Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: FjRWA48++/s0xU38ziZXamgXNeDc1s7NdLMDsThdWNM=
Subject key identifier: A0:93:E3:80:D4:31:83:9E:B5:B6:46:00:45:C8:C1:8F:EF:B6:0B:C1
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 0199FFC7CFA2CA866BB9E117E8FFCE18299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:01:48 +0000
Manifest this update: Mon 20 Oct 2025 04:01:48 +0000
Manifest next update: Tue 21 Oct 2025 04:01:48 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: Qln+OVunUbXfDjpzhNtWRMMY+vgMKT7kW3fOnv+vriw=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:cf:a2:ca:86:6b:b9:e1:17:e8:ff:ce:18:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Oct 20 04:01:48 2025 GMT
Not After : Oct 21 04:01:48 2025 GMT
Subject: CN=a093e380d431839eb5b6460045c8c18fefb60bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:1c:7d:3e:c5:bd:9f:46:91:cf:74:ba:79:
ff:cd:85:be:93:20:67:ab:9e:a3:c5:68:c1:50:42:
6d:82:7f:c8:fd:cf:11:e0:f0:33:53:a9:51:d2:f1:
b9:11:84:c8:89:ba:f8:3e:34:c7:1e:84:21:32:9e:
e1:d9:16:a9:44:8c:37:0f:7a:df:fa:1a:b6:29:5d:
a1:1f:f6:23:32:e5:b4:0b:f7:e1:d2:2f:c3:a8:64:
ae:0d:2a:86:c4:c4:7e:16:94:54:c5:e0:6a:56:60:
ed:2a:19:1f:03:91:0e:f3:37:4d:fe:7f:41:b8:27:
0a:25:2e:c6:58:a7:ee:fd:9c:91:88:01:5c:c0:b3:
cc:62:c3:dc:27:fa:16:87:d6:c1:27:a2:15:eb:bc:
8b:b1:83:c8:6f:b6:1a:91:b6:64:5d:94:af:7d:88:
06:40:97:53:3e:ad:ae:af:3c:e3:35:5e:5e:2a:9f:
bf:de:27:10:49:9b:31:cd:57:93:90:50:88:92:1c:
bc:e3:a2:28:b9:c6:3b:94:87:2b:fc:89:77:91:7b:
b5:58:86:70:02:95:ea:20:84:66:52:ae:2e:2d:19:
d5:9b:39:e0:2a:ec:d1:d8:ec:e3:36:22:7a:13:9a:
8a:51:8e:29:9f:ff:b8:32:77:31:f2:27:92:a3:c3:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:E3:80:D4:31:83:9E:B5:B6:46:00:45:C8:C1:8F:EF:B6:0B:C1
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:05:ee:6d:ef:86:6b:b0:0d:7c:48:98:01:1d:dd:db:73:
cc:d6:af:f4:0e:c8:9f:a3:19:3f:fc:d9:37:7e:6c:8e:f2:86:
84:8e:7c:07:ce:05:22:5a:ae:a8:68:c9:49:9e:d9:bd:c6:9b:
b2:47:5c:d2:db:cc:54:58:7b:23:f5:3b:23:f6:b1:cf:0b:44:
a5:f2:60:7f:81:ee:af:16:d8:ea:80:59:e7:3d:08:d5:64:12:
12:68:8b:38:2a:ce:84:77:50:6e:98:d0:84:55:15:f4:32:0d:
56:46:34:c5:aa:05:ba:4b:f0:1f:70:5a:cb:ac:aa:7c:2a:5d:
ff:07:08:c6:a2:72:d7:76:10:1b:f3:3d:d0:5b:52:9a:e6:83:
97:ae:78:c7:34:35:ee:68:a5:0e:2b:1d:1d:e8:e2:0a:c2:a1:
e2:de:56:5e:0c:57:a9:3a:fa:75:8c:3e:d9:67:61:0f:52:1e:
ff:ad:0a:38:b4:13:be:e7:3d:70:67:a7:b9:9f:80:c4:5f:a2:
7d:09:7c:2c:43:df:f7:ca:42:33:a0:fe:0c:6c:24:be:3e:fc:
d5:3d:94:52:50:fd:40:d1:0b:92:28:bf:6e:ef:80:8d:41:32:
a7:d3:68:77:bb:2f:86:f8:49:17:1e:b6:12:0b:ab:8a:0d:db:
a0:09:61:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x8+iyoZrueEX6P/OGCmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1
NGZiNjIwHhcNMjUxMDIwMDQwMTQ4WhcNMjUxMDIxMDQwMTQ4WjAzMTEwLwYDVQQD
EyhhMDkzZTM4MGQ0MzE4MzllYjViNjQ2MDA0NWM4YzE4ZmVmYjYwYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58EcfT7FvZ9Gkc90unn/zYW+kyBn
q56jxWjBUEJtgn/I/c8R4PAzU6lR0vG5EYTIibr4PjTHHoQhMp7h2RapRIw3D3rf
+hq2KV2hH/YjMuW0C/fh0i/DqGSuDSqGxMR+FpRUxeBqVmDtKhkfA5EO8zdN/n9B
uCcKJS7GWKfu/ZyRiAFcwLPMYsPcJ/oWh9bBJ6IV67yLsYPIb7YakbZkXZSvfYgG
QJdTPq2urzzjNV5eKp+/3icQSZsxzVeTkFCIkhy846IoucY7lIcr/Il3kXu1WIZw
ApXqIIRmUq4uLRnVmzngKuzR2OzjNiJ6E5qKUY4pn/+4Mncx8ieSo8OkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCT44DUMYOetbZGAEXIwY/vtgvBMB8GA1UdIwQY
MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt
NThmYWEyN2U1NTQ5LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5
LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2QF7m3v
hmuwDXxImAEd3dtzzNav9A7In6MZP/zZN35sjvKGhI58B84FIlquqGjJSZ7Zvcab
skdc0tvMVFh7I/U7I/axzwtEpfJgf4HurxbY6oBZ5z0I1WQSEmiLOCrOhHdQbpjQ
hFUV9DINVkY0xaoFukvwH3Bay6yqfCpd/wcIxqJy13YQG/M90FtSmuaDl654xzQ1
7milDisdHejiCsKh4t5WXgxXqTr6dYw+2WdhD1Ie/60KOLQTvuc9cGenuZ+AxF+i
fQl8LEPf98pCM6D+DGwkvj781T2UUlD9QNELkii/bu+AjUEyp9Nod7svhvhJFx62
Egurig3boAlhIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:37 2025 by rpki-client