Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 2eMO1QyfkEW8/ZAUo/OmGBRQ91I4T7mQamrUp1sZqUg=
Subject key identifier: 6F:16:6E:9C:2F:0A:C8:9A:52:BC:A7:27:BB:E6:B8:40:9A:6E:1A:F4
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0199FE472F868A028027A429B8A2AE552CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:42 +0000
Manifest this update: Sun 19 Oct 2025 21:01:42 +0000
Manifest next update: Mon 20 Oct 2025 21:01:42 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: eeue5rXkUhLq/pMD78eSyvXJSQQ/Xw1KFTjdpEFrybU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2f:86:8a:02:80:27:a4:29:b8:a2:ae:55:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Oct 19 21:01:42 2025 GMT
Not After : Oct 20 21:01:42 2025 GMT
Subject: CN=6f166e9c2f0ac89a52bca727bbe6b8409a6e1af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:4d:95:f0:48:d7:87:b6:8c:68:d8:5c:b8:
f7:b2:3d:0e:af:2a:19:80:a7:cc:9c:7d:c2:c6:81:
4a:05:5a:b8:40:12:bb:1e:e2:da:86:6b:fd:f1:f1:
38:d7:3c:99:96:82:3c:9e:21:96:ba:75:6c:d7:f0:
e1:0a:92:85:0b:b6:6b:ff:ae:8c:b4:02:6a:4d:16:
b0:3d:00:89:cd:a7:12:1d:eb:df:9f:ed:a5:eb:0d:
1d:00:32:3f:ae:63:4f:60:fb:50:7c:d2:80:77:6f:
0d:ff:ee:ce:be:e8:7b:2c:b5:b9:e6:9b:ad:8b:36:
2d:43:73:8c:d2:7c:37:38:a6:f2:bf:f5:2f:a0:de:
c7:72:c8:05:6f:96:8f:55:04:7f:98:2a:93:91:05:
87:b7:e2:f7:95:bb:41:a1:4e:08:31:85:d3:4a:eb:
9b:8c:e2:b4:43:4d:32:5a:28:99:29:de:78:7a:2c:
59:1c:dd:89:17:43:e3:dc:c0:17:3a:3e:7a:64:45:
d1:a2:9c:31:81:43:80:3d:f9:07:c5:31:d9:6a:03:
da:47:1b:bb:11:f0:9e:2e:bd:ef:13:2f:6f:ae:8e:
53:29:0d:74:7f:34:bd:7a:6d:ab:de:3e:ee:86:e7:
e0:d6:f1:7a:56:55:99:d5:44:ec:cc:be:b8:7d:bc:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:6E:9C:2F:0A:C8:9A:52:BC:A7:27:BB:E6:B8:40:9A:6E:1A:F4
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:bc:0f:cb:bc:57:81:1a:68:54:91:93:dc:00:80:37:c5:63:
4e:7d:30:0d:16:59:b1:a9:ee:16:0e:37:ed:0b:a1:2e:06:0f:
07:aa:ac:76:73:60:55:33:38:aa:8d:4e:eb:d1:71:5d:04:ae:
7f:67:66:16:1a:f5:de:ba:72:80:67:07:95:f3:ae:15:d9:f6:
d8:63:b3:a8:1d:3f:6d:d8:4a:e2:72:e6:2e:41:e9:af:5b:25:
7e:b0:0c:d2:0e:56:cc:ff:8f:6c:a7:90:d1:80:67:6a:ad:1e:
1c:86:0a:e3:e0:92:06:9b:11:dc:e9:73:bc:91:aa:ba:00:f5:
dc:9b:ac:f2:3c:cd:be:0a:6e:3b:2b:7e:dd:13:f7:b9:86:4e:
3a:b6:35:a7:82:9a:3d:e9:ff:f3:d9:5b:da:60:90:ed:e3:6b:
dc:64:45:ca:5f:1f:5f:6a:d0:47:4d:a0:5f:33:26:cd:98:f6:
5b:ee:5b:f8:41:e1:da:48:f6:c7:89:60:ba:7c:aa:fe:6a:4c:
f8:f9:cb:42:e2:58:05:74:24:a6:1c:c0:17:32:fb:f4:82:28:
98:c9:ea:16:45:6c:90:98:c4:61:90:e5:3e:1d:db:ea:1a:8c:
b1:ae:e7:a8:e0:90:f8:27:39:51:05:aa:3e:ed:17:96:19:9a:
02:77:9b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Ry+GigKAJ6QpuKKuVSzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx
YTcxYzgwHhcNMjUxMDE5MjEwMTQyWhcNMjUxMDIwMjEwMTQyWjAzMTEwLwYDVQQD
Eyg2ZjE2NmU5YzJmMGFjODlhNTJiY2E3MjdiYmU2Yjg0MDlhNmUxYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL5NlfBI14e2jGjYXLj3sj0OryoZ
gKfMnH3CxoFKBVq4QBK7HuLahmv98fE41zyZloI8niGWunVs1/DhCpKFC7Zr/66M
tAJqTRawPQCJzacSHevfn+2l6w0dADI/rmNPYPtQfNKAd28N/+7Ovuh7LLW55put
izYtQ3OM0nw3OKbyv/UvoN7HcsgFb5aPVQR/mCqTkQWHt+L3lbtBoU4IMYXTSuub
jOK0Q00yWiiZKd54eixZHN2JF0Pj3MAXOj56ZEXRopwxgUOAPfkHxTHZagPaRxu7
EfCeLr3vEy9vro5TKQ10fzS9em2r3j7uhufg1vF6VlWZ1UTszL64fbyE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8WbpwvCsiaUrynJ7vmuECabhr0MB8GA1UdIwQY
MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt
NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4
LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzbwPy7xX
gRpoVJGT3ACAN8VjTn0wDRZZsanuFg437QuhLgYPB6qsdnNgVTM4qo1O69FxXQSu
f2dmFhr13rpygGcHlfOuFdn22GOzqB0/bdhK4nLmLkHpr1slfrAM0g5WzP+PbKeQ
0YBnaq0eHIYK4+CSBpsR3OlzvJGqugD13Jus8jzNvgpuOyt+3RP3uYZOOrY1p4Ka
Pen/89lb2mCQ7eNr3GRFyl8fX2rQR02gXzMmzZj2W+5b+EHh2kj2x4lgunyq/mpM
+PnLQuJYBXQkphzAFzL79IIomMnqFkVskJjEYZDlPh3b6hqMsa7nqOCQ+Cc5UQWq
Pu0XlhmaAnebcQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:39 2025 by rpki-client