Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: Re3JkRpe/FE5NQBN84cJzCwrPfF4puohMSA7F7h4swo=
Subject key identifier: CA:1F:DD:FB:A6:72:38:7E:A6:78:1C:EA:D1:E0:9B:4A:34:4D:85:92
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019A7225EB411DB1EA664F0088013734AA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0C07
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: oQIw6heznLQ3ajqMsPFqN7nHsr4Cr3sqzBLcC1Jo6hY=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:eb:41:1d:b1:ea:66:4f:00:88:01:37:34:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=ca1fddfba672387ea6781cead1e09b4a344d8592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:97:0a:ad:ee:7f:0f:4e:72:6a:40:c8:59:
b4:e4:14:21:cd:12:e4:9b:be:4c:df:e4:6e:33:43:
81:84:ce:fc:48:09:51:97:a9:b2:58:6e:56:70:00:
93:16:76:8d:23:10:b4:97:3d:86:0d:47:14:fa:37:
73:d0:d1:1b:a9:47:92:77:b1:99:7b:97:e9:a6:bb:
4a:14:67:70:7f:28:fe:84:67:30:be:ee:38:61:c5:
f2:b9:82:3a:34:3e:65:e3:11:10:13:af:dd:bc:c1:
3e:64:3c:cb:d1:be:86:e8:b1:35:88:6d:f4:16:42:
55:ae:e2:91:99:10:01:a2:6b:a6:06:e4:3d:f2:fa:
33:e9:89:ac:7b:df:65:da:b5:1b:ba:41:43:8c:81:
90:56:6b:10:36:cd:7c:a7:8d:92:e9:5e:6f:b4:4d:
ff:ad:3e:75:21:be:ca:27:cb:49:99:85:33:fa:74:
86:dc:57:c9:af:eb:4b:c3:74:a3:e5:74:58:56:7d:
08:92:85:d7:7b:0a:17:6a:87:04:62:1c:4f:98:a0:
eb:a6:4c:0f:9b:cd:96:29:72:16:77:2d:71:97:8d:
7b:2e:58:13:4d:47:19:23:f6:1d:5e:24:4d:72:15:
12:7b:a4:9c:b6:50:2c:e0:1c:9c:32:4a:f3:b0:ee:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1F:DD:FB:A6:72:38:7E:A6:78:1C:EA:D1:E0:9B:4A:34:4D:85:92
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:07:bc:73:c7:71:e0:16:b1:76:c1:35:e7:07:a5:bc:13:
d5:e3:1c:0b:1f:dc:ca:d4:ee:96:99:d1:83:2c:9c:8c:8c:fa:
e6:ed:19:e5:6f:1d:3c:0a:34:c9:87:a0:f3:f6:fd:25:e4:60:
32:73:85:c4:c1:e4:7c:c5:d6:68:14:1d:e0:cd:4d:41:e6:3f:
b9:00:90:99:c7:57:67:60:4e:e6:09:37:68:2b:af:b1:3d:59:
5e:37:b4:0c:b2:a4:da:26:61:a8:90:bb:49:e0:ad:56:0f:bf:
83:2e:a0:7b:ea:d3:79:fc:76:c9:53:dd:fb:c5:97:d7:0d:a6:
9c:5f:44:9a:af:22:01:08:67:fd:12:88:84:2e:90:04:5c:1a:
f9:31:b9:60:56:bd:d5:24:52:c9:da:cb:c1:6c:32:fe:bb:4e:
b6:49:4e:b9:62:9b:c7:62:ce:5c:ce:62:2d:be:fd:23:34:59:
96:c6:bf:46:ae:45:14:4b:9e:03:4c:49:a6:93:27:20:62:51:
3f:2f:1a:f5:30:bd:b1:41:e8:fc:8f:c3:fb:d7:6a:a9:da:8f:
6c:1b:db:9c:85:a6:ad:3b:6d:50:ab:32:ff:50:13:fa:fd:59:
52:64:01:5b:9b:b9:31:1a:e6:91:b0:73:23:d4:00:24:a5:00:
8f:68:da:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJetBHbHqZk8AiAE3NKqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjk4N2FmNWFkYjIzMDRkNDI2ZjU0MGRlNWQ2NTA1NDUy
MzFlNTAwHhcNMjUxMTExMDkwMTE4WhcNMjUxMTEyMDkwMTE4WjAzMTEwLwYDVQQD
EyhjYTFmZGRmYmE2NzIzODdlYTY3ODFjZWFkMWUwOWI0YTM0NGQ4NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r6XCq3ufw9OcmpAyFm05BQhzRLk
m75M3+RuM0OBhM78SAlRl6myWG5WcACTFnaNIxC0lz2GDUcU+jdz0NEbqUeSd7GZ
e5fpprtKFGdwfyj+hGcwvu44YcXyuYI6ND5l4xEQE6/dvME+ZDzL0b6G6LE1iG30
FkJVruKRmRABomumBuQ98voz6Ymse99l2rUbukFDjIGQVmsQNs18p42S6V5vtE3/
rT51Ib7KJ8tJmYUz+nSG3FfJr+tLw3Sj5XRYVn0IkoXXewoXaocEYhxPmKDrpkwP
m82WKXIWdy1xl417LlgTTUcZI/YdXiRNchUSe6SctlAs4BycMkrzsO7yeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMof3fumcjh+pngc6tHgm0o0TYWSMB8GA1UdIwQY
MBaAFNH5h69a2yME1Cb1QN5dZQVFIx5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjct
MmFmMDk1ZmZjOWJiLzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjctMmFmMDk1ZmZjOWJi
LzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJkHvHPH
ceAWsXbBNecHpbwT1eMcCx/cytTulpnRgyycjIz65u0Z5W8dPAo0yYeg8/b9JeRg
MnOFxMHkfMXWaBQd4M1NQeY/uQCQmcdXZ2BO5gk3aCuvsT1ZXje0DLKk2iZhqJC7
SeCtVg+/gy6ge+rTefx2yVPd+8WX1w2mnF9Emq8iAQhn/RKIhC6QBFwa+TG5YFa9
1SRSydrLwWwy/rtOtklOuWKbx2LOXM5iLb79IzRZlsa/Rq5FFEueA0xJppMnIGJR
Py8a9TC9sUHo/I/D+9dqqdqPbBvbnIWmrTttUKsy/1AT+v1ZUmQBW5u5MRrmkbBz
I9QAJKUAj2ja7g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:55 2025 by rpki-client