Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: 7K80gDNDRLVQJ+pVdUeSGI40STx37wMSucaXdlo3L60=
Subject key identifier: DE:C5:6D:70:E1:E6:A5:94:C3:1D:CD:8A:2B:B2:EC:43:EA:A5:60:09
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 019A72259656BDF3754507A06DBB1F92C9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0983
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: wnvioJb37V7Vi5YtekECH8hrUpGI4+W2AHgMveQu470=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:96:56:bd:f3:75:45:07:a0:6d:bb:1f:92:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=dec56d70e1e6a594c31dcd8a2bb2ec43eaa56009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:b3:46:a8:1d:c1:0d:2b:a0:e2:99:39:3b:
1e:7f:95:e6:1d:f9:41:01:bc:84:76:69:54:61:99:
41:6b:cd:da:57:86:cf:55:55:b0:4f:45:34:5e:ac:
d0:ac:0a:c7:ea:09:31:95:33:d6:37:4a:0b:df:d4:
5e:71:3d:82:1a:f8:db:67:1c:be:b5:19:0b:cb:6d:
50:46:11:3d:8f:8a:fd:18:ea:08:db:11:70:1e:24:
9f:cc:4a:ba:fe:ff:34:60:2b:1e:00:12:d6:3f:49:
17:e9:8a:3e:86:38:f8:2d:bd:96:14:2c:7a:5f:5e:
6b:a0:21:30:a2:e2:55:be:51:ef:00:0c:09:1d:18:
97:60:0a:64:6b:b2:22:6c:43:e1:1d:31:83:27:db:
78:aa:e2:fd:05:27:53:f9:04:66:de:40:eb:9c:ae:
d5:02:c9:b5:2d:6f:72:e5:f1:8f:20:f7:ed:04:84:
f1:5b:4a:15:95:b9:d7:59:3e:e9:d7:c6:e5:ad:ca:
1c:15:b1:68:53:2e:fe:eb:8b:01:36:cc:bd:65:3f:
a9:8f:55:cd:3d:62:a7:aa:97:21:29:4b:2f:fe:11:
1d:18:7f:9e:09:2c:90:bd:8c:10:b6:0d:95:5a:8b:
69:95:30:93:50:b0:d8:e1:1d:a3:79:7b:6d:7b:24:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:6D:70:E1:E6:A5:94:C3:1D:CD:8A:2B:B2:EC:43:EA:A5:60:09
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:f3:eb:7f:21:2c:1c:57:2b:c8:e7:fd:f9:ff:a2:21:56:
bd:2b:44:d0:d7:eb:8f:a0:27:14:78:03:33:17:3a:f8:6b:83:
ee:0b:2b:94:a8:55:1f:f2:ad:db:fa:ad:82:66:db:e3:27:69:
63:bc:f4:4e:9d:59:ff:36:1b:ea:4f:09:d7:47:96:17:fe:27:
78:56:d4:0e:60:51:31:37:44:36:b7:2f:67:e0:16:5e:c9:21:
cf:77:c8:a3:63:9c:35:1b:a8:fb:b5:a0:30:22:23:c6:99:90:
27:db:3d:95:4a:4b:a4:2d:39:8f:2a:7d:99:a6:b2:61:00:39:
c2:42:e6:9b:30:f3:9e:5d:1d:ae:42:c4:eb:ed:5f:4a:7e:97:
b7:ec:f6:7b:67:b2:7b:4f:77:73:28:52:8a:a8:1d:69:68:ec:
43:54:7d:c5:e9:27:fa:21:e0:72:3b:be:56:36:aa:22:3d:b4:
36:1b:a0:81:09:d9:3a:fa:b9:ad:78:53:b4:a7:85:6c:a7:8c:
88:1c:d0:d1:0e:4a:c9:3d:1b:eb:58:8b:5d:55:96:78:57:fa:
58:2a:a1:cc:1a:7d:ce:29:03:dc:b7:f6:3a:6b:d1:5c:cc:87:
48:af:9c:9b:9a:ce:33:5f:b7:13:53:ad:9b:4c:4d:da:32:66:
0e:ae:a0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZZWvfN1RQegbbsfksneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjUxMTExMDkwMDU3WhcNMjUxMTEyMDkwMDU3WjAzMTEwLwYDVQQD
EyhkZWM1NmQ3MGUxZTZhNTk0YzMxZGNkOGEyYmIyZWM0M2VhYTU2MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy6zRqgdwQ0roOKZOTsef5XmHflB
AbyEdmlUYZlBa83aV4bPVVWwT0U0XqzQrArH6gkxlTPWN0oL39RecT2CGvjbZxy+
tRkLy21QRhE9j4r9GOoI2xFwHiSfzEq6/v80YCseABLWP0kX6Yo+hjj4Lb2WFCx6
X15roCEwouJVvlHvAAwJHRiXYApka7IibEPhHTGDJ9t4quL9BSdT+QRm3kDrnK7V
Asm1LW9y5fGPIPftBITxW0oVlbnXWT7p18blrcocFbFoUy7+64sBNsy9ZT+pj1XN
PWKnqpchKUsv/hEdGH+eCSyQvYwQtg2VWotplTCTULDY4R2jeXtteyQpCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7FbXDh5qWUwx3Niiuy7EPqpWAJMB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcTz638h
LBxXK8jn/fn/oiFWvStE0Nfrj6AnFHgDMxc6+GuD7gsrlKhVH/Kt2/qtgmbb4ydp
Y7z0Tp1Z/zYb6k8J10eWF/4neFbUDmBRMTdENrcvZ+AWXskhz3fIo2OcNRuo+7Wg
MCIjxpmQJ9s9lUpLpC05jyp9maayYQA5wkLmmzDznl0drkLE6+1fSn6Xt+z2e2ey
e093cyhSiqgdaWjsQ1R9xekn+iHgcju+VjaqIj20NhuggQnZOvq5rXhTtKeFbKeM
iBzQ0Q5KyT0b61iLXVWWeFf6WCqhzBp9zikD3Lf2OmvRXMyHSK+cm5rOM1+3E1Ot
m0xN2jJmDq6gSg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:11 2025 by rpki-client