Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier: U+nGq71H9DxdMQlvBeY3EwYCQahCL2VbUsiL1YwScro=
Subject key identifier: F3:7B:60:F8:1B:38:BA:CE:93:A7:74:D0:AA:5F:7B:1C:D6:EA:EE:6A
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 0199FFC8D295FDB6AE3BCBFE1BDA85AE397A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:55 +0000
Manifest this update: Mon 20 Oct 2025 04:02:55 +0000
Manifest next update: Tue 21 Oct 2025 04:02:55 +0000
Files and hashes: 1: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: AISAaUml41cVPmz2irpen6eTa1YS96P+vNMeTVbd/5Q=)
2: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (hash: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d2:95:fd:b6:ae:3b:cb:fe:1b:da:85:ae:39:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: Oct 20 04:02:55 2025 GMT
Not After : Oct 21 04:02:55 2025 GMT
Subject: CN=f37b60f81b38bace93a774d0aa5f7b1cd6eaee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:96:44:b0:09:a9:84:de:6a:53:b3:a5:27:
57:5f:33:69:83:72:d3:9d:a5:41:b6:e5:c4:ac:61:
b2:b7:61:5f:d9:6d:63:20:c7:83:bc:3d:0d:b3:d9:
d5:95:da:ff:65:a8:f8:3e:69:12:a3:f1:4a:44:ec:
f6:eb:98:c4:8f:5a:aa:32:61:94:63:29:7c:a4:0c:
fe:82:6a:54:13:f4:35:b8:a3:82:83:0a:12:eb:3f:
38:38:ce:50:ac:ec:2a:11:5b:8a:a0:a9:18:cb:f2:
9e:c9:f3:c0:d2:5a:66:09:06:68:bb:34:cf:0f:62:
40:bb:48:aa:87:71:ba:b6:4b:da:09:fc:57:69:2a:
ae:86:e3:2c:0d:78:1d:16:7d:07:5e:02:fc:f9:68:
46:a0:c6:98:7a:e3:21:64:0b:a1:68:f7:a7:37:1e:
ba:b5:ec:a5:58:6e:1f:a3:64:7a:37:1b:26:e8:09:
57:b9:9c:bf:7b:13:0e:c3:38:3e:08:c4:80:e6:a8:
b2:2e:99:75:79:a7:5f:92:b2:94:05:c4:e3:2e:43:
07:fb:14:12:d7:ae:6e:d1:d3:3b:fc:af:65:18:b3:
1c:39:b6:4c:41:0e:94:85:00:cb:10:13:49:af:c0:
6f:ab:9d:b7:95:56:a2:02:3e:a2:bd:bb:20:20:8a:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:60:F8:1B:38:BA:CE:93:A7:74:D0:AA:5F:7B:1C:D6:EA:EE:6A
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:12:aa:a3:53:cc:6e:fb:b2:dd:79:eb:5f:70:75:7a:c2:1c:
eb:52:8c:cf:1f:26:fc:0c:f5:c7:af:87:c7:e7:96:6a:7b:11:
8c:b5:18:04:dd:b4:d3:1c:90:ab:bf:73:2c:b0:71:10:5c:32:
33:45:b2:38:9f:de:9a:a6:30:5b:54:54:8c:c5:8c:6b:f8:a7:
89:a7:39:8c:fb:49:f6:cd:b0:c4:2f:0e:c7:e2:ea:67:49:e0:
25:14:99:c9:26:6f:d3:d1:34:8f:30:6c:76:57:53:0b:29:ec:
cf:e9:9d:3e:a3:92:af:d9:07:05:40:85:f3:5b:51:04:26:62:
a1:5e:d5:35:3a:72:1c:3f:df:b7:c6:27:88:f3:7f:aa:48:ab:
ee:07:b9:b0:b8:e8:10:6e:ac:76:0b:86:6f:8e:a6:2e:bb:e1:
96:e6:87:9f:59:d3:6d:50:8c:75:ab:4b:3d:8f:69:a0:db:1e:
4a:96:39:16:32:36:4c:32:d9:f7:12:f0:98:03:48:9a:06:61:
fc:f2:3e:2f:a1:32:48:b8:7f:90:30:e5:31:7f:b0:77:c1:9d:
92:e5:09:a7:a6:12:98:55:1a:e1:0d:d3:18:50:de:44:cd:e4:
28:7c:da:bd:c6:b1:bf:52:43:5e:89:a1:9b:98:35:dc:c6:4f:
2d:f8:84:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yNKV/bauO8v+G9qFrjl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNWM0NGU4Yzk2MWExNDUwZDBhYWIyMTJmMGRlYzcxN2Qx
ZGVmYjYwHhcNMjUxMDIwMDQwMjU1WhcNMjUxMDIxMDQwMjU1WjAzMTEwLwYDVQQD
EyhmMzdiNjBmODFiMzhiYWNlOTNhNzc0ZDBhYTVmN2IxY2Q2ZWFlZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51mWRLAJqYTealOzpSdXXzNpg3LT
naVBtuXErGGyt2Ff2W1jIMeDvD0Ns9nVldr/Zaj4PmkSo/FKROz265jEj1qqMmGU
Yyl8pAz+gmpUE/Q1uKOCgwoS6z84OM5QrOwqEVuKoKkYy/KeyfPA0lpmCQZouzTP
D2JAu0iqh3G6tkvaCfxXaSquhuMsDXgdFn0HXgL8+WhGoMaYeuMhZAuhaPenNx66
teylWG4fo2R6Nxsm6AlXuZy/exMOwzg+CMSA5qiyLpl1eadfkrKUBcTjLkMH+xQS
165u0dM7/K9lGLMcObZMQQ6UhQDLEBNJr8Bvq523lVaiAj6ivbsgIIq8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN7YPgbOLrOk6d00KpfexzW6u5qMB8GA1UdIwQY
MBaAFDBcROjJYaFFDQqrIS8N7HF9He+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYt
ZDUyN2NlMGQ5OTMwLzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYtZDUyN2NlMGQ5OTMw
LzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRKqo1PM
bvuy3XnrX3B1esIc61KMzx8m/Az1x6+Hx+eWansRjLUYBN200xyQq79zLLBxEFwy
M0WyOJ/emqYwW1RUjMWMa/iniac5jPtJ9s2wxC8Ox+LqZ0ngJRSZySZv09E0jzBs
dldTCynsz+mdPqOSr9kHBUCF81tRBCZioV7VNTpyHD/ft8YniPN/qkir7ge5sLjo
EG6sdguGb46mLrvhluaHn1nTbVCMdatLPY9poNseSpY5FjI2TDLZ9xLwmANImgZh
/PI+L6EySLh/kDDlMX+wd8GdkuUJp6YSmFUa4Q3TGFDeRM3kKHzavcaxv1JDXomh
m5g13MZPLfiESw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:27 2025 by rpki-client