Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: DW9bhKKTv4JU2Mmuy2AqCKd++zXzFh4w1JxFG+VeUbo=
Subject key identifier: 78:12:FA:39:D1:3C:CF:3C:24:19:EF:9F:0C:7D:70:44:29:49:2A:61
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 0199FDD8E19335E22FB1D0E22187834A1976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:13 +0000
Manifest this update: Sun 19 Oct 2025 19:01:13 +0000
Manifest next update: Mon 20 Oct 2025 19:01:13 +0000
Files and hashes: 1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: VeXPOAeHPjd4R66z346B/48JyKTZ14v6y5DJGBUzIds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e1:93:35:e2:2f:b1:d0:e2:21:87:83:4a:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Oct 19 19:01:13 2025 GMT
Not After : Oct 20 19:01:13 2025 GMT
Subject: CN=7812fa39d13ccf3c2419ef9f0c7d704429492a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:6d:89:39:71:e7:97:8e:26:64:b0:d0:c0:
15:4e:3a:96:47:1a:55:23:9f:e2:22:50:6b:38:a5:
1c:4f:92:8e:d1:a9:03:e3:6e:ed:be:09:af:12:9b:
c1:94:51:be:4b:40:2e:74:4a:1d:42:0b:64:a9:b2:
4b:1e:cc:8e:62:d4:f0:10:4b:b9:9a:f3:58:98:b2:
dc:8c:d5:cb:93:5a:c1:9d:f9:c0:3a:e3:85:b6:d6:
74:9a:b9:4a:c4:56:7e:20:ef:69:6e:5c:ee:d9:fb:
f1:94:54:e0:8a:5f:a3:7e:82:c0:2e:3a:81:19:aa:
9a:cf:d0:fd:6c:e6:76:a4:26:b2:8c:94:36:56:9b:
9b:94:80:70:29:43:df:9d:28:e0:20:dc:13:dd:7e:
89:53:33:3f:26:a3:56:9e:97:f9:bc:f6:2b:99:7e:
7e:2d:41:84:c7:a7:e1:6f:fa:88:f9:eb:33:75:65:
e9:78:ad:c9:a1:c3:43:e4:65:aa:1e:f2:78:aa:e0:
bf:c9:fc:7a:48:9b:39:64:51:2f:c6:fb:88:7a:bc:
fa:13:62:65:ff:29:1e:76:ad:55:11:13:24:6f:26:
fb:6a:ae:88:9a:a4:96:51:12:7d:ae:d4:fe:08:2f:
51:6d:02:24:ba:24:c4:31:af:ac:2c:d3:69:78:6d:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:FA:39:D1:3C:CF:3C:24:19:EF:9F:0C:7D:70:44:29:49:2A:61
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:bc:f9:f7:50:47:7b:47:e4:ca:e0:1f:c7:ac:52:db:2f:
a6:a4:51:64:21:44:2b:26:f1:19:0f:5d:e8:42:c9:59:4c:ef:
8c:dd:5f:11:37:a0:4a:6d:c8:56:fc:97:54:c1:b1:2a:cf:82:
11:ea:08:12:e8:34:d0:c7:72:b5:7d:57:d3:24:76:9a:9e:c9:
6e:6a:f2:19:12:cc:18:f8:ed:7e:d7:59:98:cf:93:a9:f7:ca:
50:0e:2b:d6:1a:b8:31:0e:da:b8:8c:73:80:b3:74:97:49:4c:
61:bb:01:e5:0b:51:96:46:85:72:06:ed:c2:d9:90:22:eb:89:
7d:e4:de:b0:6c:01:1d:a4:a3:8f:b2:02:55:bd:83:13:3a:27:
d6:cb:39:8e:60:46:75:0b:91:01:ec:88:29:b1:be:ef:25:7d:
ac:62:fb:8a:77:a1:2f:32:19:27:f0:75:db:71:0b:1c:44:63:
21:f4:0a:06:3b:fb:c5:88:79:93:60:d1:2d:97:44:5c:62:66:
8a:ce:66:e8:ce:2f:f7:d1:7f:a2:ae:94:f4:d3:ce:a5:5b:51:
38:f4:d8:35:3a:f1:64:18:35:e4:e6:48:84:bf:5a:68:f7:35:
de:df:33:11:d4:8b:2c:51:98:de:23:00:7d:77:55:86:dd:59:
15:57:9c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92OGTNeIvsdDiIYeDShl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGFmZDYzNjA2MzZhNjMyNzc0N2EwNzA4MGY3ZjJlNWUz
MmNlODUwHhcNMjUxMDE5MTkwMTEzWhcNMjUxMDIwMTkwMTEzWjAzMTEwLwYDVQQD
Eyg3ODEyZmEzOWQxM2NjZjNjMjQxOWVmOWYwYzdkNzA0NDI5NDkyYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZtiTlx55eOJmSw0MAVTjqWRxpV
I5/iIlBrOKUcT5KO0akD427tvgmvEpvBlFG+S0AudEodQgtkqbJLHsyOYtTwEEu5
mvNYmLLcjNXLk1rBnfnAOuOFttZ0mrlKxFZ+IO9pblzu2fvxlFTgil+jfoLALjqB
Gaqaz9D9bOZ2pCayjJQ2VpublIBwKUPfnSjgINwT3X6JUzM/JqNWnpf5vPYrmX5+
LUGEx6fhb/qI+eszdWXpeK3JocND5GWqHvJ4quC/yfx6SJs5ZFEvxvuIerz6E2Jl
/ykedq1VERMkbyb7aq6ImqSWURJ9rtT+CC9RbQIkuiTEMa+sLNNpeG3/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgS+jnRPM88JBnvnwx9cEQpSSphMB8GA1UdIwQY
MBaAFGja/WNgY2pjJ3R6BwgPfy5eMs6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDkt
MmJiMjM3N2U1YTFjLzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDktMmJiMjM3N2U1YTFj
LzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4C8+fdQ
R3tH5MrgH8esUtsvpqRRZCFEKybxGQ9d6ELJWUzvjN1fETegSm3IVvyXVMGxKs+C
EeoIEug00MdytX1X0yR2mp7JbmryGRLMGPjtftdZmM+TqffKUA4r1hq4MQ7auIxz
gLN0l0lMYbsB5QtRlkaFcgbtwtmQIuuJfeTesGwBHaSjj7ICVb2DEzon1ss5jmBG
dQuRAeyIKbG+7yV9rGL7inehLzIZJ/B123ELHERjIfQKBjv7xYh5k2DRLZdEXGJm
is5m6M4v99F/oq6U9NPOpVtROPTYNTrxZBg15OZIhL9aaPc13t8zEdSLLFGY3iMA
fXdVht1ZFVecJw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:54 2025 by rpki-client