Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: brKWWK3EPxUDaQSRtaEXuiPGR4a6qk4NYpAx49UPrIQ=
Subject key identifier: AE:39:B7:AE:C9:D8:C8:C9:07:4D:C8:A5:B2:02:54:C4:5D:9A:39:49
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 0199FC216A610AD80DB5880D6C35FD0FCF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 1021
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: 7wxGafJKG8ZMvsd6sz2X1TBquOyu9d6x1GwYBk14jOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6a:61:0a:d8:0d:b5:88:0d:6c:35:fd:0f:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=ae39b7aec9d8c8c9074dc8a5b20254c45d9a3949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:3a:36:a7:fe:22:b2:36:18:fe:57:cc:df:
4f:27:36:f0:92:a1:31:03:d8:93:c1:8d:56:d3:57:
ea:a3:32:40:7d:76:18:0c:65:b2:05:f4:6a:c6:c4:
78:41:12:76:3a:5d:26:2e:ee:4c:57:4f:27:10:1d:
78:5c:f3:ef:1e:f5:5a:3b:5e:c5:6b:b8:84:a7:43:
53:d7:35:f6:f8:53:18:8a:d6:a6:1b:5c:ca:b0:c3:
85:fb:ca:06:33:5d:d1:39:60:79:2e:16:18:1c:af:
08:f4:85:a0:d1:3d:f6:9e:54:37:cd:db:55:c1:e5:
6c:a1:f8:7d:ff:6f:e3:c6:7f:82:ba:b4:ef:cc:3a:
97:60:a8:86:34:52:6a:51:be:50:b6:b9:4b:43:55:
5b:fc:d3:1e:01:6f:a6:9e:35:c0:3a:e0:1f:50:52:
ad:2a:8d:5f:3c:14:9c:e2:30:df:dd:70:fe:e2:36:
e3:ce:67:be:d0:51:74:21:03:33:66:09:ea:9f:eb:
13:0b:40:55:57:fc:65:0f:6d:c2:10:2c:6f:8f:f4:
75:ba:9d:48:fb:7b:50:09:aa:40:72:24:54:76:76:
dc:e5:95:f2:ad:bf:45:8b:02:95:e0:72:94:75:10:
b7:5d:27:5d:a5:f9:aa:8e:43:56:19:ee:48:fc:38:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:B7:AE:C9:D8:C8:C9:07:4D:C8:A5:B2:02:54:C4:5D:9A:39:49
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6b:79:67:ec:0a:98:25:19:2f:eb:39:ab:5f:1c:07:48:14:
f3:9b:61:8c:fc:be:8f:d0:ce:d1:ea:c8:6e:27:ff:31:5f:11:
b5:0b:dc:74:1b:c6:da:16:91:47:68:35:d9:d1:f3:50:49:cc:
a5:9b:64:84:8d:49:d6:2d:75:2e:a9:19:01:f1:48:06:60:ee:
41:75:77:44:58:9a:8e:26:60:65:7f:1d:9b:e7:5d:6a:0d:a2:
c9:9f:e7:5b:ca:1e:d4:f7:3a:40:bb:84:be:f8:a3:59:15:12:
b0:9b:58:89:1b:1b:5a:1c:06:f3:c1:e6:dc:76:ce:b0:b0:80:
bc:1b:dc:b1:a5:83:16:9f:38:a5:09:8c:88:34:20:0f:00:d3:
bb:31:6a:3e:ad:97:50:ea:a1:33:9e:27:74:70:da:c7:40:d2:
36:26:c0:37:c8:f2:1e:e6:61:0d:6e:f6:e0:33:ef:4e:47:12:
aa:4d:b0:de:b7:33:b3:21:14:62:0c:0e:bd:2c:56:fa:ed:7e:
07:57:cc:ee:38:0d:94:ed:f8:46:53:ac:cc:01:61:bb:ca:d7:
ad:f0:05:70:24:76:5f:4c:6a:bd:3c:ee:b9:66:ae:c2:f3:41:
bb:f7:47:90:0f:b7:99:6e:77:15:56:4e:81:41:e8:a9:17:2a:
93:81:6e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWphCtgNtYgNbDX9D8+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjUxMDE5MTEwMTEyWhcNMjUxMDIwMTEwMTEyWjAzMTEwLwYDVQQD
EyhhZTM5YjdhZWM5ZDhjOGM5MDc0ZGM4YTViMjAyNTRjNDVkOWEzOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcI6Nqf+IrI2GP5XzN9PJzbwkqEx
A9iTwY1W01fqozJAfXYYDGWyBfRqxsR4QRJ2Ol0mLu5MV08nEB14XPPvHvVaO17F
a7iEp0NT1zX2+FMYitamG1zKsMOF+8oGM13ROWB5LhYYHK8I9IWg0T32nlQ3zdtV
weVsofh9/2/jxn+CurTvzDqXYKiGNFJqUb5QtrlLQ1Vb/NMeAW+mnjXAOuAfUFKt
Ko1fPBSc4jDf3XD+4jbjzme+0FF0IQMzZgnqn+sTC0BVV/xlD23CECxvj/R1up1I
+3tQCapAciRUdnbc5ZXyrb9FiwKV4HKUdRC3XSddpfmqjkNWGe5I/DjvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK45t67J2MjJB03IpbICVMRdmjlJMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2t5Z+wK
mCUZL+s5q18cB0gU85thjPy+j9DO0erIbif/MV8RtQvcdBvG2haRR2g12dHzUEnM
pZtkhI1J1i11LqkZAfFIBmDuQXV3RFiajiZgZX8dm+ddag2iyZ/nW8oe1Pc6QLuE
vvijWRUSsJtYiRsbWhwG88Hm3HbOsLCAvBvcsaWDFp84pQmMiDQgDwDTuzFqPq2X
UOqhM54ndHDax0DSNibAN8jyHuZhDW724DPvTkcSqk2w3rczsyEUYgwOvSxW+u1+
B1fM7jgNlO34RlOszAFhu8rXrfAFcCR2X0xqvTzuuWauwvNBu/dHkA+3mW53FVZO
gUHoqRcqk4Fu2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:48 2025 by rpki-client