Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: NOE31RUpo7oY5HNtq2/92yPfoConvIszogF++b8elhg=
Subject key identifier: 97:C5:33:C9:44:07:F0:61:25:E7:5F:82:DE:D1:5B:AA:12:D0:3D:A5
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 019A7301CC18509BA1E230190AD75B340384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 13:01:28 +0000
Manifest this update: Tue 11 Nov 2025 13:01:28 +0000
Manifest next update: Wed 12 Nov 2025 13:01:28 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: Bgo8k9TOpV26oR+ndy/frYIDIUd5vAEemB7qr92gPng=)
2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cc:18:50:9b:a1:e2:30:19:0a:d7:5b:34:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Nov 11 13:01:28 2025 GMT
Not After : Nov 12 13:01:28 2025 GMT
Subject: CN=97c533c94407f06125e75f82ded15baa12d03da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:e4:a6:7c:79:33:e3:e5:4f:63:99:24:42:
d6:41:9f:61:c4:7d:9f:ae:ba:30:0e:29:54:f4:a1:
8e:77:38:19:9a:6f:74:f5:54:cb:c0:67:45:b5:02:
34:49:fc:21:af:9e:41:e7:72:8a:da:68:b3:3c:13:
89:4e:18:1b:59:4a:22:fe:e9:7e:6c:9e:52:24:d4:
55:cb:aa:5c:57:dd:8a:91:39:58:c4:cd:58:a4:9b:
14:dd:bb:01:d0:b1:e0:c1:49:48:4c:b4:4b:54:55:
b9:1b:c2:cb:86:05:c6:6f:6c:84:be:ff:1c:71:9d:
69:0e:97:ce:75:b1:7f:b3:df:98:8c:05:40:0b:2e:
7a:0c:31:11:de:ab:f0:ba:c2:81:00:8f:b8:71:f8:
b2:b7:56:bb:e9:26:95:87:cf:7b:b2:5b:cb:26:97:
90:8c:d1:24:f0:27:67:c7:42:cb:7d:2b:77:d2:b5:
93:f2:c6:bf:06:de:91:ea:38:b5:93:57:3a:09:63:
3c:8e:20:b8:88:e8:f5:db:89:c2:75:65:74:d2:a2:
86:a6:f8:4d:38:5d:c5:a6:5a:32:16:68:f4:97:76:
3e:41:c9:48:df:9a:66:31:ae:e2:29:68:3a:63:a5:
4a:0c:13:4e:97:5c:88:ee:57:ea:f7:e2:a4:44:4c:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:33:C9:44:07:F0:61:25:E7:5F:82:DE:D1:5B:AA:12:D0:3D:A5
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:e5:b9:89:57:71:e3:4d:e2:97:3e:22:ca:d5:28:4e:6f:
d0:40:3c:4b:82:61:ea:19:94:e8:16:3c:67:dd:02:2d:82:03:
1f:bf:ce:87:5e:f6:e8:33:a9:3f:cd:65:a2:98:8f:e7:46:49:
65:26:71:6e:90:fe:c2:c6:58:d2:90:fb:de:f8:6d:2d:73:c1:
2b:3f:41:4c:31:fb:62:a7:ed:96:6f:f1:f3:24:98:45:47:34:
8e:ba:35:bb:db:21:cd:72:0f:c3:8a:53:1c:8f:cf:01:22:9e:
b9:a3:a8:9a:77:49:f2:68:64:cf:22:06:4a:3a:15:f3:39:90:
55:d4:ae:45:41:6d:b5:32:06:e8:c3:bc:f8:f1:c3:5c:63:ea:
dc:f9:07:9e:e3:00:8e:60:b5:e8:14:39:79:4c:13:15:7a:6a:
8c:59:4d:d9:0a:b7:c8:a7:6f:c5:6e:a0:d3:6c:74:d7:5b:62:
a1:db:8f:d0:40:33:12:65:49:75:82:ae:b9:06:2f:52:24:ac:
30:e4:38:30:c9:5a:8c:9f:db:74:49:68:b0:de:20:cf:b3:c6:
53:2b:b8:91:b5:99:50:00:54:4d:75:aa:76:e0:2e:94:9b:92:
37:46:a5:7b:0d:06:f2:79:08:ca:77:42:be:fe:7a:01:49:fe:
26:23:b7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAcwYUJuh4jAZCtdbNAOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODczMTkxNzE3MGM0YjgxYmVlMzUxZDA0NTVjMzJjYmFk
NjNiMjYwHhcNMjUxMTExMTMwMTI4WhcNMjUxMTEyMTMwMTI4WjAzMTEwLwYDVQQD
Eyg5N2M1MzNjOTQ0MDdmMDYxMjVlNzVmODJkZWQxNWJhYTEyZDAzZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIDkpnx5M+PlT2OZJELWQZ9hxH2f
rrowDilU9KGOdzgZmm909VTLwGdFtQI0Sfwhr55B53KK2mizPBOJThgbWUoi/ul+
bJ5SJNRVy6pcV92KkTlYxM1YpJsU3bsB0LHgwUlITLRLVFW5G8LLhgXGb2yEvv8c
cZ1pDpfOdbF/s9+YjAVACy56DDER3qvwusKBAI+4cfiyt1a76SaVh897slvLJpeQ
jNEk8Cdnx0LLfSt30rWT8sa/Bt6R6ji1k1c6CWM8jiC4iOj124nCdWV00qKGpvhN
OF3FployFmj0l3Y+QclI35pmMa7iKWg6Y6VKDBNOl1yI7lfq9+KkREws0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfFM8lEB/BhJedfgt7RW6oS0D2lMB8GA1UdIwQY
MBaAFBaHMZFxcMS4G+41HQRVwyy61jsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUt
YjJkNDY2Njk3YWM0LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUtYjJkNDY2Njk3YWM0
LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8LluYlX
ceNN4pc+IsrVKE5v0EA8S4Jh6hmU6BY8Z90CLYIDH7/Oh1726DOpP81lopiP50ZJ
ZSZxbpD+wsZY0pD73vhtLXPBKz9BTDH7Yqftlm/x8ySYRUc0jro1u9shzXIPw4pT
HI/PASKeuaOomndJ8mhkzyIGSjoV8zmQVdSuRUFttTIG6MO8+PHDXGPq3PkHnuMA
jmC16BQ5eUwTFXpqjFlN2Qq3yKdvxW6g02x011tioduP0EAzEmVJdYKuuQYvUiSs
MOQ4MMlajJ/bdElosN4gz7PGUyu4kbWZUABUTXWqduAulJuSN0alew0G8nkIyndC
vv56AUn+JiO3hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:50 2025 by rpki-client