Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier: 9AS6VodZgZM6i/A/+7/J5V8b4yA61W4lIY5sJMjX6cQ=
Subject key identifier: F8:5A:E8:8C:0D:40:08:49:AE:EF:76:C6:25:9B:5A:C5:02:23:0E:20
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 0199FCFDAD37D8FFCDA4B81B3EFFED72B9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: Oxa8l0RpJVTPOCoeRwjaFy12L4m4UVGlBlGxvZ2JjGg=)
2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ad:37:d8:ff:cd:a4:b8:1b:3e:ff:ed:72:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=f85ae88c0d400849aeef76c6259b5ac502230e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:93:b6:3e:89:6e:81:3e:45:af:6f:68:cf:
1c:58:cb:c8:e0:23:0e:00:9f:49:37:d4:6b:7c:f3:
6b:4b:21:b2:60:d0:a9:08:f8:2c:65:55:71:4d:21:
fb:1a:d8:b5:2f:a5:84:57:4f:d1:df:b4:f3:27:ae:
1a:07:40:c2:e3:1d:2c:a5:a4:ae:c9:5a:1e:a6:4a:
19:cd:c1:7d:3e:09:05:7a:50:c6:0a:39:ed:19:27:
84:2a:e8:85:75:ae:6c:64:00:19:aa:7e:e7:8c:02:
7c:93:2a:42:8a:82:1f:12:28:f1:08:43:14:1c:db:
b3:ed:b5:23:62:34:e9:eb:a2:71:e3:23:0a:fd:66:
aa:24:f3:1b:c4:39:49:14:6d:30:f8:ca:ed:0a:e3:
2e:29:e5:b9:30:8d:d9:54:1a:a0:21:46:2d:aa:ec:
72:c1:c0:12:03:f6:3e:e2:ab:94:57:cf:c6:ce:37:
2a:fa:e7:fd:7f:53:b5:41:05:d7:0f:d1:6a:01:3a:
d3:fc:fa:05:41:4b:e3:98:5b:07:f8:5d:0b:05:28:
2c:a0:8c:4b:95:c7:a4:dc:a7:ff:7b:fc:9f:60:d7:
a0:03:84:ee:bc:b1:a8:a1:fc:3b:3e:ce:c4:eb:0f:
af:23:cf:bc:a0:24:ed:f7:1f:a8:ae:84:a4:57:b2:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5A:E8:8C:0D:40:08:49:AE:EF:76:C6:25:9B:5A:C5:02:23:0E:20
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:18:d7:c5:50:1a:02:6a:a9:7e:d0:79:f5:eb:9f:4b:7d:
70:94:18:f1:a8:9e:16:a1:28:77:4b:ce:dd:ae:ba:24:c4:d4:
2a:63:6b:ee:5d:36:a2:06:39:45:0e:96:99:70:07:19:51:b2:
96:b6:91:c1:88:fc:8a:09:c3:e7:f9:bb:34:4b:a2:64:70:18:
ad:7f:db:af:fb:89:0a:7a:bd:30:a7:7a:21:ca:0a:f2:4b:7f:
35:42:ee:a0:93:61:6a:b8:f3:0b:7a:2c:48:67:fd:87:f4:92:
04:5c:c7:f0:d5:bc:70:86:bb:3a:cb:61:60:f9:69:e7:43:a0:
91:d4:7c:1b:93:8e:01:e7:dc:14:d4:d1:3d:9c:6d:a2:6b:85:
91:1b:3e:1e:e0:c0:ec:36:44:1e:d6:c9:6a:3a:44:66:98:39:
80:bc:6e:fb:e5:ce:68:d8:39:64:f8:86:1b:dc:97:ee:f2:b7:
30:bd:cd:96:06:df:04:77:b5:8b:46:ec:81:b0:d1:04:77:f1:
71:ae:2e:7b:32:84:22:05:79:26:a5:fe:a9:5b:e0:4b:ff:f9:
6e:51:9c:6f:6b:b1:81:64:36:58:bf:91:3b:6e:35:7c:d9:1d:
3a:68:71:65:e1:5a:d3:b9:e8:eb:1c:a4:b5:3d:a8:f8:19:8a:
8d:4f:a7:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/a032P/NpLgbPv/tcrnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODI3YWNjNjgwYWEyOWRkYWM4MjM4ODlkODc4NjNlNDE0
YjI0MTEwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
EyhmODVhZTg4YzBkNDAwODQ5YWVlZjc2YzYyNTliNWFjNTAyMjMwZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCTtj6JboE+Ra9vaM8cWMvI4CMO
AJ9JN9RrfPNrSyGyYNCpCPgsZVVxTSH7Gti1L6WEV0/R37TzJ64aB0DC4x0spaSu
yVoepkoZzcF9PgkFelDGCjntGSeEKuiFda5sZAAZqn7njAJ8kypCioIfEijxCEMU
HNuz7bUjYjTp66Jx4yMK/WaqJPMbxDlJFG0w+MrtCuMuKeW5MI3ZVBqgIUYtquxy
wcASA/Y+4quUV8/Gzjcq+uf9f1O1QQXXD9FqATrT/PoFQUvjmFsH+F0LBSgsoIxL
lcek3Kf/e/yfYNegA4TuvLGoofw7Ps7E6w+vI8+8oCTt9x+oroSkV7JHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPha6IwNQAhJru92xiWbWsUCIw4gMB8GA1UdIwQY
MBaAFHuCesxoCqKd2sgjiJ2Hhj5BSyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUt
ZTRkNDU5NzFiMTNkLzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUtZTRkNDU5NzFiMTNk
LzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJggY18VQ
GgJqqX7QefXrn0t9cJQY8aieFqEod0vO3a66JMTUKmNr7l02ogY5RQ6WmXAHGVGy
lraRwYj8ignD5/m7NEuiZHAYrX/br/uJCnq9MKd6IcoK8kt/NULuoJNharjzC3os
SGf9h/SSBFzH8NW8cIa7OsthYPlp50OgkdR8G5OOAefcFNTRPZxtomuFkRs+HuDA
7DZEHtbJajpEZpg5gLxu++XOaNg5ZPiGG9yX7vK3ML3NlgbfBHe1i0bsgbDRBHfx
ca4uezKEIgV5JqX+qVvgS//5blGcb2uxgWQ2WL+RO241fNkdOmhxZeFa07no6xyk
tT2o+BmKjU+nDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:44 2025 by rpki-client