Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: +EpF/vVr9kKDUX1KPLm3vcO8nKxfbmKzdnU/hEqqkkw=
Subject key identifier: C7:F5:0D:40:24:DA:F2:32:C8:AD:29:89:DA:4E:71:D2:83:85:A0:64
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 0199FBEBF2893FF6A6BA14A9D47E79B3AC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: PIGKtVqSEpUwsMkv3UMM7MDn/8V+AHbAjUGbL9NZs/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f2:89:3f:f6:a6:ba:14:a9:d4:7e:79:b3:ac:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=c7f50d4024daf232c8ad2989da4e71d28385a064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:b8:f7:4a:a7:83:07:9d:44:78:2f:13:db:
3c:82:65:27:57:be:ac:3f:9e:5c:46:ab:0c:c3:2b:
a9:19:04:31:e2:c6:55:7a:46:1c:9a:b6:60:a6:b2:
ff:57:eb:3e:97:37:4d:13:c0:d4:fc:ce:aa:51:d5:
d3:aa:0f:3a:bf:3b:d5:f9:7f:8f:a7:ec:ac:09:eb:
4a:4c:96:b3:e4:de:ab:e5:fa:36:f6:b1:67:c2:25:
e4:18:25:55:f1:c0:be:bc:ea:2a:ab:06:e8:98:3f:
7d:b9:dd:0e:09:76:3f:f0:54:66:dc:38:4f:0e:01:
74:14:3a:dc:4a:a2:55:cf:f1:34:cd:e0:05:2a:a3:
48:b2:a9:a4:ff:82:56:fe:ab:9c:4e:3f:a5:66:89:
c4:34:23:e3:f8:76:e7:6a:a1:3a:23:d2:d6:63:22:
6b:a0:d2:1a:c9:ca:01:f6:49:fe:e1:23:1a:be:d1:
9f:f6:d9:d1:62:d2:40:66:3f:1a:5f:4d:a0:2c:80:
28:69:d0:01:1f:50:ac:09:fe:da:43:1e:5b:99:f5:
0e:9b:1d:88:8b:ba:0b:bc:e3:2f:ec:ae:15:7d:9d:
b7:ea:c2:73:da:6a:01:9c:9e:bc:a5:42:e8:98:7b:
64:fc:5b:54:ea:14:5c:f6:05:32:54:82:89:bd:90:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F5:0D:40:24:DA:F2:32:C8:AD:29:89:DA:4E:71:D2:83:85:A0:64
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:57:27:f5:65:fa:b9:d4:08:27:6c:d7:2b:d5:e9:2a:24:ce:
ec:b8:d9:6f:54:45:c6:25:ed:fe:06:9e:7b:30:15:1f:35:31:
ee:62:15:a6:2b:97:24:c3:ff:cf:d4:57:c3:c8:a1:4c:df:af:
8f:2e:01:d6:6f:2d:21:bc:83:f0:22:ae:14:a4:9c:00:14:01:
f6:bb:bd:0c:80:e3:28:c9:3c:02:d9:79:86:38:fb:a2:e8:27:
76:45:d8:f0:bf:3b:5a:eb:08:e4:d7:d8:ec:c3:bb:2d:05:f0:
23:48:c1:b0:90:51:95:94:fb:16:44:5d:69:08:20:21:f4:25:
a1:11:09:7c:a2:86:66:48:b7:27:a0:45:c0:96:ec:c7:a4:e0:
f5:48:b0:b6:fd:45:cc:53:c6:74:64:2c:c1:c3:34:66:7f:d9:
bd:6a:1d:3a:c4:ae:26:ce:40:28:15:d2:81:cd:40:13:20:e0:
92:e1:43:93:cd:6a:2c:00:78:82:82:6e:d7:7c:5f:1c:50:9a:
32:0d:42:93:ec:8b:d0:29:6a:06:99:de:86:8d:64:a4:c7:f1:
91:5f:ac:3a:b6:65:e6:e4:13:6c:bf:14:5a:db:ae:4a:91:0b:
df:bd:fd:8d:68:9f:a9:23:7d:96:e7:f2:34:1b:71:43:ef:e6:
74:f0:73:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/KJP/amuhSp1H55s6xCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD
EyhjN2Y1MGQ0MDI0ZGFmMjMyYzhhZDI5ODlkYTRlNzFkMjgzODVhMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2490qngwedRHgvE9s8gmUnV76s
P55cRqsMwyupGQQx4sZVekYcmrZgprL/V+s+lzdNE8DU/M6qUdXTqg86vzvV+X+P
p+ysCetKTJaz5N6r5fo29rFnwiXkGCVV8cC+vOoqqwbomD99ud0OCXY/8FRm3DhP
DgF0FDrcSqJVz/E0zeAFKqNIsqmk/4JW/qucTj+lZonENCPj+HbnaqE6I9LWYyJr
oNIaycoB9kn+4SMavtGf9tnRYtJAZj8aX02gLIAoadABH1CsCf7aQx5bmfUOmx2I
i7oLvOMv7K4VfZ236sJz2moBnJ68pULomHtk/FtU6hRc9gUyVIKJvZD8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf1DUAk2vIyyK0pidpOcdKDhaBkMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1cn9WX6
udQIJ2zXK9XpKiTO7LjZb1RFxiXt/gaeezAVHzUx7mIVpiuXJMP/z9RXw8ihTN+v
jy4B1m8tIbyD8CKuFKScABQB9ru9DIDjKMk8Atl5hjj7ougndkXY8L87WusI5NfY
7MO7LQXwI0jBsJBRlZT7FkRdaQggIfQloREJfKKGZki3J6BFwJbsx6Tg9Uiwtv1F
zFPGdGQswcM0Zn/ZvWodOsSuJs5AKBXSgc1AEyDgkuFDk81qLAB4goJu13xfHFCa
Mg1Ck+yL0ClqBpneho1kpMfxkV+sOrZl5uQTbL8UWtuuSpEL3739jWifqSN9lufy
NBtxQ+/mdPBzGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:31 2025 by rpki-client