Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: Y0M+Zn6naULHTxKin0HWwj/r3hJJOXVEifJCa9DMOiI=
Subject key identifier: 58:60:44:E9:5A:37:27:E0:2B:59:F3:BC:85:58:C0:CD:A4:11:25:28
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 0199FAD7D5172D0707582A256182C779ACA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:12 +0000
Manifest this update: Sun 19 Oct 2025 05:01:12 +0000
Manifest next update: Mon 20 Oct 2025 05:01:12 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: KmDrMSyO4hHUEhITcQOUKRVuMpY3Bey9odbzPC6v3Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d5:17:2d:07:07:58:2a:25:61:82:c7:79:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Oct 19 05:01:12 2025 GMT
Not After : Oct 20 05:01:12 2025 GMT
Subject: CN=586044e95a3727e02b59f3bc8558c0cda4112528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:8c:61:b1:e4:45:c7:38:a9:a9:15:d3:c0:
7a:74:51:5e:4a:f5:2f:4a:af:3e:7c:2b:2d:d7:ce:
3b:67:9c:c4:91:8d:2a:72:42:cf:79:9f:04:0e:31:
9c:33:10:ab:93:03:ef:51:c8:17:d5:56:d8:8d:ca:
12:c0:be:00:08:b2:80:9b:c1:6a:23:61:91:f1:eb:
74:81:47:f9:5d:79:e4:1f:87:3c:cd:d1:84:a8:8b:
80:4e:a2:f6:83:9e:68:b0:4b:72:e8:cc:88:a4:fc:
a4:74:ba:87:90:c2:83:ff:c7:1b:8d:78:60:e6:58:
4a:7b:c3:17:85:c9:ec:a7:09:12:20:72:c6:79:e9:
7f:6b:3f:4a:e0:c6:28:d3:45:d3:54:2d:97:0c:6c:
71:c4:24:48:66:4d:97:85:3f:e8:ec:01:34:76:47:
b2:29:65:77:63:13:1c:43:e7:9d:bc:22:32:54:e7:
99:88:ae:50:45:7a:04:c7:37:e5:48:64:e0:7d:10:
b7:32:1c:76:6e:23:5e:07:38:50:1d:0b:ad:d1:4a:
d1:42:9a:06:27:28:67:d0:94:ed:5f:54:0e:d2:2a:
40:6e:dc:df:93:cb:aa:74:29:fe:95:ef:b5:9e:5c:
fe:26:67:08:02:60:14:9a:06:3e:d3:a9:fc:2b:70:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:60:44:E9:5A:37:27:E0:2B:59:F3:BC:85:58:C0:CD:A4:11:25:28
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:ad:6c:ce:87:fc:4a:63:e6:18:c4:fd:a8:73:ad:47:a6:
98:61:4b:fc:07:bb:b5:dc:d7:e9:5a:5a:1e:7d:cb:98:0a:0b:
ef:70:b6:08:74:27:a4:bf:03:f0:38:d3:1f:3d:83:0e:08:02:
fa:a2:33:56:e2:0a:6a:bd:38:e8:20:31:b3:dd:53:73:05:75:
74:b1:43:2d:97:3b:4f:1f:eb:34:66:2b:f6:4f:d1:5b:4c:e0:
78:ed:08:b3:e8:bd:b1:89:b8:aa:8d:af:16:13:a3:e6:20:06:
d1:e6:b4:c8:d8:41:bd:8d:b1:f8:6f:7d:17:f0:1f:67:44:b0:
22:1b:e6:0f:cc:80:ee:38:67:fe:2e:0d:9f:aa:92:62:55:51:
ba:9a:57:6a:ad:5e:14:45:e6:87:36:9b:51:36:82:ec:30:dc:
b0:26:25:cb:56:b9:8a:36:7b:a0:ff:6b:95:6b:1a:fd:5d:bc:
92:2a:ae:de:37:9d:95:cd:e9:eb:a5:5d:ba:38:ef:00:aa:dd:
a7:38:81:e1:f9:73:6e:31:1f:ad:6a:9a:0a:ea:8a:88:19:b6:
40:5f:4d:fe:41:46:e5:54:bc:be:1d:71:92:62:f6:13:ad:ea:
0b:e6:57:92:bf:a6:91:6d:fd:f9:5a:52:62:d4:57:37:dd:24:
fc:fc:4d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn619UXLQcHWColYYLHeayjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjUxMDE5MDUwMTEyWhcNMjUxMDIwMDUwMTEyWjAzMTEwLwYDVQQD
Eyg1ODYwNDRlOTVhMzcyN2UwMmI1OWYzYmM4NTU4YzBjZGE0MTEyNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oyMYbHkRcc4qakV08B6dFFeSvUv
Sq8+fCst1847Z5zEkY0qckLPeZ8EDjGcMxCrkwPvUcgX1VbYjcoSwL4ACLKAm8Fq
I2GR8et0gUf5XXnkH4c8zdGEqIuATqL2g55osEty6MyIpPykdLqHkMKD/8cbjXhg
5lhKe8MXhcnspwkSIHLGeel/az9K4MYo00XTVC2XDGxxxCRIZk2XhT/o7AE0dkey
KWV3YxMcQ+edvCIyVOeZiK5QRXoExzflSGTgfRC3Mhx2biNeBzhQHQut0UrRQpoG
Jyhn0JTtX1QO0ipAbtzfk8uqdCn+le+1nlz+JmcIAmAUmgY+06n8K3D1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhgROlaNyfgK1nzvIVYwM2kESUoMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8mtbM6H
/Epj5hjE/ahzrUemmGFL/Ae7tdzX6VpaHn3LmAoL73C2CHQnpL8D8DjTHz2DDggC
+qIzVuIKar046CAxs91TcwV1dLFDLZc7Tx/rNGYr9k/RW0zgeO0Is+i9sYm4qo2v
FhOj5iAG0ea0yNhBvY2x+G99F/AfZ0SwIhvmD8yA7jhn/i4Nn6qSYlVRuppXaq1e
FEXmhzabUTaC7DDcsCYly1a5ijZ7oP9rlWsa/V28kiqu3jedlc3p66VdujjvAKrd
pziB4flzbjEfrWqaCuqKiBm2QF9N/kFG5VS8vh1xkmL2E63qC+ZXkr+mkW39+VpS
YtRXN90k/PxNzg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client