Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: b/1szlY0EqrYvpxRFD/vMjkNQAlTJ4I4MzV68rYrv7Q=
Subject key identifier: 8C:E9:FD:EE:87:FB:37:82:01:86:32:4F:A8:24:28:08:E9:77:88:6D
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 019A71EEBD92B43E203C9CB3B48CBDB24F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: 5htA+5DMKQgsflTs3ZJAQK1Gmz91ukNsYTg/fFYkrNM=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bd:92:b4:3e:20:3c:9c:b3:b4:8c:bd:b2:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=8ce9fdee87fb37820186324fa8242808e977886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:3d:8a:5f:23:b4:8a:75:c8:26:49:14:68:
38:ea:1f:61:d5:e0:6e:37:1e:e3:15:4d:75:ec:24:
cb:ce:01:b8:f5:fc:8a:51:10:e4:9a:1c:f3:01:76:
a6:1f:88:32:bd:9a:b2:c3:1b:8a:9c:85:53:68:89:
a6:82:64:76:a4:36:69:eb:8e:66:a7:48:ef:6d:33:
eb:c6:fd:ee:8f:51:5a:26:b5:53:42:28:9e:a3:5c:
6b:2e:68:c0:e1:ff:9c:e4:c3:a2:00:7a:26:f2:7d:
09:5a:00:12:b7:73:37:a0:17:39:1c:6e:9b:c7:f5:
88:05:e2:84:f2:ef:4f:58:70:a5:d0:ab:92:ad:33:
33:37:33:f0:6d:8c:d3:c7:c8:4a:fd:d5:e7:07:73:
22:15:8f:8c:cd:b7:1d:43:09:cb:2d:ea:0a:b3:7c:
05:f0:08:0c:d9:e5:1f:4f:30:31:02:5a:6a:b3:10:
cb:94:43:56:a0:f2:50:40:66:9e:60:8b:47:df:40:
a7:17:5b:f2:82:54:4a:db:ac:e1:9b:ab:4e:20:0d:
76:ae:75:3f:e8:d4:fe:3a:e8:bc:f4:40:4d:9d:28:
87:da:c8:10:c6:5d:5d:9e:58:27:27:7f:37:b0:06:
ba:9c:32:11:18:83:f8:46:ef:dd:d9:e4:af:56:4a:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:FD:EE:87:FB:37:82:01:86:32:4F:A8:24:28:08:E9:77:88:6D
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:66:16:0f:e8:c0:c4:03:e2:b0:2b:b9:be:ba:52:f2:b0:
1d:a9:cf:0b:33:dc:74:d7:81:32:df:cb:3d:8e:2b:b6:5d:02:
72:76:6a:61:c8:13:33:56:e1:8f:1b:91:03:09:1f:b5:25:f8:
7b:1a:22:dd:95:06:a1:8e:f7:a0:b0:54:1e:53:9b:3b:e4:91:
14:ca:cb:32:a4:a4:2c:fa:be:b2:eb:58:b4:59:87:db:c3:98:
2f:e5:46:20:fd:58:49:ae:60:46:39:93:cf:77:ac:9a:e9:24:
73:96:00:bf:3f:e7:11:2a:e6:87:df:ff:58:5d:c3:8a:aa:14:
9b:59:30:45:3f:78:47:1b:c2:e1:a4:6e:66:56:35:6b:98:05:
2b:e5:ec:f6:c8:19:f9:1c:f9:5b:61:12:a8:71:86:f9:82:d1:
85:ab:f8:42:a7:cf:8a:b3:95:30:77:ae:42:6a:32:cb:7d:df:
71:cb:07:32:0c:9c:19:81:e5:71:b1:28:b5:8b:74:32:b6:44:
f9:64:03:3e:b4:7d:5b:61:31:a1:71:d8:12:9a:1c:00:68:f7:
28:42:0e:32:7a:36:92:a9:34:93:3a:d4:fd:6d:aa:83:d1:c5:
1d:38:e6:04:d0:12:67:7e:d9:25:58:a3:9c:a4:e4:43:b8:6c:
06:b0:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:59:40 2025 by rpki-client