Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: E2Nqn5gzzjMf9QqvD3yE1na//Sd3KkxTy2zx0SZgKTQ=
Subject key identifier: BC:83:EC:DD:A6:D4:9F:7C:3E:67:F1:7F:86:E2:64:23:2A:9F:ED:E7
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019A21E500EA2EFB60AE5307DB86F095170F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1661
Signing time: Sun 26 Oct 2025 19:00:47 +0000
Manifest this update: Sun 26 Oct 2025 19:00:47 +0000
Manifest next update: Mon 27 Oct 2025 19:00:47 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 6eYxoA51FrOZb78vEoQYk2CaF82xe1RNvD/r4MQw4pI=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:00:ea:2e:fb:60:ae:53:07:db:86:f0:95:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Oct 26 19:00:47 2025 GMT
Not After : Oct 27 19:00:47 2025 GMT
Subject: CN=bc83ecdda6d49f7c3e67f17f86e264232a9fede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:26:04:fb:ff:e3:92:36:1a:e9:20:32:82:
b8:f9:27:6d:92:28:c0:43:3b:ef:89:c6:57:f7:2c:
7f:37:e0:b5:b6:e4:91:8f:cd:48:20:23:17:bb:c4:
27:8f:03:a8:9e:f4:31:74:d2:73:8b:6a:e3:33:d7:
ff:d8:03:92:f9:84:e7:ae:26:75:01:05:6d:e5:08:
b9:43:48:22:d7:e0:c5:d2:78:6a:f1:45:b4:2f:29:
3b:3e:48:6c:a8:d8:c9:ab:4a:8a:a2:06:05:dd:cc:
e0:d5:a5:67:11:9b:32:64:8c:31:e4:bb:fa:6f:6b:
94:3a:00:c9:6f:92:81:b2:3f:b7:7c:cf:c8:c0:55:
f8:34:6e:8f:3d:54:d8:f4:ed:45:45:e3:e0:cf:dc:
6b:78:ba:50:20:ab:a9:58:43:66:7a:68:5a:50:6b:
47:20:a4:d0:35:6a:dd:59:4d:76:5d:96:0a:89:e6:
47:36:fb:c2:5e:f0:d5:19:6c:9c:80:8b:d7:d9:32:
91:aa:75:20:0c:fe:72:57:64:69:4a:b8:d7:fb:a9:
2a:c6:1a:4e:c7:b9:73:ae:ce:19:68:5a:4e:d5:4e:
50:c1:46:ee:4a:f5:f7:52:17:2b:89:4d:34:6e:75:
68:19:85:27:fa:04:2f:c7:70:e6:f1:72:3f:90:80:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:EC:DD:A6:D4:9F:7C:3E:67:F1:7F:86:E2:64:23:2A:9F:ED:E7
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:92:7c:00:de:55:f7:cf:a6:00:71:0d:66:46:56:04:4b:
f1:e9:78:6f:78:36:f6:d4:a5:ac:9e:8b:46:2a:7b:e7:1d:1c:
d9:8f:5e:8b:b1:b2:63:0f:9d:06:39:69:7b:68:83:c8:a1:e0:
94:19:19:f7:c3:dc:4a:ad:af:b1:ff:77:55:31:22:49:44:91:
db:6c:a7:30:f8:b5:23:4d:42:68:18:2f:f3:42:16:12:f0:d7:
3b:20:cc:0c:60:d7:05:92:0c:5f:e0:8c:c4:58:8a:3b:e7:78:
b7:a4:66:bc:d2:77:ea:ec:b1:39:79:ae:a5:1d:03:fc:34:c7:
b3:25:64:0b:36:eb:ef:1d:f7:e6:f6:1c:c4:1a:01:7b:76:88:
fd:ed:51:5e:e5:8e:b0:b9:7c:46:5a:13:9d:31:3e:59:66:b7:
bf:9f:69:db:58:e4:94:c5:85:c7:8c:3c:06:94:42:a2:4b:2c:
25:62:d0:29:67:0d:04:c6:86:09:d9:bc:09:b7:5e:42:3e:2f:
3d:7f:57:ac:7a:fd:06:02:44:49:19:58:b6:18:85:e7:85:a4:
5a:b2:60:4b:33:69:9f:47:ba:bd:86:02:1e:82:2b:07:a3:a6:
c4:29:eb:6f:80:c5:bb:99:0a:50:73:d7:4a:fc:04:f6:2e:80:
a4:92:ce:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5QDqLvtgrlMH24bwlRcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5
NGU0OWMwHhcNMjUxMDI2MTkwMDQ3WhcNMjUxMDI3MTkwMDQ3WjAzMTEwLwYDVQQD
EyhiYzgzZWNkZGE2ZDQ5ZjdjM2U2N2YxN2Y4NmUyNjQyMzJhOWZlZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOAmBPv/45I2GukgMoK4+SdtkijA
QzvvicZX9yx/N+C1tuSRj81IICMXu8QnjwOonvQxdNJzi2rjM9f/2AOS+YTnriZ1
AQVt5Qi5Q0gi1+DF0nhq8UW0Lyk7PkhsqNjJq0qKogYF3czg1aVnEZsyZIwx5Lv6
b2uUOgDJb5KBsj+3fM/IwFX4NG6PPVTY9O1FRePgz9xreLpQIKupWENmemhaUGtH
IKTQNWrdWU12XZYKieZHNvvCXvDVGWycgIvX2TKRqnUgDP5yV2RpSrjX+6kqxhpO
x7lzrs4ZaFpO1U5QwUbuSvX3UhcriU00bnVoGYUn+gQvx3Dm8XI/kIA1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyD7N2m1J98Pmfxf4biZCMqn+3nMB8GA1UdIwQY
MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt
NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj
LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpWSfADe
VffPpgBxDWZGVgRL8el4b3g29tSlrJ6LRip75x0c2Y9ei7GyYw+dBjlpe2iDyKHg
lBkZ98PcSq2vsf93VTEiSUSR22ynMPi1I01CaBgv80IWEvDXOyDMDGDXBZIMX+CM
xFiKO+d4t6RmvNJ36uyxOXmupR0D/DTHsyVkCzbr7x335vYcxBoBe3aI/e1RXuWO
sLl8RloTnTE+WWa3v59p21jklMWFx4w8BpRCokssJWLQKWcNBMaGCdm8CbdeQj4v
PX9XrHr9BgJESRlYthiF54WkWrJgSzNpn0e6vYYCHoIrB6OmxCnrb4DFu5kKUHPX
SvwE9i6ApJLOHw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:01 2025 by rpki-client