Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: a5W306de6jmOWOdj7MGXYJLldB3EmDuoyH2X803C9cY=
Subject key identifier: 03:F4:5E:91:60:A7:54:30:A9:9A:A1:C8:9B:B4:A6:2A:5F:6A:79:1D
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 0199FD34417E6EA9D21716745BD6410B57FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: dtEvJxO7M0SdsHIwSbr9BBzJ53l3tOGT8/qYd2rX5zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:7e:6e:a9:d2:17:16:74:5b:d6:41:0b:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=03f45e9160a75430a99aa1c89bb4a62a5f6a791d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:0a:b1:b4:cb:c6:dc:9f:e5:a6:c9:07:66:
c6:40:31:09:98:9a:9a:48:9b:ec:11:30:42:53:14:
bf:bd:51:0f:0c:86:4c:77:06:32:24:f9:3c:f8:fc:
cd:21:98:b1:5b:99:50:a6:a0:ed:8d:e0:4a:f5:dc:
54:bb:b7:21:70:bf:ce:1f:28:46:56:fb:13:6d:30:
32:51:fb:79:43:cd:85:18:96:e2:80:04:0f:46:f5:
c8:f0:67:9c:dc:28:4e:9c:06:bb:84:f3:3c:58:fe:
62:45:f2:0f:ba:5b:96:63:ad:4f:39:3e:36:a4:ff:
8f:4c:98:e5:f6:25:78:7c:e7:3a:66:b8:e5:4e:4e:
ca:b5:19:cf:e8:1a:a1:0f:43:63:e8:2e:81:d8:b2:
66:55:58:36:2f:3e:ce:3e:18:89:02:9f:ca:98:41:
2e:14:43:ec:30:65:21:4f:54:c3:8c:3b:53:b5:50:
af:de:9e:be:2a:21:ca:af:4f:44:06:67:80:53:39:
f9:a4:d8:eb:21:ab:19:6b:7f:12:84:07:db:b9:e9:
ad:45:64:ef:b5:03:74:99:f3:ca:90:87:a5:e7:f1:
c6:51:6c:4d:64:d9:45:8c:75:79:fc:a9:13:a2:b9:
17:2e:ae:49:be:d6:23:ee:ce:8b:e9:b9:2a:87:ea:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F4:5E:91:60:A7:54:30:A9:9A:A1:C8:9B:B4:A6:2A:5F:6A:79:1D
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:4f:cf:3d:67:23:5a:df:a6:39:d0:fa:11:47:95:27:0b:e5:
c4:15:00:a6:ca:af:37:8a:f0:3d:0a:ed:38:84:59:8f:41:cb:
02:51:b5:5d:8e:5d:20:bb:fd:ba:d6:7c:ff:15:d0:73:a5:f4:
4e:82:fc:a5:a6:81:98:e6:cd:48:70:cd:cb:ea:e7:49:cb:6b:
fb:c8:e6:07:d5:ad:ef:19:2d:ea:76:17:63:88:5a:0b:06:eb:
cf:5d:4b:a5:db:01:40:c8:1c:36:bb:d6:a0:04:8d:7d:12:6a:
d2:a2:cc:6a:4c:77:5c:83:2a:b1:ba:6d:da:74:94:c9:df:ab:
79:30:b8:d1:09:70:1b:d3:91:50:d5:d5:b2:97:44:e9:67:17:
41:27:24:34:51:8d:81:9e:c6:2b:c5:35:4d:c2:08:2d:d0:49:
6c:f2:ce:a6:28:2b:7a:4b:79:37:02:e2:3b:b1:90:f8:73:b9:
3a:f1:48:de:6a:57:2e:45:02:95:52:47:2c:6a:49:1c:22:7b:
a6:43:93:40:4a:47:6e:ef:5c:4d:f9:d7:b8:62:af:74:63:aa:
03:23:72:f8:08:5c:22:11:79:7d:a7:44:bf:d6:92:0b:4c:0a:
05:5e:87:7a:4b:6e:9c:2f:8a:e7:76:3b:cd:ce:8f:77:47:2f:
7a:e3:6a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEF+bqnSFxZ0W9ZBC1f6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EygwM2Y0NWU5MTYwYTc1NDMwYTk5YWExYzg5YmI0YTYyYTVmNmE3OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrgKsbTLxtyf5abJB2bGQDEJmJqa
SJvsETBCUxS/vVEPDIZMdwYyJPk8+PzNIZixW5lQpqDtjeBK9dxUu7chcL/OHyhG
VvsTbTAyUft5Q82FGJbigAQPRvXI8Gec3ChOnAa7hPM8WP5iRfIPuluWY61POT42
pP+PTJjl9iV4fOc6ZrjlTk7KtRnP6BqhD0Nj6C6B2LJmVVg2Lz7OPhiJAp/KmEEu
FEPsMGUhT1TDjDtTtVCv3p6+KiHKr09EBmeAUzn5pNjrIasZa38ShAfbuemtRWTv
tQN0mfPKkIel5/HGUWxNZNlFjHV5/KkTorkXLq5JvtYj7s6L6bkqh+rpHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP0XpFgp1QwqZqhyJu0pipfankdMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1E/PPWcj
Wt+mOdD6EUeVJwvlxBUApsqvN4rwPQrtOIRZj0HLAlG1XY5dILv9utZ8/xXQc6X0
ToL8paaBmObNSHDNy+rnSctr+8jmB9Wt7xkt6nYXY4haCwbrz11LpdsBQMgcNrvW
oASNfRJq0qLMakx3XIMqsbpt2nSUyd+reTC40QlwG9ORUNXVspdE6WcXQSckNFGN
gZ7GK8U1TcIILdBJbPLOpigrekt5NwLiO7GQ+HO5OvFI3mpXLkUClVJHLGpJHCJ7
pkOTQEpHbu9cTfnXuGKvdGOqAyNy+AhcIhF5fadEv9aSC0wKBV6HektunC+K53Y7
zc6Pd0cveuNqJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:09 2025 by rpki-client