Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: Cmgi58nTmTBBwExFIeAniN+Jta6TSbmcOrya/nwf79o=
Subject key identifier: 90:7A:88:33:30:58:E8:40:44:8C:40:26:D4:08:37:52:0C:8D:9E:56
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 0199FC58520B9F409283F7D527F72EE89B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: 8Ld0Tr9yCcTghfMsxYm7gE6vzc3JLFEk/+b/cSt/U+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:52:0b:9f:40:92:83:f7:d5:27:f7:2e:e8:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=907a88333058e840448c4026d40837520c8d9e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:8d:10:8d:8e:8e:56:23:e9:db:1b:4c:dd:
d1:12:21:63:e1:f2:cf:25:e3:21:0a:45:25:e8:ac:
be:85:38:a6:53:c8:8b:31:d3:7b:28:b5:32:73:8d:
b6:5c:dc:54:dc:3a:d1:29:20:7e:11:87:56:4a:f4:
eb:10:05:2f:de:ca:02:d4:39:31:f1:f4:ef:e2:c7:
1e:ef:e0:b7:68:a4:00:86:ec:c4:93:d8:88:e1:05:
93:35:af:41:13:24:db:5d:5b:66:3a:80:22:5e:6c:
1f:1f:55:15:aa:8e:b3:b0:dc:c8:bd:8e:87:ad:1e:
91:48:9f:ff:f3:5e:bf:73:07:e8:17:b4:70:db:34:
0c:09:6b:8a:f1:96:a4:4d:63:e4:e3:e3:08:0a:41:
34:f8:dc:9e:5e:07:3b:a3:33:ff:fb:cf:1d:60:ad:
80:ba:d1:17:ab:bb:7f:3d:bc:6a:3b:79:40:48:d6:
85:06:f9:9b:ab:bb:c9:0c:d7:3b:38:a2:96:bc:39:
90:76:23:85:1f:79:77:03:52:18:fe:0e:78:e3:d2:
35:c5:b9:46:f7:7c:4f:a7:d6:47:b5:ff:5f:9c:e0:
4e:c5:81:61:91:6c:ca:cd:7f:23:5f:6e:df:6f:64:
32:23:46:cc:35:c4:bd:3c:4f:ee:5a:a9:e2:7f:89:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:88:33:30:58:E8:40:44:8C:40:26:D4:08:37:52:0C:8D:9E:56
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:35:8a:6f:da:8b:35:ba:c3:d2:10:54:b6:cc:4b:4d:d9:d2:
2b:c2:38:83:ac:ad:ef:e2:4c:08:64:cb:de:88:79:4e:8a:1d:
cd:c8:1f:0e:10:a2:56:44:7c:ee:d9:38:7d:44:99:cd:13:df:
31:65:0d:7a:3a:f5:98:d9:0e:a1:54:a0:f4:3c:a2:18:0c:16:
04:65:7a:15:f8:26:54:54:ec:ed:3d:50:fc:7d:4e:76:08:ff:
e7:fe:44:d3:2f:5c:a8:1f:7d:ad:d6:2a:05:81:8f:ba:ba:bd:
b1:e0:ca:5e:6c:3d:5f:ed:f9:ee:8a:ee:3c:ea:97:62:b7:5f:
0f:3e:dd:f3:24:4b:30:8b:01:04:5d:d6:1f:04:07:65:f0:25:
b9:8d:7a:07:e5:cf:5e:e3:2d:03:98:58:b0:be:6e:70:14:e6:
4d:5e:7e:da:cb:59:fc:0d:8d:87:e0:51:54:54:49:88:d6:8a:
f5:f0:8b:7d:a8:0e:a3:3c:1b:cd:5b:a8:8b:2e:7a:f3:1a:e8:
86:68:7a:f5:5f:ca:ab:d1:df:f2:81:1f:06:1d:77:2f:ee:68:
69:30:40:3d:97:0b:f0:b2:62:ec:4c:7f:43:d5:00:df:9d:b4:
1f:66:f8:07:ee:35:85:e2:ff:ef:a8:79:84:1c:0f:8b:78:e1:
fb:1c:bf:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFILn0CSg/fVJ/cu6JsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjUxMDE5MTIwMTEwWhcNMjUxMDIwMTIwMTEwWjAzMTEwLwYDVQQD
Eyg5MDdhODgzMzMwNThlODQwNDQ4YzQwMjZkNDA4Mzc1MjBjOGQ5ZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9eNEI2OjlYj6dsbTN3REiFj4fLP
JeMhCkUl6Ky+hTimU8iLMdN7KLUyc422XNxU3DrRKSB+EYdWSvTrEAUv3soC1Dkx
8fTv4sce7+C3aKQAhuzEk9iI4QWTNa9BEyTbXVtmOoAiXmwfH1UVqo6zsNzIvY6H
rR6RSJ//816/cwfoF7Rw2zQMCWuK8ZakTWPk4+MICkE0+NyeXgc7ozP/+88dYK2A
utEXq7t/PbxqO3lASNaFBvmbq7vJDNc7OKKWvDmQdiOFH3l3A1IY/g5449I1xblG
93xPp9ZHtf9fnOBOxYFhkWzKzX8jX27fb2QyI0bMNcS9PE/uWqnif4kpwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB6iDMwWOhARIxAJtQIN1IMjZ5WMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2jWKb9qL
NbrD0hBUtsxLTdnSK8I4g6yt7+JMCGTL3oh5ToodzcgfDhCiVkR87tk4fUSZzRPf
MWUNejr1mNkOoVSg9DyiGAwWBGV6FfgmVFTs7T1Q/H1Odgj/5/5E0y9cqB99rdYq
BYGPurq9seDKXmw9X+357oruPOqXYrdfDz7d8yRLMIsBBF3WHwQHZfAluY16B+XP
XuMtA5hYsL5ucBTmTV5+2stZ/A2Nh+BRVFRJiNaK9fCLfagOozwbzVuoiy568xro
hmh69V/Kq9Hf8oEfBh13L+5oaTBAPZcL8LJi7Ex/Q9UA3520H2b4B+41heL/76h5
hBwPi3jh+xy/zw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:06 2025 by rpki-client