Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: 9A+XS+YlaNTpow5CmqGfXu0gHCBp6DXYqTy1gLSQ9Fk=
Subject key identifier: 07:7A:6D:6F:D7:97:71:4B:91:8D:55:D5:97:E6:73:EC:F0:CC:17:6D
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 0199FB462E9428E6028D0204E30657958E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: kER1upV2isKfOyxHUNxP8LFYWgdHBwBdPhPt/QL03VE=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2e:94:28:e6:02:8d:02:04:e3:06:57:95:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=077a6d6fd797714b918d55d597e673ecf0cc176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:2e:50:6c:74:44:e5:54:97:02:d6:c9:ff:
0c:52:09:ee:b7:a8:19:40:ed:68:b0:ae:06:a0:7b:
8d:2f:39:cd:04:09:4f:1e:db:5e:2f:c2:23:be:6c:
22:2c:45:80:92:78:20:5a:19:dd:61:4b:cf:eb:d1:
ac:4b:17:b4:9f:c9:e9:82:23:c0:8c:1c:7a:d8:f4:
7a:18:5b:57:d1:92:4a:f8:da:6b:ed:d1:c0:ce:23:
6f:24:55:2f:b0:47:d4:55:23:70:bd:49:a5:bf:f3:
61:04:da:8c:9c:cf:a3:4f:e1:83:5b:6b:a9:6f:93:
49:be:36:e2:80:66:35:f7:c5:36:7c:3e:27:fd:b5:
42:64:a1:34:40:77:32:84:c6:74:b9:49:72:28:37:
cc:1d:2a:5f:04:63:3a:1a:66:21:ff:13:3b:60:90:
76:ec:24:78:97:90:86:cd:95:ab:07:a6:ea:85:60:
c8:15:2e:1c:ea:c2:d5:f1:18:d7:9a:6b:6a:76:b0:
f3:95:83:2a:bf:b9:54:73:d0:61:0c:e5:2e:f3:62:
09:5e:7a:35:b1:40:e7:0d:43:7d:3b:aa:dc:df:16:
91:72:6e:f2:7f:aa:a3:cc:fc:36:6c:d5:50:fa:64:
ea:7d:a9:bb:00:02:64:73:f5:ef:5c:3a:d0:ea:bd:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:6D:6F:D7:97:71:4B:91:8D:55:D5:97:E6:73:EC:F0:CC:17:6D
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:01:bd:dc:34:eb:a3:36:68:b2:3d:56:b2:9e:ce:fd:86:
e1:3e:9b:11:95:2b:5c:db:7c:c5:6c:1e:51:96:6c:7d:c7:67:
a0:c6:bd:12:72:4a:64:77:59:3d:91:ca:a0:e5:38:5a:f5:f5:
c8:02:f9:3f:2b:31:4f:1d:4e:10:62:0d:a8:8b:75:59:5b:49:
17:81:8d:01:2f:e3:97:41:a2:76:ca:a4:cd:1d:a5:5b:01:ba:
0d:2e:cf:8f:38:8a:17:3d:3a:25:f8:47:c3:6a:f6:2e:53:4b:
02:86:85:d6:98:e3:67:b7:f7:d9:db:96:6d:4a:49:97:f1:cd:
a8:08:2d:ea:8d:97:8b:65:44:30:c4:7c:6f:38:ae:cd:82:a5:
5a:05:7a:74:5e:ae:44:09:aa:87:8b:e9:3b:22:a7:df:3a:d6:
e2:1d:93:e3:1d:c7:b1:76:17:75:f4:e6:ec:50:cb:71:e3:1e:
da:22:4e:e2:78:d8:b8:09:5b:89:cf:65:37:a1:17:05:2f:c7:
ba:10:aa:4f:cb:02:9c:c5:6f:69:b7:21:36:78:cf:04:52:b2:
af:77:e1:4a:22:3f:b5:5c:67:3e:9c:22:06:a0:49:91:a0:da:
10:7a:f1:54:8a:bc:af:a6:75:83:b3:fb:e2:3d:1a:a8:82:26:
dd:33:59:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ri6UKOYCjQIE4wZXlY6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjUxMDE5MDcwMTQ0WhcNMjUxMDIwMDcwMTQ0WjAzMTEwLwYDVQQD
EygwNzdhNmQ2ZmQ3OTc3MTRiOTE4ZDU1ZDU5N2U2NzNlY2YwY2MxNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYguUGx0ROVUlwLWyf8MUgnut6gZ
QO1osK4GoHuNLznNBAlPHtteL8IjvmwiLEWAknggWhndYUvP69GsSxe0n8npgiPA
jBx62PR6GFtX0ZJK+Npr7dHAziNvJFUvsEfUVSNwvUmlv/NhBNqMnM+jT+GDW2up
b5NJvjbigGY198U2fD4n/bVCZKE0QHcyhMZ0uUlyKDfMHSpfBGM6GmYh/xM7YJB2
7CR4l5CGzZWrB6bqhWDIFS4c6sLV8RjXmmtqdrDzlYMqv7lUc9BhDOUu82IJXno1
sUDnDUN9O6rc3xaRcm7yf6qjzPw2bNVQ+mTqfam7AAJkc/XvXDrQ6r1M8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAd6bW/Xl3FLkY1V1Zfmc+zwzBdtMB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNIBvdw0
66M2aLI9VrKezv2G4T6bEZUrXNt8xWweUZZsfcdnoMa9EnJKZHdZPZHKoOU4WvX1
yAL5PysxTx1OEGINqIt1WVtJF4GNAS/jl0GidsqkzR2lWwG6DS7PjziKFz06JfhH
w2r2LlNLAoaF1pjjZ7f32duWbUpJl/HNqAgt6o2Xi2VEMMR8bziuzYKlWgV6dF6u
RAmqh4vpOyKn3zrW4h2T4x3HsXYXdfTm7FDLceMe2iJO4njYuAlbic9lN6EXBS/H
uhCqT8sCnMVvabchNnjPBFKyr3fhSiI/tVxnPpwiBqBJkaDaEHrxVIq8r6Z1g7P7
4j0aqIIm3TNZLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:33 2025 by rpki-client