Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: LQSeeMTzL6gG/gVNvEgSVVrFW/bRsitk7PLPzHtTvzQ=
Subject key identifier: F8:A1:ED:19:31:1D:0E:C9:9D:D0:AD:75:5B:CC:7A:8E:C7:11:7E:24
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019A00A346F6D0FBC9DDC06E3A8550C1526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 08:01:31 +0000
Manifest this update: Mon 20 Oct 2025 08:01:31 +0000
Manifest next update: Tue 21 Oct 2025 08:01:31 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: jfLw4x/M7rsEO1aZTiwTdsloV43M/F8bK6kg04vvXSw=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:46:f6:d0:fb:c9:dd:c0:6e:3a:85:50:c1:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Oct 20 08:01:31 2025 GMT
Not After : Oct 21 08:01:31 2025 GMT
Subject: CN=f8a1ed19311d0ec99dd0ad755bcc7a8ec7117e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:cc:52:36:ea:c1:60:0f:72:19:9a:f4:e3:
a1:f7:0c:2f:25:ea:38:ac:ea:ae:1c:ae:56:c7:d7:
ec:98:2c:d6:7f:b9:39:c4:75:02:3e:59:80:38:a8:
47:e4:91:a2:c5:8c:1a:ea:b4:2f:f9:61:d1:ca:b1:
69:ed:84:45:25:c0:b9:57:8d:e3:69:9a:68:85:ef:
9d:cc:e4:2a:9c:f7:0a:73:60:9e:21:f5:bd:98:2d:
85:1f:46:3f:c7:23:4c:03:e4:f9:60:a0:60:32:ec:
7b:69:7a:6a:d2:5b:08:52:b8:fc:92:f9:0b:57:f9:
02:df:c8:f4:08:39:26:9d:64:7b:e4:d2:6b:de:ee:
11:b0:07:92:1e:66:28:7a:a8:12:bf:63:15:99:4b:
66:62:0b:42:fd:fd:93:8d:97:20:dd:5e:a3:72:93:
9c:d0:88:a6:cb:79:bb:f5:f1:a6:fd:9d:53:e4:37:
63:c4:cf:5b:47:95:4b:76:f1:69:9f:3e:87:c3:7d:
37:f8:d6:51:49:5c:c0:81:03:23:00:c7:2c:a8:bb:
29:7f:41:a5:0f:35:70:f9:dd:1b:aa:81:b0:27:2c:
af:49:1b:f2:57:31:b1:76:c3:0d:ea:67:e0:9c:36:
f0:ad:36:95:ba:c0:1a:b4:0c:d6:7a:09:16:0a:79:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:ED:19:31:1D:0E:C9:9D:D0:AD:75:5B:CC:7A:8E:C7:11:7E:24
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:ea:b8:8f:66:42:45:7c:4f:63:53:04:2b:4c:20:ca:41:
b0:df:eb:65:07:ae:75:be:64:bc:cc:0c:a3:46:77:ae:90:3e:
6c:59:9c:58:ca:bc:66:19:b0:76:87:96:e7:4d:f4:c7:f7:d3:
79:33:7a:c1:b6:84:7e:33:2f:46:3b:ad:ca:37:b3:c0:67:57:
de:ac:31:22:27:f9:3e:89:e3:99:19:26:aa:e1:e1:4d:74:d8:
64:57:bb:48:76:f0:09:34:b4:e9:c9:12:bc:55:77:2f:78:0e:
92:3c:a4:20:76:63:78:7e:6c:2f:78:88:5f:f2:99:8e:04:ff:
40:14:94:62:eb:67:f5:d5:6b:a4:ea:9a:76:a2:1c:fc:c0:3e:
41:fb:46:24:31:57:2d:5b:44:dd:de:2a:8b:f7:f5:f4:e3:5c:
59:60:1c:7c:22:eb:dc:5c:9d:b8:ce:a4:46:f3:df:be:74:e2:
06:42:95:a5:a3:65:37:8b:5e:1f:ce:3a:9e:ba:15:82:44:fe:
9d:44:de:d3:07:0e:e5:33:47:c4:53:27:1d:68:5b:6e:fd:45:
b1:b2:62:ac:b0:17:1d:65:89:f8:00:d6:e4:0c:73:51:8e:f4:
b3:6b:9b:ca:13:61:21:ff:f1:35:13:29:8e:aa:80:71:5e:bf:
9a:d5:d8:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo0b20PvJ3cBuOoVQwVJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2
NzcyYmIwHhcNMjUxMDIwMDgwMTMxWhcNMjUxMDIxMDgwMTMxWjAzMTEwLwYDVQQD
EyhmOGExZWQxOTMxMWQwZWM5OWRkMGFkNzU1YmNjN2E4ZWM3MTE3ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUXMUjbqwWAPchma9OOh9wwvJeo4
rOquHK5Wx9fsmCzWf7k5xHUCPlmAOKhH5JGixYwa6rQv+WHRyrFp7YRFJcC5V43j
aZpohe+dzOQqnPcKc2CeIfW9mC2FH0Y/xyNMA+T5YKBgMux7aXpq0lsIUrj8kvkL
V/kC38j0CDkmnWR75NJr3u4RsAeSHmYoeqgSv2MVmUtmYgtC/f2TjZcg3V6jcpOc
0Iimy3m79fGm/Z1T5DdjxM9bR5VLdvFpnz6Hw303+NZRSVzAgQMjAMcsqLspf0Gl
DzVw+d0bqoGwJyyvSRvyVzGxdsMN6mfgnDbwrTaVusAatAzWegkWCnk6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPih7RkxHQ7JndCtdVvMeo7HEX4kMB8GA1UdIwQY
MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt
ZDM4YTc2NjBiNTFlLzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl
LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcrquI9m
QkV8T2NTBCtMIMpBsN/rZQeudb5kvMwMo0Z3rpA+bFmcWMq8ZhmwdoeW5030x/fT
eTN6wbaEfjMvRjutyjezwGdX3qwxIif5PonjmRkmquHhTXTYZFe7SHbwCTS06ckS
vFV3L3gOkjykIHZjeH5sL3iIX/KZjgT/QBSUYutn9dVrpOqadqIc/MA+QftGJDFX
LVtE3d4qi/f19ONcWWAcfCLr3FyduM6kRvPfvnTiBkKVpaNlN4teH846nroVgkT+
nUTe0wcO5TNHxFMnHWhbbv1FsbJirLAXHWWJ+ADW5AxzUY70s2ubyhNhIf/xNRMp
jqqAcV6/mtXYzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:45 2025 by rpki-client