Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: 5Isz7IdDBhiWPW084IGVzSq2XC7Ofk069w4SxfvbWVs=
Subject key identifier: 19:20:9F:AE:0D:0E:C2:49:23:B6:2E:D3:BB:6E:8F:22:23:3E:43:21
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 0199FDD9695B4B2E905D08E31F40EA2EDC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: eqxPs1e6tIiT4hufy2nN9hwUGcSZsn4/rNPMFX/TI8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:69:5b:4b:2e:90:5d:08:e3:1f:40:ea:2e:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=19209fae0d0ec24923b62ed3bb6e8f22233e4321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:9f:4a:e1:40:7a:ab:ee:5c:f6:92:2e:72:
fa:a0:a7:1f:8d:41:c0:66:d0:a4:2f:f0:3d:dd:4d:
05:0f:ab:66:85:7d:b6:56:6d:78:91:fa:ef:a6:e8:
09:fb:10:71:31:59:55:56:7e:28:3b:de:2e:b8:a8:
e9:58:a7:03:f9:58:4e:23:94:ec:fe:2c:6f:2c:bf:
ed:79:d1:30:f3:e5:42:f9:ac:d5:57:6a:58:03:5a:
f2:db:73:e2:40:ca:94:b1:f2:e2:25:9d:e6:4f:64:
1b:c1:c7:20:54:78:27:69:dc:42:4a:7a:7e:6b:f6:
ea:18:74:de:1d:ae:48:cc:2b:12:97:3b:23:9b:6b:
d3:6f:22:cc:18:35:ea:c7:39:7e:c6:78:ee:38:e8:
c8:a7:54:66:d8:80:50:a1:91:97:ed:a6:f7:96:85:
ab:ff:29:cf:d7:09:7f:46:d6:2e:77:99:42:26:c4:
db:c2:96:10:63:59:35:17:71:6c:4d:84:00:62:aa:
ae:c5:77:d6:c3:ae:ee:23:03:a8:65:cd:74:93:15:
93:f9:c5:34:18:18:b2:75:b8:ca:72:75:43:47:d6:
a6:a0:f2:0d:ed:19:94:f6:c6:51:d6:9f:92:3d:00:
e8:ec:65:50:88:c3:11:8c:a8:e7:54:7e:31:5b:e2:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:9F:AE:0D:0E:C2:49:23:B6:2E:D3:BB:6E:8F:22:23:3E:43:21
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:67:1e:88:bc:86:2e:20:0d:fa:8a:9d:44:10:38:98:48:
96:73:0b:b5:fc:f0:2d:ea:79:d1:0a:f5:07:e6:a7:a1:03:dc:
89:3e:45:0b:e5:db:38:b6:32:65:32:b7:89:4a:b4:fc:93:77:
a1:c8:70:3a:3c:7d:76:c2:e0:18:67:91:09:ce:95:b0:52:74:
6f:66:6a:45:b4:d2:14:61:ad:fe:c4:63:6d:53:cb:1e:25:be:
20:27:6b:e2:a8:d5:37:e3:3b:65:52:da:bf:22:36:7d:0c:65:
46:1e:3a:7f:8a:f3:1e:d9:67:db:49:99:d9:6e:a6:d1:e5:e3:
54:07:d9:11:e5:71:6a:d8:86:8e:ca:59:f1:2b:25:76:e7:34:
30:f3:47:5e:d8:8f:0e:50:1f:80:0f:56:23:b3:d0:b0:f9:da:
75:cc:bc:e9:e5:8c:00:5e:e3:b3:7e:10:f4:e5:1a:e9:6c:49:
03:03:68:0b:53:d9:27:22:bb:94:78:27:d8:7c:a9:63:28:89:
a7:9a:02:59:0c:a1:67:64:e5:0d:67:dc:45:1f:58:c1:75:3b:
42:09:44:f7:b9:05:c0:ba:7d:8b:56:08:d9:c8:f2:4f:5d:f9:
4c:17:75:86:31:ce:9b:df:74:ef:20:7b:9f:aa:82:74:54:b5:
bf:c5:5a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WlbSy6QXQjjH0DqLtxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk
ZTExNWMwHhcNMjUxMDE5MTkwMTQ3WhcNMjUxMDIwMTkwMTQ3WjAzMTEwLwYDVQQD
EygxOTIwOWZhZTBkMGVjMjQ5MjNiNjJlZDNiYjZlOGYyMjIzM2U0MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnWfSuFAeqvuXPaSLnL6oKcfjUHA
ZtCkL/A93U0FD6tmhX22Vm14kfrvpugJ+xBxMVlVVn4oO94uuKjpWKcD+VhOI5Ts
/ixvLL/tedEw8+VC+azVV2pYA1ry23PiQMqUsfLiJZ3mT2QbwccgVHgnadxCSnp+
a/bqGHTeHa5IzCsSlzsjm2vTbyLMGDXqxzl+xnjuOOjIp1Rm2IBQoZGX7ab3loWr
/ynP1wl/RtYud5lCJsTbwpYQY1k1F3FsTYQAYqquxXfWw67uIwOoZc10kxWT+cU0
GBiydbjKcnVDR9amoPIN7RmU9sZR1p+SPQDo7GVQiMMRjKjnVH4xW+J9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkgn64NDsJJI7Yu07tujyIjPkMhMB8GA1UdIwQY
MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt
ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5
LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQFnHoi8
hi4gDfqKnUQQOJhIlnMLtfzwLep50Qr1B+anoQPciT5FC+XbOLYyZTK3iUq0/JN3
ochwOjx9dsLgGGeRCc6VsFJ0b2ZqRbTSFGGt/sRjbVPLHiW+ICdr4qjVN+M7ZVLa
vyI2fQxlRh46f4rzHtln20mZ2W6m0eXjVAfZEeVxatiGjspZ8Sslduc0MPNHXtiP
DlAfgA9WI7PQsPnadcy86eWMAF7js34Q9OUa6WxJAwNoC1PZJyK7lHgn2HypYyiJ
p5oCWQyhZ2TlDWfcRR9YwXU7QglE97kFwLp9i1YI2cjyT135TBd1hjHOm9907yB7
n6qCdFS1v8Va7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:08 2025 by rpki-client