:6f:28:41:
30:d0:99:38:23:36:c5:4b:99:84:df:d1:33:91:5a:cf:23:c1:
41:ce:72:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMnxZyjtgDnf7MgTm/A4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjE0NTcyN2QzNGFlNjYwN2E2MTUzMDEyODNlZWViZDVk
NjI5MWMwHhcNMjUxMTExMDcwMjA2WhcNMjUxMTEyMDcwMjA2WjAzMTEwLwYDVQQD
EyhlZWRjZWQ3MTIyNmY4OTY5ODdlOGViNmFkY2E2YzdmODEzM2U0NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B9GIHZ92isoyLh42N7MMBkCS7AB
8KB27jYTQ8ws0EcyH9a3XrixtZCwWobHX34Yubl2ws1dOgPl4JIcP7XXn7GViVqg
FDxg/rx2GB/YyjgOyKu0hy3bf2m4f6PNeHVrl4AJXZk4T4t42B1DkuquQVd8RQJ7
y3+0hVlb9y10nkMB/gCksVJuzVuOboXw6EeBhKmqRZakLsypJ06lGivqDZZUYrAb
ZWcFWPQ/0CBjZaVHnOGNGuj8+riNO6yCF0/cczj+iYMetu+98mLIz8oB4hysp7pU
oFiVomhPmwYpq7S17Lbk0r4hgzcWEARHiREXYJrzJ5p9nOCqphjzx04soQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7c7XEib4lph+jratymx/gTPkQoMB8GA1UdIwQY
MBaAFBbxRXJ9NK5mB6YVMBKD7uvV1ikcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgt
ZWNiN2FlMjcyMmMxLzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgtZWNiN2FlMjcyMmMx
LzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAhcOn6Q
Qpo3KJDJBA/iRbOVjVHIRPv1ghKKLkHabvtVZjMH4Ku6ct21plko2kcN8myPTejM
XyCWomumHrW/D6K3UCihBLg2kq8OM9sKrwxqK9c0YnBlpPIkgHfJOJgWRm0FnQtl
xaKfIrfXaVZ2gz/ng49JBEypI+R+lHkYoNl8AwUBBggHpWkmlaTqYcLCxizDBiuN
kr0XG5wYEjWkDeoKb0XbSMxEjclu8HCPU2GnDzQhIstqxI7V4fRFzYLIjEkAQ/nC
eRgiXFiItHVxittMuq5Z6P3IxS05WG479XC53G98K1nmbyhBMNCZOCM2xUuZhN/R
M5FazyPBQc5ySA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:20 2025 by rpki-client