Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: E8CX7vjy2om8fOUBVEp+IVkQkMpa9mvgu+4UE+rcrxA=
Subject key identifier: 48:CE:3D:88:BC:EE:5A:BA:5B:EA:93:7E:53:0B:CC:D1:1E:F5:48:78
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 019A7112D850CF01EFF2F5F997A22FA736E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0F66
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: aAX7wlka/TGoO9yvLoLdKuFhS9L88Kuo+/lVeUuYPP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d8:50:cf:01:ef:f2:f5:f9:97:a2:2f:a7:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=48ce3d88bcee5aba5bea937e530bccd11ef54878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:bc:a2:70:cd:18:02:38:78:bf:b3:19:56:
b0:01:e5:40:17:7a:85:fb:4b:e6:08:22:ca:f2:5d:
b4:88:ee:7c:01:4e:37:3b:20:a0:cb:db:45:25:a1:
ec:3f:17:84:86:9c:4f:e2:7c:9f:73:1e:a8:fd:7e:
9a:59:59:e7:89:47:dd:9f:41:59:c6:91:b4:5c:53:
60:a5:ba:72:aa:99:81:6f:fd:f1:b7:2a:0d:f7:c3:
11:72:f8:55:3a:57:ce:e9:71:6c:9d:b3:d6:69:59:
dd:01:de:1b:7b:54:00:e4:d9:44:fb:5e:44:1a:5d:
50:e2:f3:53:60:ce:69:5f:7b:25:57:f0:05:10:9e:
d7:d8:a3:53:eb:8a:4b:15:c8:78:9b:6d:f9:69:12:
58:12:db:17:76:a3:d4:03:fa:39:83:fe:5c:e7:3a:
ae:4b:b4:aa:79:48:ec:10:d1:a7:68:84:8c:5b:d4:
36:68:3b:30:53:04:5e:80:ad:06:fa:b5:0a:c2:f7:
7a:20:4f:52:7c:c1:0b:4a:b0:ff:b2:19:e2:fc:8a:
25:5c:4c:c1:86:5e:8d:42:dc:2a:90:f0:83:fa:6c:
dd:0f:00:47:fd:72:e9:e2:b6:98:3d:43:2c:ff:08:
71:49:a2:4d:a0:73:2c:42:f4:d0:fb:b4:49:af:0d:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:3D:88:BC:EE:5A:BA:5B:EA:93:7E:53:0B:CC:D1:1E:F5:48:78
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:51:97:2b:1d:83:2f:ea:54:9d:e8:72:71:21:5b:bb:ae:
06:c1:4c:34:20:19:52:4d:d5:7e:26:63:86:80:95:94:f6:57:
ab:37:fd:ca:cc:c8:22:0a:31:dd:f4:f4:1e:0d:d0:ee:15:73:
6d:00:a4:e8:aa:93:b2:58:5b:af:13:b4:b3:b8:aa:7a:32:bf:
b0:c1:e7:71:b3:80:f6:47:d7:51:dd:f1:fe:3f:3e:ef:d3:f9:
98:1b:00:12:d2:8f:62:49:d8:c7:8e:39:c9:29:5b:da:58:1e:
af:2f:d4:b5:bd:34:1d:7a:47:fe:d3:8e:63:dc:c5:db:73:f2:
5d:36:e2:e9:6f:03:67:bf:ee:d7:4e:8f:0c:f1:9c:34:c2:f4:
88:7c:82:4c:92:41:3b:f2:17:9c:ea:e2:8c:9d:eb:8e:04:04:
a4:db:1a:cb:2c:32:96:4d:41:be:60:4c:11:f6:9c:82:10:5e:
50:fa:32:e3:ad:2d:5b:c4:b5:0a:d5:1d:ad:24:7d:87:df:8d:
3c:7f:0f:75:50:7c:6a:fe:1a:97:63:5d:fc:75:11:2b:ea:8c:
26:37:06:78:55:49:9a:f5:8b:57:8e:90:0a:e5:ad:89:b0:66:
d7:1f:4c:9c:cb:f1:47:e6:ef:a9:84:a8:a7:11:79:7f:91:7c:
f5:0e:dc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEthQzwHv8vX5l6IvpzbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0
MGI2ZTkwHhcNMjUxMTExMDQwMDUxWhcNMjUxMTEyMDQwMDUxWjAzMTEwLwYDVQQD
Eyg0OGNlM2Q4OGJjZWU1YWJhNWJlYTkzN2U1MzBiY2NkMTFlZjU0ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHC8onDNGAI4eL+zGVawAeVAF3qF
+0vmCCLK8l20iO58AU43OyCgy9tFJaHsPxeEhpxP4nyfcx6o/X6aWVnniUfdn0FZ
xpG0XFNgpbpyqpmBb/3xtyoN98MRcvhVOlfO6XFsnbPWaVndAd4be1QA5NlE+15E
Gl1Q4vNTYM5pX3slV/AFEJ7X2KNT64pLFch4m235aRJYEtsXdqPUA/o5g/5c5zqu
S7SqeUjsENGnaISMW9Q2aDswUwRegK0G+rUKwvd6IE9SfMELSrD/shni/IolXEzB
hl6NQtwqkPCD+mzdDwBH/XLp4raYPUMs/whxSaJNoHMsQvTQ+7RJrw1HHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjOPYi87lq6W+qTflMLzNEe9Uh4MB8GA1UdIwQY
MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt
MzVmMWE5MDg4YjQyLzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy
LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFpRlysd
gy/qVJ3ocnEhW7uuBsFMNCAZUk3VfiZjhoCVlPZXqzf9yszIIgox3fT0Hg3Q7hVz
bQCk6KqTslhbrxO0s7iqejK/sMHncbOA9kfXUd3x/j8+79P5mBsAEtKPYknYx445
ySlb2lgery/Utb00HXpH/tOOY9zF23PyXTbi6W8DZ7/u106PDPGcNML0iHyCTJJB
O/IXnOrijJ3rjgQEpNsayywylk1BvmBMEfacghBeUPoy460tW8S1CtUdrSR9h9+N
PH8PdVB8av4al2Nd/HURK+qMJjcGeFVJmvWLV46QCuWtibBm1x9MnMvxR+bvqYSo
pxF5f5F89Q7c+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:07 2025 by rpki-client