Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: NogDET+iLrwXfkd0P5Mn6XWucrIj6G20yFaqKuCsL+c=
Subject key identifier: 8D:40:3E:FD:D9:47:7D:74:42:CF:B2:C2:00:95:41:28:FF:1B:F6:46
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 019A017E81D6897397390FEAE328C6B4E177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 12:00:59 +0000
Manifest this update: Mon 20 Oct 2025 12:00:59 +0000
Manifest next update: Tue 21 Oct 2025 12:00:59 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: tBBMnLhf5rriK6p1/FcBjwtPfDUejqVGTRgKt85AqRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:7e:81:d6:89:73:97:39:0f:ea:e3:28:c6:b4:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Oct 20 12:00:59 2025 GMT
Not After : Oct 21 12:00:59 2025 GMT
Subject: CN=8d403efdd9477d7442cfb2c200954128ff1bf646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:8f:3b:85:6c:90:e9:2f:08:b2:9c:68:bc:
f0:2a:da:dd:b0:24:44:b0:5a:38:1b:0c:54:7e:7d:
2d:4b:33:b0:96:fd:49:8f:0c:27:a7:63:d6:66:f8:
6e:b0:ca:50:e7:1b:c5:d7:e6:d9:65:2a:3e:f7:5c:
a8:29:9d:ed:ce:c4:0e:c5:60:7d:44:c0:d8:f2:7f:
bc:c5:c9:d9:6c:83:29:d4:c3:40:64:02:6f:13:5c:
c1:f9:ab:ba:ed:3b:37:41:93:31:05:ca:9f:fb:6c:
11:69:78:2a:9c:9b:78:4a:13:bf:74:a1:6a:27:dc:
4b:55:ab:8e:a8:27:be:26:a6:17:22:5b:57:e6:35:
c6:15:0b:b5:b4:ef:13:24:b3:a6:3f:54:67:79:1d:
1b:cc:53:4f:df:68:70:c4:87:d7:90:23:6b:04:7b:
f4:f8:7f:db:a0:99:51:f9:8a:ec:85:19:30:52:ca:
79:0b:39:19:66:ea:8b:07:d0:a6:d4:13:25:85:f6:
cd:05:de:83:8e:7d:dc:28:e3:82:10:46:93:48:34:
68:b2:f4:f1:47:ae:84:bd:43:72:24:59:94:79:e3:
05:70:00:84:b5:6c:02:f9:11:d2:41:21:13:2a:dd:
3c:18:88:e3:b0:cf:8d:95:df:27:6f:f3:a9:ab:a3:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:3E:FD:D9:47:7D:74:42:CF:B2:C2:00:95:41:28:FF:1B:F6:46
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:dc:b7:87:59:80:9f:39:77:d2:9f:ad:7e:72:cb:c6:70:
74:14:5f:20:7a:aa:9e:f6:b1:1e:0b:b4:5d:25:db:76:33:b1:
81:97:bd:75:71:a1:87:4e:2b:4b:04:d9:88:60:26:92:42:2c:
92:a4:1b:20:cc:49:ca:f0:8e:42:e6:1d:a1:13:4e:30:c3:57:
da:67:29:14:15:4b:22:7f:a0:3a:4d:5b:1f:e1:09:80:4d:4d:
75:2f:37:29:88:a2:64:26:21:81:3f:6a:1b:f3:7b:c9:5e:6f:
db:1f:54:4b:3e:63:2f:37:f9:51:f5:4f:5d:c5:fa:7e:3a:38:
21:13:c9:0c:98:7d:9f:49:fd:a7:17:d9:5b:85:20:06:ac:bf:
75:aa:96:cd:ca:b0:47:21:b2:0f:d2:ed:84:9f:ba:63:fe:46:
87:e5:e3:68:85:c5:ca:da:9d:a6:92:7d:0b:a6:55:82:9a:19:
6b:4a:c0:a9:d6:e1:61:a7:b0:b2:c8:25:e3:64:20:91:5e:f1:
10:20:2d:d8:86:d5:ba:46:d8:e7:62:a5:b6:fd:50:9d:97:91:
a3:04:a5:f1:f8:70:a5:fe:ed:b1:e4:b7:37:f6:32:90:14:c2:
5b:3c:51:34:d0:1f:4c:a0:52:e8:80:b1:e3:c8:b8:8f:a2:d3:
6c:f0:a8:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBfoHWiXOXOQ/q4yjGtOF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz
MTMzNGQwHhcNMjUxMDIwMTIwMDU5WhcNMjUxMDIxMTIwMDU5WjAzMTEwLwYDVQQD
Eyg4ZDQwM2VmZGQ5NDc3ZDc0NDJjZmIyYzIwMDk1NDEyOGZmMWJmNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYuPO4VskOkvCLKcaLzwKtrdsCRE
sFo4GwxUfn0tSzOwlv1Jjwwnp2PWZvhusMpQ5xvF1+bZZSo+91yoKZ3tzsQOxWB9
RMDY8n+8xcnZbIMp1MNAZAJvE1zB+au67Ts3QZMxBcqf+2wRaXgqnJt4ShO/dKFq
J9xLVauOqCe+JqYXIltX5jXGFQu1tO8TJLOmP1RneR0bzFNP32hwxIfXkCNrBHv0
+H/boJlR+YrshRkwUsp5CzkZZuqLB9Cm1BMlhfbNBd6Djn3cKOOCEEaTSDRosvTx
R66EvUNyJFmUeeMFcACEtWwC+RHSQSETKt08GIjjsM+Nld8nb/Opq6OqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1APv3ZR310Qs+ywgCVQSj/G/ZGMB8GA1UdIwQY
MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt
ZGZhMWM5YjNmZDFmLzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm
LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghLct4dZ
gJ85d9KfrX5yy8ZwdBRfIHqqnvaxHgu0XSXbdjOxgZe9dXGhh04rSwTZiGAmkkIs
kqQbIMxJyvCOQuYdoRNOMMNX2mcpFBVLIn+gOk1bH+EJgE1NdS83KYiiZCYhgT9q
G/N7yV5v2x9USz5jLzf5UfVPXcX6fjo4IRPJDJh9n0n9pxfZW4UgBqy/daqWzcqw
RyGyD9LthJ+6Y/5Gh+XjaIXFytqdppJ9C6ZVgpoZa0rAqdbhYaewssgl42QgkV7x
ECAt2IbVukbY52Kltv1QnZeRowSl8fhwpf7tseS3N/YykBTCWzxRNNAfTKBS6ICx
48i4j6LTbPCodw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:36 2025 by rpki-client