Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier: W5LQrbccB+f0ew0bA1czmpReh5Q7L/XeBYzNyCg3uKY=
Subject key identifier: A2:CE:1C:BA:C5:F3:84:46:9D:A0:46:D0:D3:EC:34:24:73:C2:18:D3
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial: 0199FD3463594323502DC6D11D98C7A4CF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number: 0663
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: 0WZDcJTZud/HX3AhdrECqGgcoXsLUjqcXv7ZwCP/Its=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:63:59:43:23:50:2d:c6:d1:1d:98:c7:a4:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=a2ce1cbac5f384469da046d0d3ec342473c218d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:00:52:c9:67:56:73:29:b7:24:ff:61:2f:
ee:c9:82:f8:2f:6a:cf:b2:66:79:76:4a:6c:bb:49:
29:9d:19:6e:b3:2b:5b:50:c9:c7:3e:04:18:d8:c5:
74:94:18:b0:70:f2:3f:ff:09:ab:fa:f1:19:b4:d0:
67:b2:b9:66:f6:70:37:8d:04:29:3a:c5:30:d1:6b:
40:06:3e:21:a4:76:f4:eb:a5:97:27:0f:18:8f:4a:
15:57:c9:4a:fc:b1:b6:a0:6a:07:cf:66:a7:6a:05:
4c:55:80:c9:8b:80:66:b6:c8:60:5e:41:f2:8b:a5:
42:a8:d7:f4:68:fe:8e:88:52:e0:89:59:08:55:ec:
e3:6c:00:94:3c:38:2f:dd:2c:a3:b3:24:33:0e:dc:
1e:98:38:1d:fe:b8:2f:28:36:c1:cd:e0:d9:d3:bc:
43:db:4a:cf:e2:0b:4e:2f:68:43:4f:df:d8:18:cc:
ec:e6:29:2a:64:15:1d:51:f3:5c:dc:17:e6:00:69:
b4:35:62:6d:3d:9e:ec:dd:aa:8b:ce:b4:ac:9f:e1:
43:90:22:0e:ab:22:f3:ce:9d:04:8e:4e:6f:57:a0:
d1:26:a4:42:19:00:05:10:e9:bd:ba:d8:c4:89:67:
bf:e9:68:fc:ad:61:55:00:f8:b9:7d:9e:27:ec:62:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:1C:BA:C5:F3:84:46:9D:A0:46:D0:D3:EC:34:24:73:C2:18:D3
X509v3 Authority Key Identifier:
keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:e8:c6:6b:7b:99:9b:f9:3d:fe:62:10:b7:05:97:87:fc:
47:87:cf:8a:ed:9b:fc:fd:f4:58:1e:c9:ac:85:55:6e:7b:61:
a8:43:a6:30:ad:f0:e6:80:9d:a3:e3:2e:98:a7:d1:f3:ca:36:
b8:3a:08:0d:ee:3a:7d:aa:5c:8a:74:b1:35:de:54:72:d7:5f:
eb:3f:3d:77:73:2a:fc:99:9d:7c:e6:75:1f:b4:50:71:d0:04:
4f:63:0a:39:15:85:25:9d:04:7b:41:75:b3:3d:ef:46:da:3e:
02:ff:eb:6b:44:e1:47:98:e3:c1:a5:0b:01:fb:d1:ed:8c:2c:
cc:8f:a2:ea:50:d7:65:ed:e5:43:7d:c3:4c:c7:6a:e1:da:21:
97:8d:48:f1:91:25:db:4b:f5:24:d5:53:95:b8:09:de:73:64:
d4:5a:aa:19:1d:b0:ba:86:63:27:69:b5:7a:da:bb:7e:30:08:
9f:c6:6d:f3:f3:ad:54:16:b8:f6:ee:02:0f:3e:62:a3:5c:f2:
9a:f9:94:90:dd:6e:67:7e:04:d7:73:de:fd:16:e2:88:8c:af:
cb:7d:cc:9c:c1:9e:35:63:a6:4e:00:8e:2b:5c:ce:9d:47:f1:
94:da:e5:9a:c0:de:dc:5e:62:b7:9a:ad:0f:e1:7d:9e:aa:be:
6c:01:a0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGNZQyNQLcbRHZjHpM8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OGYwZTJiYTJkMDkzNDMzYTRiNjEyOTU3MjdiOTliYjE0
NWY3N2IwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD
EyhhMmNlMWNiYWM1ZjM4NDQ2OWRhMDQ2ZDBkM2VjMzQyNDczYzIxOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L4AUslnVnMptyT/YS/uyYL4L2rP
smZ5dkpsu0kpnRlusytbUMnHPgQY2MV0lBiwcPI//wmr+vEZtNBnsrlm9nA3jQQp
OsUw0WtABj4hpHb066WXJw8Yj0oVV8lK/LG2oGoHz2anagVMVYDJi4BmtshgXkHy
i6VCqNf0aP6OiFLgiVkIVezjbACUPDgv3SyjsyQzDtwemDgd/rgvKDbBzeDZ07xD
20rP4gtOL2hDT9/YGMzs5ikqZBUdUfNc3BfmAGm0NWJtPZ7s3aqLzrSsn+FDkCIO
qyLzzp0Ejk5vV6DRJqRCGQAFEOm9utjEiWe/6Wj8rWFVAPi5fZ4n7GJMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLOHLrF84RGnaBG0NPsNCRzwhjTMB8GA1UdIwQY
MBaAFBaPDiui0JNDOkthKVcnuZuxRfd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMt
ZjZmY2Y3M2NlZTcwLzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMtZjZmY2Y3M2NlZTcw
LzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4foxmt7
mZv5Pf5iELcFl4f8R4fPiu2b/P30WB7JrIVVbnthqEOmMK3w5oCdo+MumKfR88o2
uDoIDe46fapcinSxNd5Uctdf6z89d3Mq/JmdfOZ1H7RQcdAET2MKORWFJZ0Ee0F1
sz3vRto+Av/ra0ThR5jjwaULAfvR7YwszI+i6lDXZe3lQ33DTMdq4dohl41I8ZEl
20v1JNVTlbgJ3nNk1FqqGR2wuoZjJ2m1etq7fjAIn8Zt8/OtVBa49u4CDz5io1zy
mvmUkN1uZ34E13Pe/RbiiIyvy33MnMGeNWOmTgCOK1zOnUfxlNrlmsDe3F5it5qt
D+F9nqq+bAGgVQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:05 2025 by rpki-client