
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File: v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier: iICbkvM7XvAJLTAt1G0u9E/FuWyEcnGrF10zUXbxNxQ=
Subject key identifier: 04:29:A9:D5:C6:25:CD:E9:B0:6F:74:D7:9A:AE:B1:52:6F:DF:7F:12
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 019A503DADB5A829FCFA082CC517CF145E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number: 0FE1
Signing time: Tue 04 Nov 2025 19:00:10 +0000
Manifest this update: Tue 04 Nov 2025 19:00:10 +0000
Manifest next update: Wed 05 Nov 2025 19:00:10 +0000
Files and hashes: 1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: nOvL1v6wqhyJ5MP6u6ZjFSezhFj9TcLen8FadhcfkqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ad:b5:a8:29:fc:fa:08:2c:c5:17:cf:14:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Nov 4 19:00:10 2025 GMT
Not After : Nov 5 19:00:10 2025 GMT
Subject: CN=0429a9d5c625cde9b06f74d79aaeb1526fdf7f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:8c:95:ac:7e:38:bd:c7:b0:35:61:4a:5d:
35:32:07:d8:08:09:5a:1d:90:c7:5f:f6:3e:13:58:
f3:7e:18:43:0e:32:73:fe:ff:6a:36:af:41:be:ff:
c1:55:41:7c:4c:71:20:50:e4:01:05:3e:f8:17:7c:
6d:64:9e:d7:89:86:79:93:65:92:40:63:eb:82:01:
b6:c4:86:4f:3a:4c:d7:b9:5b:5f:cb:4a:a3:8d:ed:
65:60:3a:58:63:69:2d:1d:17:98:94:b5:4e:8f:77:
06:a1:1e:32:4d:17:02:71:d0:b0:8c:48:fa:98:92:
b3:d6:d7:5a:60:d2:8d:26:1e:41:dc:d1:1b:06:b7:
8d:e2:85:82:b6:58:96:45:f5:d3:25:64:7b:d7:cb:
b3:76:76:17:cf:5b:73:c1:04:15:8a:bb:88:d3:80:
83:97:86:96:07:36:a6:fa:99:3a:b8:61:de:85:4d:
85:5e:2f:d8:54:07:17:bd:bc:1d:9e:d5:51:30:3b:
68:25:21:4b:59:a5:50:ca:3b:fa:cf:4e:6d:f8:4d:
a8:e2:a1:85:b7:5a:89:92:af:a2:a4:33:88:fa:ce:
58:69:6b:3b:45:9b:64:80:ff:91:e4:56:fc:7c:81:
b6:89:5b:e2:6c:8d:ab:a8:83:7a:db:a2:c2:30:32:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:A9:D5:C6:25:CD:E9:B0:6F:74:D7:9A:AE:B1:52:6F:DF:7F:12
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:84:e2:5d:4e:09:c2:94:98:63:90:27:44:2b:3d:1c:74:
c0:b2:de:a3:5d:0b:a0:75:f8:73:ab:2d:82:96:25:e6:01:c5:
d7:14:6d:07:19:36:4b:ff:6e:7d:77:33:1e:bd:51:c3:46:bb:
2a:eb:b7:ed:c6:aa:73:44:88:38:7d:be:58:6f:04:c2:dd:3e:
fc:11:eb:2d:fb:6c:de:f8:df:3d:2a:8f:6e:f1:4b:7d:b5:39:
7f:cd:2d:00:cf:df:2a:81:3b:d1:15:6f:15:42:86:85:7d:4a:
0a:e6:46:44:29:ca:0d:71:17:07:a5:e2:09:a5:6a:d3:f7:06:
1e:c2:b2:e7:8c:92:78:b7:03:e1:05:74:9c:6f:cc:ae:c1:13:
ad:6e:35:48:fb:29:62:a4:94:a1:57:16:c7:e4:a9:74:57:00:
83:87:53:eb:c8:45:db:08:04:96:c1:4a:a0:a9:a6:1e:2f:9c:
cd:ec:c3:58:c3:50:b2:ef:dc:59:ee:5c:94:78:24:14:37:2c:
69:2e:68:f6:04:5b:07:33:f0:3a:ae:3a:71:c7:1d:c9:67:24:
60:26:d8:bf:dd:3a:cb:d8:6f:69:9b:99:02:7a:39:32:7b:92:
73:c6:10:3f:48:ef:a3:28:f6:45:1b:0f:98:41:84:16:34:03:
b7:2f:14:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPa21qCn8+ggsxRfPFF4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl
YzYyYzgwHhcNMjUxMTA0MTkwMDEwWhcNMjUxMTA1MTkwMDEwWjAzMTEwLwYDVQQD
EygwNDI5YTlkNWM2MjVjZGU5YjA2Zjc0ZDc5YWFlYjE1MjZmZGY3ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQqMlax+OL3HsDVhSl01MgfYCAla
HZDHX/Y+E1jzfhhDDjJz/v9qNq9Bvv/BVUF8THEgUOQBBT74F3xtZJ7XiYZ5k2WS
QGPrggG2xIZPOkzXuVtfy0qjje1lYDpYY2ktHReYlLVOj3cGoR4yTRcCcdCwjEj6
mJKz1tdaYNKNJh5B3NEbBreN4oWCtliWRfXTJWR718uzdnYXz1tzwQQViruI04CD
l4aWBzam+pk6uGHehU2FXi/YVAcXvbwdntVRMDtoJSFLWaVQyjv6z05t+E2o4qGF
t1qJkq+ipDOI+s5YaWs7RZtkgP+R5Fb8fIG2iVvibI2rqIN626LCMDKdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQpqdXGJc3psG9015qusVJv338SMB8GA1UdIwQY
MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct
MjQ5Y2UwYzMxMmIzLzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz
LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFuE4l1O
CcKUmGOQJ0QrPRx0wLLeo10LoHX4c6stgpYl5gHF1xRtBxk2S/9ufXczHr1Rw0a7
Kuu37caqc0SIOH2+WG8Ewt0+/BHrLfts3vjfPSqPbvFLfbU5f80tAM/fKoE70RVv
FUKGhX1KCuZGRCnKDXEXB6XiCaVq0/cGHsKy54ySeLcD4QV0nG/MrsETrW41SPsp
YqSUoVcWx+SpdFcAg4dT68hF2wgElsFKoKmmHi+czezDWMNQsu/cWe5clHgkFDcs
aS5o9gRbBzPwOq46cccdyWckYCbYv906y9hvaZuZAno5MnuSc8YQP0jvoyj2RRsP
mEGEFjQDty8UCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:07 2025 by rpki-client