Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: +1Kzr0yFKis1OysNo7SStPT3VV1k3SDk+7t7XevPk4c=
Subject key identifier: 3B:69:98:DA:57:DF:C1:A2:45:FA:7C:32:A4:F5:7E:72:B7:57:A1:C2
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0199FB460EFC1CACE777B41F082CB01766E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: 5gJsmP2qrIBXO1rMbdvR/lqmzZbaEBR1WwqW9iXsRCY=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0e:fc:1c:ac:e7:77:b4:1f:08:2c:b0:17:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=3b6998da57dfc1a245fa7c32a4f57e72b757a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:94:2b:e3:91:61:2b:16:4b:1a:01:e2:d9:48:
44:94:f6:d6:9e:7c:e1:dc:21:73:e6:2c:48:b8:ba:
48:f0:49:18:ad:48:8b:74:80:69:7d:8d:6c:cc:35:
86:af:4d:90:1b:be:b0:ee:6e:08:8b:e1:bd:5a:13:
8d:96:7f:b5:dc:21:39:a9:a6:82:36:7a:51:1e:f8:
20:12:cc:86:fc:1f:c4:d1:b8:5d:8c:ac:a0:63:84:
63:e8:c9:59:68:c2:ef:e8:6a:48:39:2f:9f:27:0d:
75:e7:ea:41:a2:db:12:e5:b2:df:9f:38:04:a9:b2:
0e:72:a3:40:45:45:e3:64:97:3f:8a:77:ff:fe:e8:
30:56:88:6a:37:5f:a1:98:2b:3a:b5:af:5b:23:82:
97:67:9c:b4:8a:5a:3e:6e:a1:c7:3f:6c:f5:9c:71:
f2:19:db:1c:dc:39:95:87:48:70:91:38:12:e9:4a:
28:fc:ee:3f:51:3d:c4:f6:f3:07:a4:ab:b7:de:fb:
f2:dc:3f:1e:6e:ac:dd:09:a7:9a:75:25:31:ce:16:
3a:17:f9:12:cd:f4:3a:5e:84:c4:41:15:9f:ad:28:
d7:92:71:1a:ae:10:58:fe:f2:2a:86:bb:a9:67:39:
58:5c:83:b9:a7:a2:0c:f8:0b:30:8d:d3:b7:1c:a0:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:98:DA:57:DF:C1:A2:45:FA:7C:32:A4:F5:7E:72:B7:57:A1:C2
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:93:3b:d8:38:a1:ba:97:4d:4c:3c:5a:f4:80:7a:f2:a6:
94:90:1e:97:44:a8:cc:bf:af:42:02:d7:ed:18:25:89:7c:42:
17:41:00:ea:aa:15:3e:a7:0d:59:eb:45:4d:f0:d1:d8:b9:9b:
b8:1f:42:48:ab:ca:77:84:9a:e6:f4:ba:1f:8f:07:75:70:ec:
93:b4:c0:ff:3d:8c:fa:a6:e1:48:12:72:ad:a0:4a:79:31:a4:
a9:76:07:b6:17:da:12:cb:37:cb:e9:04:78:72:bb:99:a1:d3:
d0:0f:7a:b6:2e:29:c9:aa:5f:7b:72:03:03:aa:fd:ff:a4:30:
9c:6b:2d:c6:16:bb:78:f8:1d:87:79:59:2c:44:58:9e:0a:85:
5e:5c:af:1c:81:a7:5b:6c:b0:ef:a2:79:0c:31:4b:09:65:c2:
c8:68:57:79:4f:16:dd:94:50:a0:76:c9:ce:82:0a:82:74:81:
0a:de:91:6d:c7:90:b5:65:6a:2d:ca:2b:06:95:81:f6:b0:98:
24:44:99:36:84:bd:6b:9c:36:ec:9a:dd:49:90:0f:43:5f:37:
e4:21:95:c4:14:87:2f:bc:54:19:39:13:d5:65:67:dc:c2:cb:
28:8d:56:16:fa:a8:76:79:73:f5:2c:59:09:56:9d:25:83:cc:
2a:18:e7:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rg78HKznd7QfCCywF2bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjUxMDE5MDcwMTM2WhcNMjUxMDIwMDcwMTM2WjAzMTEwLwYDVQQD
EygzYjY5OThkYTU3ZGZjMWEyNDVmYTdjMzJhNGY1N2U3MmI3NTdhMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZQr45FhKxZLGgHi2UhElPbWnnzh
3CFz5ixIuLpI8EkYrUiLdIBpfY1szDWGr02QG76w7m4Ii+G9WhONln+13CE5qaaC
NnpRHvggEsyG/B/E0bhdjKygY4Rj6MlZaMLv6GpIOS+fJw115+pBotsS5bLfnzgE
qbIOcqNARUXjZJc/inf//ugwVohqN1+hmCs6ta9bI4KXZ5y0ilo+bqHHP2z1nHHy
Gdsc3DmVh0hwkTgS6Uoo/O4/UT3E9vMHpKu33vvy3D8ebqzdCaeadSUxzhY6F/kS
zfQ6XoTEQRWfrSjXknEarhBY/vIqhrupZzlYXIO5p6IM+AswjdO3HKD/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtpmNpX38GiRfp8MqT1fnK3V6HCMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqSTO9g4
obqXTUw8WvSAevKmlJAel0SozL+vQgLX7RgliXxCF0EA6qoVPqcNWetFTfDR2Lmb
uB9CSKvKd4Sa5vS6H48HdXDsk7TA/z2M+qbhSBJyraBKeTGkqXYHthfaEss3y+kE
eHK7maHT0A96ti4pyapfe3IDA6r9/6QwnGstxha7ePgdh3lZLERYngqFXlyvHIGn
W2yw76J5DDFLCWXCyGhXeU8W3ZRQoHbJzoIKgnSBCt6RbceQtWVqLcorBpWB9rCY
JESZNoS9a5w27JrdSZAPQ1835CGVxBSHL7xUGTkT1WVn3MLLKI1WFvqodnlz9SxZ
CVadJYPMKhjn1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:30 2025 by rpki-client