Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: 5cN2/6D/rSe46wCjXo7BHhu7llsys+fs/Q/sv66+G90=
Subject key identifier: FE:80:95:4B:A2:A8:63:16:40:2C:19:4F:11:6E:86:D8:14:F1:28:BB
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0199FD6AF7C25923B8C98F2599AC6DD1090B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:09 +0000
Manifest this update: Sun 19 Oct 2025 17:01:09 +0000
Manifest next update: Mon 20 Oct 2025 17:01:09 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: bjvsU3Pt5i4Fa0zVFRkA1Ri/xghyNdygmOcQmbMDtQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f7:c2:59:23:b8:c9:8f:25:99:ac:6d:d1:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Oct 19 17:01:09 2025 GMT
Not After : Oct 20 17:01:09 2025 GMT
Subject: CN=fe80954ba2a86316402c194f116e86d814f128bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:82:05:81:a0:63:dc:39:cc:32:04:a0:d3:
59:90:c4:12:50:ff:d7:70:cb:8f:11:3d:af:58:68:
20:32:c9:de:77:63:e0:26:33:80:93:19:cf:cd:d0:
7f:6c:22:1c:fe:fc:f4:c2:4f:e4:5a:49:f8:e8:5c:
ec:6c:cb:af:dd:9e:8b:72:7f:6e:7b:df:79:49:4e:
50:a8:65:c6:8d:a3:51:04:af:0a:5d:ed:0b:2f:06:
f6:c8:a7:bf:60:b8:2f:09:64:e5:c4:46:b6:93:d3:
b3:86:38:98:36:a0:8d:c7:25:f9:c4:6f:67:dd:bd:
13:a0:29:7f:26:58:ad:a8:9d:15:d2:a7:19:46:fa:
87:c6:11:4c:78:90:d9:a3:11:99:07:d0:27:0a:41:
1d:1b:2a:22:a4:28:f9:b0:ef:f6:39:53:a9:ea:f2:
26:c7:a9:be:74:b1:3d:3c:66:ac:a8:51:48:dd:aa:
68:6e:29:56:ce:19:e2:3b:a0:5d:21:f9:b8:63:81:
16:8d:89:01:9e:b2:64:47:d9:3e:36:d2:45:90:d9:
73:13:41:1c:93:37:9e:a2:fe:d5:f6:97:cd:8a:8b:
c4:67:35:d7:5e:55:ef:6a:a2:10:30:40:51:77:40:
d9:dd:3a:9c:49:a6:5f:59:c6:5f:07:17:49:da:ac:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:95:4B:A2:A8:63:16:40:2C:19:4F:11:6E:86:D8:14:F1:28:BB
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:f6:34:79:c9:3c:88:18:71:32:38:57:14:b0:ad:2e:02:
28:85:29:a3:19:e5:6a:a5:70:20:93:f3:7a:77:74:d7:7d:8d:
8a:ec:c4:c3:36:21:15:83:d7:df:cd:89:58:4f:92:1d:74:b1:
aa:ee:4b:74:70:9e:41:0b:e4:84:bb:87:c0:3f:74:26:22:eb:
20:69:66:28:80:ba:d8:d3:d3:79:29:a7:ed:22:2b:8a:b0:be:
df:26:4d:45:f2:53:88:49:d2:fa:e2:37:b1:66:a4:9b:68:6b:
7c:c9:05:ec:e3:52:33:b6:66:b3:33:b8:e5:5b:a7:35:b2:13:
3f:f9:15:a3:f5:53:6c:0c:1b:db:ca:be:48:30:2f:b6:41:85:
e9:93:49:70:40:bc:79:6a:09:56:4a:c7:e3:e5:62:42:3f:90:
4e:e2:55:00:89:d5:d4:4c:82:e0:76:e3:5f:2a:c6:8a:8d:41:
de:f7:89:c9:ac:71:71:d9:5d:f9:69:93:39:c2:37:93:b2:d6:
76:41:8d:a4:da:26:5e:a1:08:c5:85:83:49:56:fd:a4:40:ab:
55:4e:90:c8:71:45:82:aa:88:de:c5:89:aa:35:49:ad:fb:c1:
8e:ce:4c:98:cb:f0:f6:db:7c:25:90:29:14:db:2a:1c:80:d2:
54:d5:33:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9avfCWSO4yY8lmaxt0QkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjUxMDE5MTcwMTA5WhcNMjUxMDIwMTcwMTA5WjAzMTEwLwYDVQQD
EyhmZTgwOTU0YmEyYTg2MzE2NDAyYzE5NGYxMTZlODZkODE0ZjEyOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eiCBYGgY9w5zDIEoNNZkMQSUP/X
cMuPET2vWGggMsned2PgJjOAkxnPzdB/bCIc/vz0wk/kWkn46FzsbMuv3Z6Lcn9u
e995SU5QqGXGjaNRBK8KXe0LLwb2yKe/YLgvCWTlxEa2k9OzhjiYNqCNxyX5xG9n
3b0ToCl/JlitqJ0V0qcZRvqHxhFMeJDZoxGZB9AnCkEdGyoipCj5sO/2OVOp6vIm
x6m+dLE9PGasqFFI3apobilWzhniO6BdIfm4Y4EWjYkBnrJkR9k+NtJFkNlzE0Ec
kzeeov7V9pfNiovEZzXXXlXvaqIQMEBRd0DZ3TqcSaZfWcZfBxdJ2qwAywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6AlUuiqGMWQCwZTxFuhtgU8Si7MB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej72NHnJ
PIgYcTI4VxSwrS4CKIUpoxnlaqVwIJPzend0132NiuzEwzYhFYPX382JWE+SHXSx
qu5LdHCeQQvkhLuHwD90JiLrIGlmKIC62NPTeSmn7SIrirC+3yZNRfJTiEnS+uI3
sWakm2hrfMkF7ONSM7ZmszO45VunNbITP/kVo/VTbAwb28q+SDAvtkGF6ZNJcEC8
eWoJVkrH4+ViQj+QTuJVAInV1EyC4HbjXyrGio1B3veJyaxxcdld+WmTOcI3k7LW
dkGNpNomXqEIxYWDSVb9pECrVU6QyHFFgqqI3sWJqjVJrfvBjs5MmMvw9tt8JZAp
FNsqHIDSVNUzYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:42 2025 by rpki-client