Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: uN0VViZDeCygtHVMj1Mw5I/ACV+2qchRMl9UKW24miU=
Subject key identifier: F9:E4:A3:EB:1F:E3:CB:53:35:AE:47:44:2F:2D:28:E3:C7:52:1A:B8
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0199FF22BFFC735A4E9563598FE4455FE635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 164F
Signing time: Mon 20 Oct 2025 01:01:31 +0000
Manifest this update: Mon 20 Oct 2025 01:01:31 +0000
Manifest next update: Tue 21 Oct 2025 01:01:31 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: ZwP8irtKhoS3gsoPxklhHbsmEUA9saKmdhkMmcj2Fsg=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bf:fc:73:5a:4e:95:63:59:8f:e4:45:5f:e6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Oct 20 01:01:31 2025 GMT
Not After : Oct 21 01:01:31 2025 GMT
Subject: CN=f9e4a3eb1fe3cb5335ae47442f2d28e3c7521ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:93:ff:6b:64:9b:be:98:e7:a1:77:99:b7:
da:e4:6a:00:47:ce:42:85:4a:23:99:19:bb:0c:3d:
6e:b9:c0:c0:1d:c1:3b:db:39:61:a0:96:01:b3:b8:
7c:5f:99:8e:42:66:1c:26:3c:01:6e:99:f8:a1:36:
fc:98:af:a6:4c:6d:f7:0e:e4:7b:74:b1:76:17:81:
ea:18:f4:e2:7e:58:c9:ba:5f:02:80:26:42:e1:1b:
8a:72:c9:50:09:39:16:51:f5:ba:35:be:f7:71:e0:
60:11:f0:16:95:07:56:a7:42:df:45:4e:0b:b0:f4:
2f:d3:3b:24:11:b8:5b:fd:9a:a1:2a:7f:3b:69:6b:
e8:30:f2:d1:3e:9d:d6:85:f9:46:69:36:87:56:32:
4a:81:83:86:fe:80:47:1d:41:8b:0e:79:b4:ae:2f:
ee:8c:07:6b:90:18:d4:27:b9:5b:3a:48:cc:56:3d:
59:e0:db:ea:84:f1:90:1e:ae:11:e2:91:85:18:8e:
97:b5:50:fd:1f:21:79:10:ce:a4:4f:a6:dc:1e:66:
51:57:86:18:5b:b9:69:4f:51:ad:80:70:af:67:82:
df:d3:2d:67:fa:48:fa:00:8b:3a:8a:72:34:ae:0d:
e1:c0:a4:e0:22:92:13:db:eb:d1:c2:84:08:67:82:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:A3:EB:1F:E3:CB:53:35:AE:47:44:2F:2D:28:E3:C7:52:1A:B8
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:98:9f:46:1c:f3:db:51:09:64:cd:ed:08:93:68:b4:7c:
94:59:c9:c2:48:35:ba:54:ff:ca:73:fa:77:75:f2:f3:1b:e3:
03:ef:3d:d8:37:37:1f:22:a1:ea:55:4a:3d:a6:79:13:a8:78:
a5:7c:eb:02:1d:15:43:1f:15:ac:48:bf:6d:c9:9c:d6:5f:66:
a7:45:50:3e:df:67:02:e0:9d:29:56:03:c0:4f:07:71:18:3b:
d6:f6:47:78:4d:f8:f9:9c:3f:e7:a7:4c:c9:28:0e:18:3b:ad:
42:00:11:60:45:e0:36:08:b7:10:30:cc:fa:38:1b:2f:6a:77:
4d:28:6e:5f:99:60:36:48:55:5f:61:2b:0a:fc:0f:79:16:44:
fd:28:f4:4e:60:92:8e:18:37:60:d4:92:33:3d:c5:9c:2c:c6:
e2:fe:4a:be:79:f1:8e:34:b5:3e:d2:8a:c0:54:f7:7c:49:2c:
79:87:26:78:84:6d:16:03:1b:02:2f:b5:cf:39:45:a9:60:e4:
af:75:ea:b5:02:c0:1c:e8:42:17:48:1e:b0:78:99:dd:cd:c5:
e9:28:01:10:8b:85:59:7f:a4:68:06:92:62:a1:ba:ca:42:8a:
56:55:00:ed:7c:6f:8e:8f:97:63:ff:ef:a7:39:d9:6d:0f:79:
10:7d:71:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Ir/8c1pOlWNZj+RFX+Y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5
NGU0OWMwHhcNMjUxMDIwMDEwMTMxWhcNMjUxMDIxMDEwMTMxWjAzMTEwLwYDVQQD
EyhmOWU0YTNlYjFmZTNjYjUzMzVhZTQ3NDQyZjJkMjhlM2M3NTIxYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrCT/2tkm76Y56F3mbfa5GoAR85C
hUojmRm7DD1uucDAHcE72zlhoJYBs7h8X5mOQmYcJjwBbpn4oTb8mK+mTG33DuR7
dLF2F4HqGPTifljJul8CgCZC4RuKcslQCTkWUfW6Nb73ceBgEfAWlQdWp0LfRU4L
sPQv0zskEbhb/ZqhKn87aWvoMPLRPp3WhflGaTaHVjJKgYOG/oBHHUGLDnm0ri/u
jAdrkBjUJ7lbOkjMVj1Z4NvqhPGQHq4R4pGFGI6XtVD9HyF5EM6kT6bcHmZRV4YY
W7lpT1GtgHCvZ4Lf0y1n+kj6AIs6inI0rg3hwKTgIpIT2+vRwoQIZ4IhvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnko+sf48tTNa5HRC8tKOPHUhq4MB8GA1UdIwQY
MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt
NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj
LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4GYn0Yc
89tRCWTN7QiTaLR8lFnJwkg1ulT/ynP6d3Xy8xvjA+892Dc3HyKh6lVKPaZ5E6h4
pXzrAh0VQx8VrEi/bcmc1l9mp0VQPt9nAuCdKVYDwE8HcRg71vZHeE34+Zw/56dM
ySgOGDutQgARYEXgNgi3EDDM+jgbL2p3TShuX5lgNkhVX2ErCvwPeRZE/Sj0TmCS
jhg3YNSSMz3FnCzG4v5KvnnxjjS1PtKKwFT3fEkseYcmeIRtFgMbAi+1zzlFqWDk
r3XqtQLAHOhCF0gesHiZ3c3F6SgBEIuFWX+kaAaSYqG6ykKKVlUA7Xxvjo+XY//v
pznZbQ95EH1xHw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:10 2025 by rpki-client