Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: A0zwT+KS5+raY4SH5Zb5QXDLLtoe2KpjYIzLirASMdo=
Subject key identifier: 25:31:EC:D5:D4:6E:6C:95:C2:B8:C9:D8:37:5A:A7:3C:54:4D:CE:DC
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019A25C1A52C4111BE2E8C73E0BFA5BA69C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 0F
Signing time: Mon 27 Oct 2025 13:00:38 +0000
Manifest this update: Mon 27 Oct 2025 13:00:38 +0000
Manifest next update: Tue 28 Oct 2025 13:00:38 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: lhz8fqtv4KQTiwstnMOXLTlyRwjLVK3634Yh/8x4OAY=)
2: YJnryPyjSM9m2GAkfptlcJ6VzAs.roa (hash: ycoIEs6bEZoIpBaIl7C3dtXJvolOHbKG/ZycQeSD1RA=)
3: _PTsrjA4Vx4ohcRmFglFLj69Gbk.roa (hash: qHBktGp3NlHLcFdGjmDdlgxPr6r0hRT3TQKlIEYQtgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:a5:2c:41:11:be:2e:8c:73:e0:bf:a5:ba:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Oct 28 13:00:38 2025 GMT
Subject: CN=2531ecd5d46e6c95c2b8c9d8375aa73c544dcedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:7f:52:54:ac:d7:7f:e4:54:b5:76:fa:b2:
3e:7a:48:aa:b7:b2:09:ea:35:ba:52:8b:b9:04:b9:
47:54:f1:97:4e:6b:a5:d2:79:8d:de:9d:9a:88:2c:
f6:a4:7f:c4:23:d9:65:1f:f1:50:50:c5:d5:54:b9:
ea:57:2f:49:79:b7:f3:97:75:8d:d2:b0:df:21:3b:
0b:27:38:82:22:a8:fa:52:e5:b2:d0:58:47:ac:6e:
72:58:3a:96:13:c3:6f:22:5c:ac:af:63:19:99:70:
65:88:e3:bc:5b:10:9d:9c:56:6b:64:2b:74:2a:54:
80:7c:67:4d:42:24:29:18:c1:cd:78:36:21:24:33:
81:56:64:7e:5b:6b:30:46:9a:40:00:70:23:52:af:
fe:35:53:07:93:95:40:20:1f:b0:3b:a3:71:c1:46:
91:4a:d3:71:e5:60:62:a5:72:24:81:30:91:3e:b6:
94:3c:28:99:4e:a3:81:d5:01:0b:88:4f:48:bb:ba:
58:89:15:06:5f:3b:b5:86:fb:89:f8:ad:b6:07:81:
dd:88:64:a1:24:c2:e2:a9:53:36:f2:f6:c3:1d:95:
01:84:cc:48:a2:b8:e4:df:19:9b:39:61:1a:99:ed:
f5:71:0e:5c:7a:96:94:8b:0d:d9:fc:57:f9:73:18:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:EC:D5:D4:6E:6C:95:C2:B8:C9:D8:37:5A:A7:3C:54:4D:CE:DC
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:67:72:93:d9:26:a6:97:bd:36:09:23:6f:10:ed:b3:ff:
c1:21:c1:a1:46:89:9b:5f:02:f1:b2:6f:54:0a:a8:98:e8:de:
33:4a:5f:a4:c7:b1:33:c5:08:58:0d:b4:be:ec:7f:ac:98:6f:
fc:8b:c7:f5:ce:b0:97:63:90:da:d0:da:48:6a:19:95:f1:f5:
73:a1:56:c2:33:c5:1b:d9:e1:62:0f:3f:e9:93:2c:7d:8b:ac:
b6:71:f3:d0:ca:b8:d6:b0:ce:0e:11:fc:8d:d6:f3:6c:60:26:
58:7d:0c:94:73:1f:61:59:eb:18:95:7e:7d:2e:10:e1:5d:9d:
43:e0:ba:24:a6:31:d6:d2:0a:d2:5e:0b:dc:a8:f0:b0:af:f9:
c6:77:98:8b:36:60:7a:a8:25:11:fd:4e:6b:e3:7a:bc:d7:79:
4c:93:6e:42:03:63:e4:27:33:a6:17:c1:36:df:63:a9:e0:e8:
b0:90:a1:d5:5e:cf:e6:d3:77:63:a8:16:79:d3:e2:f2:c2:59:
2d:82:16:6f:e8:72:ce:ca:ee:72:d4:74:da:d1:d2:a8:47:7a:
e6:c2:93:70:d4:b1:07:68:c1:2f:2c:a5:63:05:1c:69:f5:4c:
72:b7:ff:30:fa:dd:15:b8:c2:6b:fc:7f:52:03:85:0e:c1:8c:
ad:53:6a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwaUsQRG+Loxz4L+lumnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTEyODNkYWUwYjBiOTk3ODY3MjY1Y2IyYzAwODNjNTEx
MzZlZGEwHhcNMjUxMDI3MTMwMDM4WhcNMjUxMDI4MTMwMDM4WjAzMTEwLwYDVQQD
EygyNTMxZWNkNWQ0NmU2Yzk1YzJiOGM5ZDgzNzVhYTczYzU0NGRjZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JF/UlSs13/kVLV2+rI+ekiqt7IJ
6jW6Uou5BLlHVPGXTmul0nmN3p2aiCz2pH/EI9llH/FQUMXVVLnqVy9Jebfzl3WN
0rDfITsLJziCIqj6UuWy0FhHrG5yWDqWE8NvIlysr2MZmXBliOO8WxCdnFZrZCt0
KlSAfGdNQiQpGMHNeDYhJDOBVmR+W2swRppAAHAjUq/+NVMHk5VAIB+wO6NxwUaR
StNx5WBipXIkgTCRPraUPCiZTqOB1QELiE9Iu7pYiRUGXzu1hvuJ+K22B4HdiGSh
JMLiqVM28vbDHZUBhMxIorjk3xmbOWEame31cQ5cepaUiw3Z/Ff5cximcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUx7NXUbmyVwrjJ2DdapzxUTc7cMB8GA1UdIwQY
MBaAFBThKD2uCwuZeGcmXLLACDxRE27aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUt
ODA0MTFlOTE3NTM4LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUtODA0MTFlOTE3NTM4
LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX9ncpPZ
JqaXvTYJI28Q7bP/wSHBoUaJm18C8bJvVAqomOjeM0pfpMexM8UIWA20vux/rJhv
/IvH9c6wl2OQ2tDaSGoZlfH1c6FWwjPFG9nhYg8/6ZMsfYustnHz0Mq41rDODhH8
jdbzbGAmWH0MlHMfYVnrGJV+fS4Q4V2dQ+C6JKYx1tIK0l4L3KjwsK/5xneYizZg
eqglEf1Oa+N6vNd5TJNuQgNj5CczphfBNt9jqeDosJCh1V7P5tN3Y6gWedPi8sJZ
LYIWb+hyzsructR02tHSqEd65sKTcNSxB2jBLyylYwUcafVMcrf/MPrdFbjCa/x/
UgOFDsGMrVNqOQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 23:02:27 2025 by rpki-client