Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: bZsikVRKrULMswmVvtbwXwzAELH7ZnIYZQTEO8AxuEk=
Subject key identifier: F5:10:C5:A7:42:64:7C:34:7B:98:87:80:02:AD:48:70:B3:13:6B:24
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0199FCFD84B341C06CD7B50E02D589164AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: wOfTWH76wNyk8Ms8DK7YMdW3QXwg2KiZD+ASahB0Lh0=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:84:b3:41:c0:6c:d7:b5:0e:02:d5:89:16:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=f510c5a742647c347b98878002ad4870b3136b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:74:d0:b4:db:44:f9:7f:92:f4:b0:13:b0:
5e:13:05:78:fe:f4:e9:dd:f3:0b:89:d8:9a:3d:ee:
db:5d:30:4d:49:00:88:53:63:91:21:d9:71:da:fc:
79:d4:cc:fc:d5:a1:4a:e6:57:8f:73:ad:ed:bd:69:
f7:55:2a:9e:a9:50:15:36:1e:c5:7d:04:bb:6e:46:
8c:1a:b2:e0:30:a7:d2:4d:72:f4:68:2c:9d:f9:13:
78:72:ba:f6:b1:c4:44:49:f1:5c:0b:6c:54:07:1b:
99:ef:4c:f7:3c:be:98:5f:bf:55:73:e8:9a:d3:e8:
e6:f3:5b:0d:56:9b:3a:12:d5:e7:5f:91:fb:40:62:
08:4f:80:fc:b0:73:8f:a6:63:58:95:a8:3b:67:fe:
1b:f4:e4:1e:2a:8c:fd:3d:da:fd:cf:48:fc:7a:cd:
c4:0f:3c:8f:33:65:7b:11:d4:d4:58:76:66:27:28:
cf:1c:20:19:06:34:db:b3:1f:a8:11:d8:9d:3b:e0:
aa:09:c4:aa:e3:09:06:70:32:3b:f5:ff:b1:e8:27:
7e:aa:e7:b3:f0:2b:b9:c1:87:c6:73:05:17:1f:7d:
3a:0e:a0:da:88:a9:af:de:d4:db:47:e2:a3:97:cd:
26:56:c7:f1:64:0e:a2:a0:8f:2b:02:fc:8e:a5:d9:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:C5:A7:42:64:7C:34:7B:98:87:80:02:AD:48:70:B3:13:6B:24
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:e2:e8:ff:85:de:b5:20:a5:b6:7a:a3:23:72:b2:26:b5:
70:3e:04:64:a2:81:1a:a9:1b:e8:57:db:c2:2a:89:cc:8d:ea:
00:56:1d:1c:ca:b8:fb:99:66:d4:ea:65:4b:35:fe:d2:20:c9:
9e:4f:b6:72:1d:2c:ff:82:9e:a5:dc:80:4f:08:95:e5:4e:12:
f2:e0:27:cf:84:07:7d:b7:41:07:05:13:8e:52:4f:33:2b:b4:
8c:29:ec:46:3a:8c:83:52:51:f4:5e:d4:70:e7:45:b6:35:99:
6a:2c:16:f2:57:ac:17:8b:57:b8:ca:3a:86:ff:86:c9:91:1a:
14:67:a7:a0:cf:99:06:98:31:69:2d:81:ca:cd:0f:4b:b8:39:
96:2b:88:5d:47:b2:f6:2c:f8:35:13:d3:24:4c:ae:6f:5d:60:
2e:b8:52:a7:16:29:e4:6f:ac:11:c6:a2:09:f2:ef:2b:90:87:
e8:5d:84:2c:c9:2b:65:3d:af:a3:38:ce:e9:23:f5:09:07:6c:
7e:b1:a1:65:89:ea:fe:9f:77:86:99:a0:90:b3:3d:72:10:c5:
4f:d6:d6:9a:75:8c:6b:38:34:85:7b:ca:22:ea:e1:be:90:60:
00:da:59:25:d6:35:f8:f9:70:76:b6:ed:c5:89:4e:1a:05:be:
6d:77:cc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YSzQcBs17UOAtWJFkrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUxMDE5MTUwMTM2WhcNMjUxMDIwMTUwMTM2WjAzMTEwLwYDVQQD
EyhmNTEwYzVhNzQyNjQ3YzM0N2I5ODg3ODAwMmFkNDg3MGIzMTM2YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthF00LTbRPl/kvSwE7BeEwV4/vTp
3fMLidiaPe7bXTBNSQCIU2ORIdlx2vx51Mz81aFK5lePc63tvWn3VSqeqVAVNh7F
fQS7bkaMGrLgMKfSTXL0aCyd+RN4crr2scRESfFcC2xUBxuZ70z3PL6YX79Vc+ia
0+jm81sNVps6EtXnX5H7QGIIT4D8sHOPpmNYlag7Z/4b9OQeKoz9Pdr9z0j8es3E
DzyPM2V7EdTUWHZmJyjPHCAZBjTbsx+oEdidO+CqCcSq4wkGcDI79f+x6Cd+quez
8Cu5wYfGcwUXH306DqDaiKmv3tTbR+Kjl80mVsfxZA6ioI8rAvyOpdkHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUQxadCZHw0e5iHgAKtSHCzE2skMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN13i6P+F
3rUgpbZ6oyNysia1cD4EZKKBGqkb6FfbwiqJzI3qAFYdHMq4+5lm1OplSzX+0iDJ
nk+2ch0s/4KepdyATwiV5U4S8uAnz4QHfbdBBwUTjlJPMyu0jCnsRjqMg1JR9F7U
cOdFtjWZaiwW8lesF4tXuMo6hv+GyZEaFGenoM+ZBpgxaS2Bys0PS7g5liuIXUey
9iz4NRPTJEyub11gLrhSpxYp5G+sEcaiCfLvK5CH6F2ELMkrZT2vozjO6SP1CQds
frGhZYnq/p93hpmgkLM9chDFT9bWmnWMazg0hXvKIurhvpBgANpZJdY1+Plwdrbt
xYlOGgW+bXfMOA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:37 2025 by rpki-client