Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: nw6IxZCOgSsDdOAFoXm33lPfkLjNogZo8fW+hR0hZMg=
Subject key identifier: E3:CD:09:C6:39:73:1D:17:5A:26:53:2E:4F:10:04:0D:B2:7A:9D:9F
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0199FE46CCE3E1AC15F9B022B74B2196CC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:01:16 +0000
Manifest this update: Sun 19 Oct 2025 21:01:16 +0000
Manifest next update: Mon 20 Oct 2025 21:01:16 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: 0CpaNIMvtXhaGQkDmW912O0HaiMqM3MTitiGVCumt04=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:cc:e3:e1:ac:15:f9:b0:22:b7:4b:21:96:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Oct 19 21:01:16 2025 GMT
Not After : Oct 20 21:01:16 2025 GMT
Subject: CN=e3cd09c639731d175a26532e4f10040db27a9d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a4:2a:dc:83:8c:09:4a:b6:a7:79:ff:f8:75:
50:74:eb:93:4e:68:00:21:c5:60:d9:88:b2:f6:28:
86:9c:11:29:6d:3e:42:6b:20:2d:1d:cc:3b:bc:ba:
32:13:08:85:a6:f5:74:d4:19:71:af:f2:6f:b2:c2:
7c:37:18:79:a9:39:03:1c:01:c7:2d:8f:d3:0e:6e:
70:fa:c0:9c:2a:09:ac:33:3e:09:f9:21:75:cb:9c:
38:be:73:5b:86:40:3e:6a:7a:35:fe:aa:6d:0a:ad:
39:df:3e:7f:09:1c:c8:6f:ad:2b:21:1f:af:4a:d5:
84:0c:40:79:a8:c1:04:96:ea:60:e1:a2:fc:3f:24:
54:1a:73:0d:f1:97:a4:cf:82:47:0b:47:fe:34:14:
c3:92:82:c0:9a:a4:2f:26:ed:e3:e7:1e:12:58:52:
50:de:9d:7f:b4:0e:aa:bd:91:df:0d:d9:07:40:f6:
c9:3f:f5:4d:2a:65:c0:1b:27:56:01:f6:67:b3:71:
07:00:26:92:64:e9:68:3f:9f:31:82:86:2f:69:ec:
d2:f6:04:9c:ad:5b:d9:53:f2:f4:2f:cc:45:b2:aa:
9c:4e:1d:01:ab:78:ac:af:ef:44:86:d2:5d:58:3c:
7c:c1:83:db:13:a0:6d:d9:43:77:22:ac:4e:93:e6:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:09:C6:39:73:1D:17:5A:26:53:2E:4F:10:04:0D:B2:7A:9D:9F
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:5b:98:6a:ec:9a:ec:91:a4:99:71:9c:4c:20:b8:28:d7:
ad:22:f3:15:3c:4d:de:a8:d6:92:04:0b:22:98:36:a2:ce:27:
4e:35:27:d1:35:88:43:c1:fc:9c:90:58:4d:77:8d:49:17:a5:
43:3c:11:d5:e0:5f:bd:2d:c0:1a:9a:6a:b8:a2:76:04:5d:40:
cf:20:cf:4a:03:66:e3:4b:cd:c7:34:24:c2:ae:1e:8c:e5:c5:
30:69:ff:d4:87:67:2a:85:93:69:a9:d0:4e:ee:98:c3:55:6a:
2d:e3:4d:7d:ec:87:7d:44:17:79:6f:2e:ef:71:12:65:62:c3:
12:fb:66:ea:36:9b:af:7b:74:cd:74:68:ba:33:3f:4f:9e:7a:
80:7d:fc:82:89:31:b5:97:e7:e2:e8:aa:6c:91:02:ee:c3:a7:
b8:a1:0f:6f:8d:81:84:28:fe:af:c9:62:46:a1:21:9a:58:b0:
1b:8e:5b:d6:2b:a5:f3:42:b4:e5:a4:7e:14:69:b0:35:11:d0:
35:5a:af:06:90:53:a6:1b:63:2f:56:81:41:90:db:a4:03:25:
12:35:25:6b:2c:4b:2f:7d:5f:09:21:2d:f7:7d:7b:54:d4:46:
94:c4:80:83:e4:02:fa:9f:56:81:0c:f2:ce:e9:19:c4:1e:df:
ca:bf:13:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rszj4awV+bAit0shlsyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1
M2E1ZTkwHhcNMjUxMDE5MjEwMTE2WhcNMjUxMDIwMjEwMTE2WjAzMTEwLwYDVQQD
EyhlM2NkMDljNjM5NzMxZDE3NWEyNjUzMmU0ZjEwMDQwZGIyN2E5ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86Qq3IOMCUq2p3n/+HVQdOuTTmgA
IcVg2Yiy9iiGnBEpbT5CayAtHcw7vLoyEwiFpvV01Blxr/JvssJ8Nxh5qTkDHAHH
LY/TDm5w+sCcKgmsMz4J+SF1y5w4vnNbhkA+ano1/qptCq053z5/CRzIb60rIR+v
StWEDEB5qMEElupg4aL8PyRUGnMN8Zekz4JHC0f+NBTDkoLAmqQvJu3j5x4SWFJQ
3p1/tA6qvZHfDdkHQPbJP/VNKmXAGydWAfZns3EHACaSZOloP58xgoYvaezS9gSc
rVvZU/L0L8xFsqqcTh0Bq3isr+9EhtJdWDx8wYPbE6Bt2UN3IqxOk+aAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPNCcY5cx0XWiZTLk8QBA2yep2fMB8GA1UdIwQY
MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt
MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz
LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ5bmGrs
muyRpJlxnEwguCjXrSLzFTxN3qjWkgQLIpg2os4nTjUn0TWIQ8H8nJBYTXeNSRel
QzwR1eBfvS3AGppquKJ2BF1AzyDPSgNm40vNxzQkwq4ejOXFMGn/1IdnKoWTaanQ
Tu6Yw1VqLeNNfeyHfUQXeW8u73ESZWLDEvtm6jabr3t0zXRoujM/T556gH38gokx
tZfn4uiqbJEC7sOnuKEPb42BhCj+r8liRqEhmliwG45b1iul80K05aR+FGmwNRHQ
NVqvBpBTphtjL1aBQZDbpAMlEjUlayxLL31fCSEt9317VNRGlMSAg+QC+p9WgQzy
zukZxB7fyr8T9Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:03 2025 by rpki-client