
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: l7axqjeH+8vbUO4ZtLR//Bw3LWTml/aW3K/7FUjiUuY=
Subject key identifier: 7D:AD:7F:8D:95:AE:F1:B6:2B:32:8F:14:6D:B8:84:3F:F8:0D:B3:62
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 0199FEEBE387D416807F6BDB189BC6F3428A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 01F4
Signing time: Mon 20 Oct 2025 00:01:35 +0000
Manifest this update: Mon 20 Oct 2025 00:01:35 +0000
Manifest next update: Tue 21 Oct 2025 00:01:35 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: OLWZ25Br3EZV8pJCWWUTgKTrVZNUA84tLB1Ios/uWt0=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e3:87:d4:16:80:7f:6b:db:18:9b:c6:f3:42:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Oct 20 00:01:35 2025 GMT
Not After : Oct 21 00:01:35 2025 GMT
Subject: CN=7dad7f8d95aef1b62b328f146db8843ff80db362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:8d:d7:23:16:dd:73:27:97:e1:be:5f:bd:
32:90:6c:dd:6e:c2:be:63:c4:6e:c0:c7:06:0b:6a:
b0:fb:5a:e4:61:3c:c0:9c:96:5e:0d:c4:2e:13:c8:
69:9e:99:60:f4:f7:af:1d:9f:3a:1c:36:26:96:ed:
b2:f4:60:9f:52:db:0d:da:d8:53:ef:40:63:9c:35:
28:a7:99:14:fb:d8:43:f2:28:04:0c:5e:cd:ae:3d:
a4:bf:65:5d:c4:6f:a4:d2:22:e4:71:f5:c1:2f:8a:
bf:7d:ca:b0:10:e8:8d:84:c9:89:6e:f4:00:0d:89:
2c:a4:4a:f2:83:c6:ba:dc:aa:02:c7:0f:6c:40:3f:
5f:80:04:6d:03:ba:51:0a:43:11:0a:0f:dc:60:f0:
c5:ed:70:41:66:92:a2:6f:c5:d0:26:92:89:36:5e:
9a:e4:ed:ba:32:7f:7c:5f:ee:e1:01:e4:41:f9:4d:
f6:b0:a9:f9:da:6f:5b:bb:11:d9:d7:c4:aa:4e:6f:
87:9a:f9:0a:ec:66:2d:a3:81:2a:81:2a:21:e0:f6:
8b:3a:f7:3e:f7:72:26:05:2f:fe:0f:da:55:5d:5e:
5d:2a:11:e3:17:51:8d:2b:e8:fb:4d:cb:16:21:70:
77:77:ee:44:51:a9:06:3c:9f:70:b1:bb:a6:31:6f:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:7F:8D:95:AE:F1:B6:2B:32:8F:14:6D:B8:84:3F:F8:0D:B3:62
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:23:8b:83:5a:e2:cd:56:d7:05:ed:2a:b2:0a:17:97:b1:6a:
32:37:ae:c2:a9:64:04:d2:46:86:a3:8e:13:29:17:cd:57:50:
c5:ab:e7:f5:03:22:73:46:c7:20:6a:68:97:d5:bc:1c:6a:7e:
38:38:14:bb:a7:0a:8d:e7:cf:62:08:18:26:27:e9:f6:2e:e3:
57:ac:91:1d:70:cd:6e:67:5c:c8:6e:a0:28:a5:d3:07:f0:44:
1c:7b:53:8a:e4:2f:d3:b7:b8:d3:58:fd:27:c0:c1:37:e6:db:
ee:52:2e:b4:c0:84:b1:82:e7:c4:2e:a0:e4:d2:0c:13:e2:53:
bc:ab:62:63:9d:59:68:20:4c:e6:89:68:1d:a5:f8:f1:47:e5:
1f:a7:06:d1:eb:c9:59:3b:45:ae:8e:a1:b6:df:96:32:0f:49:
95:d9:55:c0:ad:42:b1:de:6c:4d:33:4b:76:84:c9:b1:c7:f2:
94:bb:9d:f3:60:7f:3e:2e:ea:02:e8:a2:47:c5:72:c6:41:0c:
fb:83:60:b8:06:a9:42:61:14:ba:87:00:d5:9e:7e:90:c7:fc:
f1:38:01:c0:6a:cc:50:14:41:bc:88:81:fd:c4:9a:1d:d8:67:
39:68:32:94:d2:10:4b:ac:4d:59:8f:76:be:75:2c:96:c0:ec:
ce:ef:51:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6+OH1BaAf2vbGJvG80KKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh
ZTAxNDgwHhcNMjUxMDIwMDAwMTM1WhcNMjUxMDIxMDAwMTM1WjAzMTEwLwYDVQQD
Eyg3ZGFkN2Y4ZDk1YWVmMWI2MmIzMjhmMTQ2ZGI4ODQzZmY4MGRiMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn22N1yMW3XMnl+G+X70ykGzdbsK+
Y8RuwMcGC2qw+1rkYTzAnJZeDcQuE8hpnplg9PevHZ86HDYmlu2y9GCfUtsN2thT
70BjnDUop5kU+9hD8igEDF7Nrj2kv2VdxG+k0iLkcfXBL4q/fcqwEOiNhMmJbvQA
DYkspEryg8a63KoCxw9sQD9fgARtA7pRCkMRCg/cYPDF7XBBZpKib8XQJpKJNl6a
5O26Mn98X+7hAeRB+U32sKn52m9buxHZ18SqTm+HmvkK7GYto4EqgSoh4PaLOvc+
93ImBS/+D9pVXV5dKhHjF1GNK+j7TcsWIXB3d+5EUakGPJ9wsbumMW+VAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2tf42VrvG2KzKPFG24hD/4DbNiMB8GA1UdIwQY
MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt
M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk
LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCOLg1ri
zVbXBe0qsgoXl7FqMjeuwqlkBNJGhqOOEykXzVdQxavn9QMic0bHIGpol9W8HGp+
ODgUu6cKjefPYggYJifp9i7jV6yRHXDNbmdcyG6gKKXTB/BEHHtTiuQv07e401j9
J8DBN+bb7lIutMCEsYLnxC6g5NIME+JTvKtiY51ZaCBM5oloHaX48UflH6cG0evJ
WTtFro6htt+WMg9JldlVwK1Csd5sTTNLdoTJscfylLud82B/Pi7qAuiiR8VyxkEM
+4NguAapQmEUuocA1Z5+kMf88TgBwGrMUBRBvIiB/cSaHdhnOWgylNIQS6xNWY92
vnUslsDszu9R6A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:06 2025 by rpki-client