Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: 8/08cEtWgvcomZiY7uGbj3tWkq5VUN+GVXLl7+5mCb4=
Subject key identifier: 3C:89:0A:84:E9:AB:59:09:97:AC:66:53:73:59:E2:AF:71:3F:79:FD
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0199FCFD4A27BE28984F66B706BEABC40E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: raQ2bz+RQ18SBMYdMpGZ9GIRTBil92LutGcWDdRKi34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4a:27:be:28:98:4f:66:b7:06:be:ab:c4:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=3c890a84e9ab590997ac66537359e2af713f79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:30:a7:70:53:13:2a:b3:3c:a9:82:ea:c4:
f5:0f:46:4f:c5:78:99:55:a1:e1:03:d1:28:e7:b5:
4e:7b:41:47:36:6d:f0:7b:03:92:95:6d:81:b6:6d:
57:04:2a:fa:f8:c1:77:f9:ea:ba:ad:c6:60:c0:25:
99:f8:17:aa:57:40:7f:c3:3c:52:b9:26:39:98:c3:
99:8f:91:59:15:94:a4:02:44:5a:01:fb:01:b2:67:
7d:8f:45:51:02:25:59:90:40:d9:22:06:f9:78:d8:
59:ae:2e:d9:36:d7:e9:a6:51:18:5a:e6:9e:41:0e:
2c:95:31:55:14:e3:9a:7d:fa:36:34:47:57:98:9d:
d5:d2:27:eb:50:86:a6:c5:8b:e7:de:5c:9a:b5:fd:
d6:e6:c3:08:d4:28:b5:60:78:1b:e1:9c:4b:dd:f6:
5d:62:21:de:93:30:db:37:c8:ee:5b:49:95:f8:eb:
3c:9c:ba:3a:91:6e:05:56:38:86:34:20:4b:a8:69:
6e:f5:2c:ee:90:c2:08:70:24:31:0f:05:60:0c:2b:
c0:37:dc:aa:d9:d9:d3:bd:1d:5a:da:b6:12:ba:0b:
f3:b2:80:57:bb:2c:98:c0:27:91:f8:ae:ce:d3:c9:
44:c1:4d:20:ee:97:56:ca:39:9d:0c:29:96:a6:9a:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:0A:84:E9:AB:59:09:97:AC:66:53:73:59:E2:AF:71:3F:79:FD
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b8:ae:b4:fa:b4:4b:2b:65:b6:80:e3:b8:5c:a1:04:d6:d8:
ee:f9:58:62:a9:d6:ef:98:db:97:d9:e9:c8:d4:cb:5e:39:3e:
71:22:cc:7c:27:dc:f2:46:de:0e:c5:a7:6d:c0:f5:06:2b:2a:
48:b3:9b:e5:a4:8b:a7:0d:17:16:77:b5:96:91:f5:42:3b:ac:
a8:e6:0a:b8:ba:89:f8:f7:a1:1c:f9:69:98:28:ae:00:b6:01:
d0:fb:70:d2:0a:3f:e4:62:6b:4b:55:e1:83:95:5b:51:c3:a7:
10:0c:58:02:ce:b2:ba:09:24:4b:e2:80:87:20:a4:2f:93:8e:
25:58:0c:e0:c2:cb:93:5b:9b:2a:59:39:10:6d:51:31:71:57:
a8:53:d3:d1:2d:b8:7a:85:8f:53:d1:0d:7d:70:e4:56:3a:a3:
ea:41:ec:be:a8:4a:65:73:be:a0:2d:31:c5:d4:bf:0b:cc:c8:
ae:b5:8d:77:66:23:7a:d1:cf:87:0f:b6:45:83:c2:01:06:07:
d1:2d:15:21:45:f9:c4:ff:44:27:bf:0a:da:6b:ed:ac:e0:fc:
4b:f5:bf:b7:b2:7a:19:a4:ab:62:38:ee:29:06:7e:4e:82:c8:
b5:0b:3f:34:1f:9d:3a:ad:87:1d:82:40:59:e0:a0:c2:22:55:
d3:b2:91:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/UonviiYT2a3Br6rxA43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl
N2Q3OWYwHhcNMjUxMDE5MTUwMTIxWhcNMjUxMDIwMTUwMTIxWjAzMTEwLwYDVQQD
EygzYzg5MGE4NGU5YWI1OTA5OTdhYzY2NTM3MzU5ZTJhZjcxM2Y3OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0wp3BTEyqzPKmC6sT1D0ZPxXiZ
VaHhA9Eo57VOe0FHNm3wewOSlW2Btm1XBCr6+MF3+eq6rcZgwCWZ+BeqV0B/wzxS
uSY5mMOZj5FZFZSkAkRaAfsBsmd9j0VRAiVZkEDZIgb5eNhZri7ZNtfpplEYWuae
QQ4slTFVFOOaffo2NEdXmJ3V0ifrUIamxYvn3lyatf3W5sMI1Ci1YHgb4ZxL3fZd
YiHekzDbN8juW0mV+Os8nLo6kW4FVjiGNCBLqGlu9SzukMIIcCQxDwVgDCvAN9yq
2dnTvR1a2rYSugvzsoBXuyyYwCeR+K7O08lEwU0g7pdWyjmdDCmWppq8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyJCoTpq1kJl6xmU3NZ4q9xP3n9MB8GA1UdIwQY
MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt
Nzc2MzVhMjJlYjk2LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2
LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7iutPq0
SytltoDjuFyhBNbY7vlYYqnW75jbl9npyNTLXjk+cSLMfCfc8kbeDsWnbcD1Bisq
SLOb5aSLpw0XFne1lpH1QjusqOYKuLqJ+PehHPlpmCiuALYB0Ptw0go/5GJrS1Xh
g5VbUcOnEAxYAs6yugkkS+KAhyCkL5OOJVgM4MLLk1ubKlk5EG1RMXFXqFPT0S24
eoWPU9ENfXDkVjqj6kHsvqhKZXO+oC0xxdS/C8zIrrWNd2YjetHPhw+2RYPCAQYH
0S0VIUX5xP9EJ78K2mvtrOD8S/W/t7J6GaSrYjjuKQZ+ToLItQs/NB+dOq2HHYJA
WeCgwiJV07KR0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:27 2025 by rpki-client