Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: DpALO0D48T/FcGGfAnFu4ejGHUGjp21qZT7e+QEoxSo=
Subject key identifier: B8:BD:C4:75:E5:42:21:B9:D3:40:8E:6D:80:76:A7:98:92:E4:31:60
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 0199FCFD8DFC9DA11B3C626C53F414AFB811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: cQ6nGoF3yjw/Y7BjT6C5svNDwTtcXXtBGi8JkA+NU5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8d:fc:9d:a1:1b:3c:62:6c:53:f4:14:af:b8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=b8bdc475e54221b9d3408e6d8076a79892e43160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:da:25:74:af:cb:13:ed:ec:78:c3:df:2d:
95:6d:ca:1a:28:dc:01:b2:73:e4:51:5b:11:fa:5c:
d1:d1:61:87:9a:9b:33:95:3a:3d:6c:50:8d:c4:99:
13:9e:b1:b7:c9:2b:53:9b:c2:a8:98:f2:29:4d:aa:
ca:0f:20:c8:c0:a7:c3:e1:4d:08:cc:9e:ce:02:0b:
38:fc:a9:00:6b:6c:0f:5c:f7:66:95:41:de:60:1d:
b3:7e:b8:c5:b1:1e:52:2b:a9:2a:12:17:91:de:71:
82:d7:11:19:6f:43:93:60:cc:3d:76:c0:40:23:18:
79:53:ac:23:c2:93:0d:9e:be:2c:9a:4b:2c:4b:ba:
ed:4b:8e:e7:aa:69:2d:32:1e:b4:72:b6:b6:a2:03:
d6:87:a6:04:e8:a4:ab:20:71:18:c3:2a:a6:c9:89:
41:69:e5:ca:23:8f:17:b6:82:9e:23:e1:65:2c:18:
fa:1c:0e:a7:54:12:d8:ed:ea:ec:0e:56:ff:8b:c9:
46:63:0d:c3:51:4c:78:6e:e1:33:63:aa:ea:bf:61:
78:d7:49:46:e2:50:5a:e6:45:2d:c6:dd:13:d4:48:
41:bd:c5:10:35:db:a8:65:46:f7:f5:5b:0f:18:6e:
07:df:e4:17:07:7b:dc:52:4b:7f:f7:4a:37:79:b4:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:C4:75:E5:42:21:B9:D3:40:8E:6D:80:76:A7:98:92:E4:31:60
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9f:a2:e8:a7:d7:9f:73:06:23:93:52:3a:96:ff:f6:ae:a9:
eb:65:48:53:82:9f:01:ec:92:2d:22:ff:20:2f:c3:8b:e8:ac:
26:ba:59:ca:1d:a8:33:9a:45:f8:74:08:80:35:17:1a:d7:69:
b8:32:04:f2:c2:c1:3e:83:94:33:28:6c:98:b6:f6:ac:df:50:
d8:d9:d9:d5:ad:5d:c5:4b:98:f9:8a:c3:7a:da:75:ce:4e:63:
57:a4:57:1c:12:0f:6a:9a:63:ae:cd:a1:7b:32:ee:93:d5:35:
5c:15:d4:9d:6a:26:d6:e3:6d:3a:86:a1:61:b4:0e:c6:7e:bf:
5f:79:fb:cd:97:3e:3b:95:4b:d7:b4:af:49:fd:37:4b:be:5a:
2b:3b:1a:ef:3a:56:d8:86:20:75:b6:6d:aa:ef:66:22:e9:df:
ca:92:ce:d3:e0:fa:4b:20:fd:5e:d7:92:0d:fe:c2:f2:57:59:
44:d3:6f:8e:da:8e:87:d0:f8:20:0a:21:c3:35:7d:9c:64:20:
46:33:3a:4b:21:2e:01:93:8f:9f:f3:88:4f:a9:ac:fb:cc:c2:
5f:6e:cf:cd:c3:b4:97:94:ae:28:8e:1d:a1:40:10:44:2f:e0:
fa:1a:ce:8c:a1:e9:ea:aa:b9:48:2a:b5:1a:13:f3:fd:42:ba:
e3:b6:7f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Y38naEbPGJsU/QUr7gRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjUxMDE5MTUwMTM5WhcNMjUxMDIwMTUwMTM5WjAzMTEwLwYDVQQD
EyhiOGJkYzQ3NWU1NDIyMWI5ZDM0MDhlNmQ4MDc2YTc5ODkyZTQzMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFjaJXSvyxPt7HjD3y2VbcoaKNwB
snPkUVsR+lzR0WGHmpszlTo9bFCNxJkTnrG3yStTm8KomPIpTarKDyDIwKfD4U0I
zJ7OAgs4/KkAa2wPXPdmlUHeYB2zfrjFsR5SK6kqEheR3nGC1xEZb0OTYMw9dsBA
Ixh5U6wjwpMNnr4smkssS7rtS47nqmktMh60cra2ogPWh6YE6KSrIHEYwyqmyYlB
aeXKI48XtoKeI+FlLBj6HA6nVBLY7ersDlb/i8lGYw3DUUx4buEzY6rqv2F410lG
4lBa5kUtxt0T1EhBvcUQNduoZUb39VsPGG4H3+QXB3vcUkt/90o3ebTTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi9xHXlQiG500CObYB2p5iS5DFgMB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZ+i6KfX
n3MGI5NSOpb/9q6p62VIU4KfAeySLSL/IC/Di+isJrpZyh2oM5pF+HQIgDUXGtdp
uDIE8sLBPoOUMyhsmLb2rN9Q2NnZ1a1dxUuY+YrDetp1zk5jV6RXHBIPappjrs2h
ezLuk9U1XBXUnWom1uNtOoahYbQOxn6/X3n7zZc+O5VL17SvSf03S75aKzsa7zpW
2IYgdbZtqu9mIunfypLO0+D6SyD9XteSDf7C8ldZRNNvjtqOh9D4IAohwzV9nGQg
RjM6SyEuAZOPn/OIT6ms+8zCX27PzcO0l5SuKI4doUAQRC/g+hrOjKHp6qq5SCq1
GhPz/UK647Z/DA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:12 2025 by rpki-client