
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: m3hjswH80IS6PQ/AaLMYZG+QMDKbx5ThksLZguuF1Z8=
Subject key identifier: B0:AB:99:D3:25:3D:9C:06:CB:D7:FD:95:98:BA:25:F6:13:A8:07:87
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 0199FAD7A678C6773B1F34183D351BB728EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: FYh6QbtAC92qV/TYNdltkn1hyRKR6IguBYcZ0NGlRUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a6:78:c6:77:3b:1f:34:18:3d:35:1b:b7:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=b0ab99d3253d9c06cbd7fd9598ba25f613a80787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:e4:75:90:4e:06:e7:90:88:1d:75:7a:da:
48:99:ca:96:2c:7d:4e:ff:91:01:2d:65:17:d2:01:
8d:c3:60:3a:31:fb:e4:fe:61:6a:fe:28:17:86:90:
ba:8d:98:f3:0e:0e:f4:09:e8:3f:a2:8d:1f:46:29:
35:bb:d7:c2:0a:63:a4:ba:17:5c:2b:2a:f7:93:e2:
13:4f:bf:a2:eb:ca:22:69:3c:0d:7b:26:f1:01:23:
d7:d1:9d:af:cc:08:60:6c:78:d4:56:38:25:8a:da:
12:a4:c9:8a:cd:3e:73:50:45:94:28:5f:03:fa:fb:
56:c0:35:ba:81:75:40:a4:3b:07:e5:5b:b3:d2:ee:
17:24:6b:f2:6f:43:bd:0f:00:ed:34:ed:75:fc:d3:
4e:ba:1b:7a:69:76:0f:5d:f7:31:b8:78:da:d3:57:
61:95:02:bf:a9:71:eb:96:15:75:07:66:9e:09:c9:
0e:dd:83:bc:df:b1:67:55:07:1d:0f:b3:66:a5:2e:
60:2c:88:9e:bd:c3:d3:47:9b:ed:de:1d:32:dc:4d:
80:16:e5:f0:33:ff:ef:5f:ee:9a:09:1a:af:d6:7e:
e9:16:e9:68:fe:bd:9d:24:e5:d6:90:41:3f:a4:57:
7f:d8:51:6f:85:46:60:56:7d:83:dc:b8:9e:35:b1:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:99:D3:25:3D:9C:06:CB:D7:FD:95:98:BA:25:F6:13:A8:07:87
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:29:cf:48:99:4c:cc:d1:05:60:d4:0c:10:d2:76:a8:8a:
6d:3c:08:a3:94:c6:d3:94:91:98:83:70:14:a5:3e:6d:54:3c:
bf:63:55:b0:25:78:a8:3d:ba:fe:90:8e:76:e5:a8:52:25:e3:
3b:5e:ea:4e:c9:bb:4b:28:d4:e6:d5:cf:8a:b0:2c:69:49:aa:
74:90:fd:16:f8:9a:11:40:eb:fc:2d:42:0e:8c:0e:f8:1f:13:
d1:bf:09:48:20:d3:9a:8f:50:6d:b7:43:4f:11:af:4f:6c:df:
a2:22:28:6e:5e:d4:37:a8:db:4f:18:a7:cf:8a:4a:20:0b:ef:
68:fb:04:a3:87:ab:70:ae:42:9b:2f:1e:ee:9f:34:ba:52:43:
0d:c3:68:35:a5:07:7f:43:5f:33:24:90:96:5f:34:09:4c:bf:
bb:e1:f0:13:d5:e5:e4:91:fb:15:7f:29:12:82:fe:93:29:d6:
13:e1:3a:80:2f:a3:ba:f1:f7:75:da:1b:92:67:2a:82:ca:c0:
c4:8d:4b:82:27:79:c9:f9:62:c7:05:b0:94:32:bb:d5:fe:81:
56:52:e3:6b:0b:50:db:0e:95:dc:9e:85:c0:ed:9b:d2:db:e3:
41:06:59:31:64:fa:c5:52:61:91:7f:bb:4a:30:37:0a:d8:aa:
b4:9e:05:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn616Z4xnc7HzQYPTUbtyjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm
Nzc4MTEwHhcNMjUxMDE5MDUwMTAwWhcNMjUxMDIwMDUwMTAwWjAzMTEwLwYDVQQD
EyhiMGFiOTlkMzI1M2Q5YzA2Y2JkN2ZkOTU5OGJhMjVmNjEzYTgwNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdnkdZBOBueQiB11etpImcqWLH1O
/5EBLWUX0gGNw2A6Mfvk/mFq/igXhpC6jZjzDg70Ceg/oo0fRik1u9fCCmOkuhdc
Kyr3k+ITT7+i68oiaTwNeybxASPX0Z2vzAhgbHjUVjglitoSpMmKzT5zUEWUKF8D
+vtWwDW6gXVApDsH5Vuz0u4XJGvyb0O9DwDtNO11/NNOuht6aXYPXfcxuHja01dh
lQK/qXHrlhV1B2aeCckO3YO837FnVQcdD7NmpS5gLIievcPTR5vt3h0y3E2AFuXw
M//vX+6aCRqv1n7pFulo/r2dJOXWkEE/pFd/2FFvhUZgVn2D3LieNbG1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCrmdMlPZwGy9f9lZi6JfYTqAeHMB8GA1UdIwQY
MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt
NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw
LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEQpz0iZ
TMzRBWDUDBDSdqiKbTwIo5TG05SRmINwFKU+bVQ8v2NVsCV4qD26/pCOduWoUiXj
O17qTsm7SyjU5tXPirAsaUmqdJD9FviaEUDr/C1CDowO+B8T0b8JSCDTmo9QbbdD
TxGvT2zfoiIobl7UN6jbTxinz4pKIAvvaPsEo4ercK5Cmy8e7p80ulJDDcNoNaUH
f0NfMySQll80CUy/u+HwE9Xl5JH7FX8pEoL+kynWE+E6gC+juvH3ddobkmcqgsrA
xI1Lgid5yflixwWwlDK71f6BVlLjawtQ2w6V3J6FwO2b0tvjQQZZMWT6xVJhkX+7
SjA3CtiqtJ4F2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:35 2025 by rpki-client