Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: D8bBl4mXSZr2mKe8wPCh1nu5gzo2wc+ClYXYUVy4TSE=
Subject key identifier: 24:4B:F5:8B:C9:2C:E0:AA:41:93:D4:C9:F3:DA:C1:94:F3:AB:B4:EF
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0199FC8F44FCBC875800F53E7D16B47CE563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: gDtB7IYjHgwM3uksof8ORpTiTDzKYoDR4NNSvwcnBIw=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:fc:bc:87:58:00:f5:3e:7d:16:b4:7c:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=244bf58bc92ce0aa4193d4c9f3dac194f3abb4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:91:d9:4d:1f:5c:9c:51:7c:8f:a2:41:b4:
9b:32:f7:86:aa:96:92:35:3d:39:fc:e1:e6:d1:2e:
d8:5b:e7:30:25:9d:b9:69:f8:41:3e:7c:ff:28:aa:
1d:4f:e6:93:47:39:87:52:df:db:ff:e5:8d:5f:d8:
b1:21:f6:a3:a7:8b:0a:ca:49:82:4e:be:60:3c:ce:
7f:91:d5:19:88:19:4f:43:a0:04:14:8d:6f:40:12:
2b:d7:29:1a:c2:f1:37:17:e0:87:43:c0:4b:e1:64:
0d:76:5e:c6:91:8c:0f:62:20:35:70:72:0b:0d:83:
b0:1c:3c:86:ac:33:47:1b:c8:eb:e3:78:8e:cc:a7:
e0:92:1f:3a:02:6d:38:e5:15:71:a2:8f:8a:c0:da:
da:68:eb:fd:e3:0c:69:06:6d:75:a8:3b:54:09:b2:
ff:31:62:9e:55:db:74:67:fd:2e:7b:a8:49:0f:29:
f2:d9:0c:96:f6:22:6a:b1:7a:68:7b:c2:46:61:f3:
f2:37:90:98:be:eb:b3:8a:9a:da:4b:94:68:f5:f9:
5a:5c:c5:39:59:b7:60:12:a7:db:25:b3:6a:53:b5:
97:0b:ec:22:4f:0b:05:61:6d:b9:bc:41:5e:99:6f:
cf:db:87:6d:80:e9:08:29:97:f3:81:6e:cb:3f:18:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:F5:8B:C9:2C:E0:AA:41:93:D4:C9:F3:DA:C1:94:F3:AB:B4:EF
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b4:ae:25:e2:0e:e9:0d:f8:f0:81:22:5f:f3:be:1d:88:b8:
2e:b0:13:56:8e:2e:f0:c9:03:f3:40:51:d1:aa:09:60:9c:da:
ff:f5:c4:59:b3:30:eb:d0:a2:0e:a5:23:0e:40:24:ec:c2:54:
a6:eb:dc:94:97:6b:f4:04:ab:83:8c:2d:10:a6:0d:4a:60:cc:
2c:af:c0:8d:b9:38:48:db:9d:ee:c8:14:da:e9:44:74:2f:0f:
24:62:4f:83:f7:46:0d:59:08:d1:65:58:cc:ae:60:1b:0b:77:
88:af:d4:ec:36:ff:1c:06:1b:cd:99:d5:88:55:87:c9:bd:0b:
40:24:8e:e6:e4:d0:10:74:5a:6d:9e:b7:57:90:50:4b:f1:9e:
fc:44:c5:9f:4a:aa:6d:8d:78:95:67:80:6d:ac:4c:33:5b:06:
79:80:00:e8:76:57:b7:d9:c1:1e:01:8d:21:7d:ac:22:78:fa:
e3:24:4f:24:a4:73:f4:8a:8c:4f:88:14:90:75:c5:56:10:6b:
70:71:86:63:4c:2b:6a:1e:91:a5:f9:b7:9f:a6:aa:0b:3e:25:
fc:b8:ba:12:46:b1:14:65:0d:ff:0a:30:6b:8d:ea:1c:4c:01:
0d:4c:b9:4c:86:85:06:3a:4d:ae:2b:c9:26:b9:5d:5c:ae:f1:
35:2b:25:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0T8vIdYAPU+fRa0fOVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi
Mzg4N2EwHhcNMjUxMDE5MTMwMTExWhcNMjUxMDIwMTMwMTExWjAzMTEwLwYDVQQD
EygyNDRiZjU4YmM5MmNlMGFhNDE5M2Q0YzlmM2RhYzE5NGYzYWJiNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhyR2U0fXJxRfI+iQbSbMveGqpaS
NT05/OHm0S7YW+cwJZ25afhBPnz/KKodT+aTRzmHUt/b/+WNX9ixIfajp4sKykmC
Tr5gPM5/kdUZiBlPQ6AEFI1vQBIr1ykawvE3F+CHQ8BL4WQNdl7GkYwPYiA1cHIL
DYOwHDyGrDNHG8jr43iOzKfgkh86Am045RVxoo+KwNraaOv94wxpBm11qDtUCbL/
MWKeVdt0Z/0ue6hJDyny2QyW9iJqsXpoe8JGYfPyN5CYvuuzipraS5Ro9flaXMU5
WbdgEqfbJbNqU7WXC+wiTwsFYW25vEFemW/P24dtgOkIKZfzgW7LPxi0ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRL9YvJLOCqQZPUyfPawZTzq7TvMB8GA1UdIwQY
MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt
NTZjNmQ1NTFhOTMyLzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy
LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7SuJeIO
6Q348IEiX/O+HYi4LrATVo4u8MkD80BR0aoJYJza//XEWbMw69CiDqUjDkAk7MJU
puvclJdr9ASrg4wtEKYNSmDMLK/Ajbk4SNud7sgU2ulEdC8PJGJPg/dGDVkI0WVY
zK5gGwt3iK/U7Db/HAYbzZnViFWHyb0LQCSO5uTQEHRabZ63V5BQS/Ge/ETFn0qq
bY14lWeAbaxMM1sGeYAA6HZXt9nBHgGNIX2sInj64yRPJKRz9IqMT4gUkHXFVhBr
cHGGY0wrah6Rpfm3n6aqCz4l/Li6EkaxFGUN/wowa43qHEwBDUy5TIaFBjpNrivJ
JrldXK7xNSsl+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:48 2025 by rpki-client