Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: Gpdycc3G/NvWSwckPbfdw60V9DMu8BetQKCk7rZlz0Q=
Subject key identifier: 39:40:50:E4:7A:9F:07:BC:97:08:87:72:FF:84:79:75:1E:0C:F6:D9
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0199FB7CB86BE36DDEEAD6A475CDEA23D643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: SS0c6/c1t02xF5MVeiC+knnlh07TDDPADEui/Nico9Q=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:6b:e3:6d:de:ea:d6:a4:75:cd:ea:23:d6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=394050e47a9f07bc97088772ff8479751e0cf6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:02:f2:79:72:c5:42:29:01:6a:2c:42:73:
88:f2:06:99:dd:87:82:6f:21:0c:0f:e1:81:0c:30:
55:d7:64:26:db:8f:4c:cc:ee:2c:4b:f6:94:81:5a:
62:d3:c0:47:dd:04:69:a8:ec:85:98:e8:1e:de:0e:
59:65:8e:b6:90:44:1f:f4:70:5a:a5:b4:c6:fa:cf:
83:f3:ba:ca:0d:44:e4:ae:8e:75:6b:5c:d6:aa:08:
58:61:b7:0f:49:95:2b:9a:2a:cf:3c:9e:9a:8e:20:
27:25:46:10:b0:6f:8d:36:ed:0f:a3:01:51:32:cf:
24:ca:31:ef:6b:fc:d8:b5:bb:ea:bf:e2:46:ae:07:
7a:1b:9e:f7:ee:c9:3c:53:9a:a4:92:47:6d:d1:cd:
d0:03:a5:cd:49:9e:58:72:b4:fb:74:c7:19:28:b2:
20:47:3a:f6:3b:bf:24:43:f2:a9:1a:5c:bc:dd:a4:
f5:30:62:e2:60:18:ce:25:c9:5b:e2:16:86:55:88:
08:1a:fb:e8:dd:36:4c:d2:a6:6d:e8:1b:3a:cb:3c:
c6:e1:ec:c3:c8:83:3d:f6:cb:b5:dc:95:a8:15:d5:
b5:e2:ee:ef:de:14:0d:0e:ad:b5:2f:45:d2:ae:da:
9b:de:e0:13:71:34:b0:e8:92:8b:c6:e9:10:ed:e2:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:50:E4:7A:9F:07:BC:97:08:87:72:FF:84:79:75:1E:0C:F6:D9
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:47:29:c9:31:54:da:29:16:d8:b9:e4:17:6c:c2:3a:21:
58:31:2a:73:b3:dd:5b:0c:1f:83:b7:b0:9c:10:ae:34:b6:05:
a3:ca:8a:8e:25:96:d2:ee:e9:35:4e:12:33:93:53:ca:15:b3:
62:d4:f5:a1:22:1c:e9:94:47:31:a8:70:cd:be:df:8b:1d:b6:
0a:bc:bc:d4:09:79:66:60:1b:95:e8:8a:0b:87:83:62:1f:fe:
6f:6d:61:fe:4c:49:53:4b:ca:2e:08:20:bb:79:a3:58:be:42:
f8:6f:0c:d8:f4:8f:40:35:a4:34:23:64:67:d6:41:d4:d5:f9:
6c:3a:2b:c4:63:76:14:d1:68:02:30:66:fe:8d:83:06:22:0b:
76:84:6f:1e:63:55:c0:e6:0e:92:44:f9:05:bf:3c:66:7d:e6:
ad:22:d5:52:fa:28:1f:21:74:ca:9e:54:42:0a:1c:b5:2b:0b:
d0:4b:c2:20:17:fa:d6:3e:9f:cb:bc:ea:8d:34:3e:7f:5e:81:
16:7f:92:eb:b8:40:b4:47:8d:34:35:36:46:46:d1:58:ab:f8:
7c:ad:72:94:8e:50:b5:f3:d9:99:be:49:3d:04:61:3d:75:10:
43:2b:1d:73:b6:0d:35:23:0d:a4:03:f9:7f:c0:05:00:e5:11:
33:34:ad:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLhr423e6takdc3qI9ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjUxMDE5MDgwMTE4WhcNMjUxMDIwMDgwMTE4WjAzMTEwLwYDVQQD
EygzOTQwNTBlNDdhOWYwN2JjOTcwODg3NzJmZjg0Nzk3NTFlMGNmNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6sC8nlyxUIpAWosQnOI8gaZ3YeC
byEMD+GBDDBV12Qm249MzO4sS/aUgVpi08BH3QRpqOyFmOge3g5ZZY62kEQf9HBa
pbTG+s+D87rKDUTkro51a1zWqghYYbcPSZUrmirPPJ6ajiAnJUYQsG+NNu0PowFR
Ms8kyjHva/zYtbvqv+JGrgd6G5737sk8U5qkkkdt0c3QA6XNSZ5YcrT7dMcZKLIg
Rzr2O78kQ/KpGly83aT1MGLiYBjOJclb4haGVYgIGvvo3TZM0qZt6Bs6yzzG4ezD
yIM99su13JWoFdW14u7v3hQNDq21L0XSrtqb3uATcTSw6JKLxukQ7eKKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlAUOR6nwe8lwiHcv+EeXUeDPbZMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDlHKckx
VNopFti55BdswjohWDEqc7PdWwwfg7ewnBCuNLYFo8qKjiWW0u7pNU4SM5NTyhWz
YtT1oSIc6ZRHMahwzb7fix22Cry81Al5ZmAbleiKC4eDYh/+b21h/kxJU0vKLggg
u3mjWL5C+G8M2PSPQDWkNCNkZ9ZB1NX5bDorxGN2FNFoAjBm/o2DBiILdoRvHmNV
wOYOkkT5Bb88Zn3mrSLVUvooHyF0yp5UQgoctSsL0EvCIBf61j6fy7zqjTQ+f16B
Fn+S67hAtEeNNDU2RkbRWKv4fK1ylI5QtfPZmb5JPQRhPXUQQysdc7YNNSMNpAP5
f8AFAOURMzStvg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:05 2025 by rpki-client