Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: uvWw9sadWZ8nFpD48646N8A6YJKxaub4JIgMWnS5txg=
Subject key identifier: 52:FE:02:62:34:E4:2B:E0:0D:D2:29:7F:33:4E:A4:D1:10:A8:27:1E
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 0199FC588A0942280FFE1B9CAE3F7931BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 03D8
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: 9NdMMIoDUR2XAVDr27dcAh79+G3uDTU+60UzsIzsR4o=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:09:42:28:0f:fe:1b:9c:ae:3f:79:31:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=52fe026234e42be00dd2297f334ea4d110a8271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:38:c4:c3:f2:28:a7:f6:61:3d:b1:12:3c:
af:63:fd:09:71:ca:fd:c1:4b:79:a8:76:ed:fc:69:
54:1f:92:6d:44:6a:bd:77:c4:d8:e8:2b:ad:ca:ad:
a9:2b:04:d8:6e:60:bd:46:e6:45:fc:f5:1e:67:52:
69:0f:d8:c6:a4:93:bf:4e:c3:2e:ee:b3:90:03:2d:
cd:87:93:df:02:69:5c:dc:cb:55:2d:7c:61:78:84:
3f:f1:e9:5f:ad:bb:b7:0f:d1:f6:fa:80:18:5d:31:
d3:37:bf:32:01:5c:03:82:f0:b5:cf:97:5f:c5:9b:
fc:fb:db:9d:04:71:68:b6:7f:54:91:e5:15:93:4e:
d9:2b:d2:37:a3:77:fb:38:66:7f:ec:06:67:40:15:
8d:2a:c3:f0:32:51:6c:73:3e:6d:47:c0:81:ee:c1:
20:13:e4:12:dc:ea:0d:2d:e0:5f:c8:c8:e2:a7:21:
c1:79:e7:78:ef:14:e9:51:7d:77:46:1d:50:61:2a:
65:17:a3:5b:7a:d2:87:f0:ef:63:ac:07:6b:c1:52:
e5:6a:53:91:10:72:5e:02:c0:c3:07:21:ca:05:73:
e1:d1:96:73:a5:4e:fd:e0:91:9d:e7:c8:c8:0f:e8:
71:b0:43:63:0d:af:de:75:e7:60:2f:1e:8c:0b:40:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:02:62:34:E4:2B:E0:0D:D2:29:7F:33:4E:A4:D1:10:A8:27:1E
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:9f:ec:c5:03:40:5f:b1:7a:ae:61:62:28:f2:46:db:86:
5b:99:c7:6b:59:14:1e:1e:bf:88:a9:16:73:53:3c:e8:a5:ae:
78:09:d9:fb:86:14:8c:d0:ae:6f:7e:77:36:40:0f:2a:84:21:
60:41:14:70:47:83:70:94:24:b5:fc:f0:46:60:eb:d1:2c:ed:
16:0d:f6:c3:12:de:3b:e1:4d:1b:24:43:25:e5:15:56:1b:ce:
cf:72:d2:10:51:e7:e4:45:dc:8b:b8:b7:e3:55:9a:76:77:1d:
c4:4d:e7:b3:ad:9b:97:8d:9a:aa:c0:51:35:16:cf:83:56:09:
fe:0f:89:be:0e:94:5c:aa:08:f6:e0:69:16:c3:89:c9:9c:f9:
cf:f1:46:40:25:5c:51:37:fb:8f:f3:2e:d1:1b:16:35:e2:bf:
b8:26:c6:89:59:cc:5d:28:7f:92:ed:4d:56:07:12:43:df:87:
b3:48:fb:0b:fa:49:0d:54:7a:fc:ce:fb:29:7e:c9:b5:bc:da:
ec:d2:84:28:62:e1:2e:5f:ed:81:74:0e:8f:64:a6:e1:35:f3:
bf:a7:76:04:0b:73:42:9f:e5:bb:74:f0:34:6b:ae:ac:9d:c4:
7a:3d:ab:04:c0:c6:33:41:82:a0:85:3d:ac:af:86:58:8c:0c:
89:a5:c5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIoJQigP/hucrj95Mbu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ODE1YzdkMGU4NjNjMjE3ODBmOGJmNGI5ZWNjM2E5YzY0
NTkyOTgwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
Eyg1MmZlMDI2MjM0ZTQyYmUwMGRkMjI5N2YzMzRlYTRkMTEwYTgyNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Q4xMPyKKf2YT2xEjyvY/0Jccr9
wUt5qHbt/GlUH5JtRGq9d8TY6Cutyq2pKwTYbmC9RuZF/PUeZ1JpD9jGpJO/TsMu
7rOQAy3Nh5PfAmlc3MtVLXxheIQ/8elfrbu3D9H2+oAYXTHTN78yAVwDgvC1z5df
xZv8+9udBHFotn9UkeUVk07ZK9I3o3f7OGZ/7AZnQBWNKsPwMlFscz5tR8CB7sEg
E+QS3OoNLeBfyMjipyHBeed47xTpUX13Rh1QYSplF6NbetKH8O9jrAdrwVLlalOR
EHJeAsDDByHKBXPh0ZZzpU794JGd58jID+hxsENjDa/ededgLx6MC0CnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL+AmI05CvgDdIpfzNOpNEQqCceMB8GA1UdIwQY
MBaAFHaBXH0OhjwheA+L9Lnsw6nGRZKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEt
ZTU0NzM5NWQ2YjQ3LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEtZTU0NzM5NWQ2YjQ3
LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsuf7MUD
QF+xeq5hYijyRtuGW5nHa1kUHh6/iKkWc1M86KWueAnZ+4YUjNCub353NkAPKoQh
YEEUcEeDcJQktfzwRmDr0SztFg32wxLeO+FNGyRDJeUVVhvOz3LSEFHn5EXci7i3
41WadncdxE3ns62bl42aqsBRNRbPg1YJ/g+Jvg6UXKoI9uBpFsOJyZz5z/FGQCVc
UTf7j/Mu0RsWNeK/uCbGiVnMXSh/ku1NVgcSQ9+Hs0j7C/pJDVR6/M77KX7Jtbza
7NKEKGLhLl/tgXQOj2Sm4TXzv6d2BAtzQp/lu3TwNGuurJ3Eej2rBMDGM0GCoIU9
rK+GWIwMiaXFGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:27 2025 by rpki-client