Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: 7+7+zWhavUCz3fH/8oReKQIEC+2duT6gu5btGr751X4=
Subject key identifier: A8:FC:7E:DD:23:36:53:E3:EE:C9:FE:1E:02:8C:EB:5D:33:FF:D3:37
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 0199FCFD7E8E49740B69ED45B50EC3A887D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: xuczGLZd2DjlmZxV7AP3xCeGkIUV5kBVJfhTWgFhtcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7e:8e:49:74:0b:69:ed:45:b5:0e:c3:a8:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=a8fc7edd233653e3eec9fe1e028ceb5d33ffd337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:f4:f6:c1:5b:3f:d2:ec:9e:b5:57:98:1d:
06:2c:8f:e4:ba:26:4e:af:11:a2:b8:ba:23:9f:7d:
f6:d4:cd:94:99:ff:4f:1a:4d:06:a0:bc:a5:6e:5a:
dd:58:45:7d:97:4a:db:e1:e3:57:60:d8:7a:85:03:
de:9b:a4:a4:9e:5c:fc:60:e8:77:33:1f:8b:fb:a6:
1d:f0:9c:ae:19:1e:7d:1b:23:da:47:51:57:8c:30:
2d:cd:15:3c:58:25:05:a0:db:78:8b:5c:1d:f8:34:
d3:b4:99:ab:e1:eb:c0:25:c0:59:1e:1d:c7:5f:f5:
bb:d0:01:6a:7b:13:3b:6a:73:93:dc:d7:b3:39:22:
9f:a2:08:cb:97:f1:d1:d7:bf:b3:4c:eb:ff:c5:2f:
2d:d6:75:74:e5:d0:da:28:03:21:f8:1b:25:f9:0c:
a3:22:f9:68:ba:bb:97:db:98:c3:2e:74:1f:14:b5:
23:19:d0:2a:47:32:73:4f:43:07:13:5a:f6:3e:4c:
f8:e2:0e:89:40:94:cb:c7:28:7a:73:51:1c:44:d5:
79:38:6d:93:41:b3:fb:37:06:3e:3b:ff:03:38:9d:
11:10:fd:3a:f8:d5:13:e4:15:9a:ab:2e:fa:a2:82:
1a:24:14:4b:36:1c:2e:c8:37:95:95:73:5c:6e:4c:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:7E:DD:23:36:53:E3:EE:C9:FE:1E:02:8C:EB:5D:33:FF:D3:37
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:1c:ad:36:f7:11:c1:69:40:6b:ec:8b:a1:6c:53:cc:4b:
f4:d8:3b:81:49:2e:3a:91:6f:48:82:04:46:8a:0f:7b:00:f1:
7f:b6:c0:de:5d:f1:95:c1:d6:b9:c3:8f:a1:fe:37:bc:f8:71:
16:5c:b4:ac:70:3d:de:dd:fe:33:e2:d2:e5:82:95:a5:c6:d4:
05:59:82:da:d8:ba:a5:c5:06:f5:33:78:94:99:a4:8e:2d:03:
fa:14:2d:22:28:f3:a4:f0:5b:27:3b:2d:26:0c:36:06:4a:57:
bf:9d:98:ad:8c:91:10:62:15:44:bf:3d:d8:ea:a1:d6:be:dd:
4f:d8:4e:c0:d6:46:a4:b9:a5:57:95:e5:33:c0:14:a1:19:38:
c6:ff:5e:68:85:f5:7e:8d:9a:e3:16:e0:cf:20:7a:81:9b:6d:
98:68:06:fa:36:ae:ac:6b:3a:ae:04:fa:ac:3b:7c:67:ae:7a:
e3:46:9f:bd:06:86:40:3e:44:26:f2:b8:e9:2b:b6:a1:cd:13:
b9:4d:3a:88:cf:a3:94:97:45:8b:5e:37:32:cf:87:06:c3:0f:
1a:41:37:b2:3a:ae:67:15:c1:bc:dc:a1:1d:e4:09:7b:48:cf:
90:02:c7:ed:a2:aa:41:21:f5:87:69:00:87:43:b4:2b:30:71:
8c:80:58:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/X6OSXQLae1FtQ7DqIfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj
YjZmZGUwHhcNMjUxMDE5MTUwMTM1WhcNMjUxMDIwMTUwMTM1WjAzMTEwLwYDVQQD
EyhhOGZjN2VkZDIzMzY1M2UzZWVjOWZlMWUwMjhjZWI1ZDMzZmZkMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rH09sFbP9LsnrVXmB0GLI/kuiZO
rxGiuLojn3321M2Umf9PGk0GoLylblrdWEV9l0rb4eNXYNh6hQPem6Sknlz8YOh3
Mx+L+6Yd8JyuGR59GyPaR1FXjDAtzRU8WCUFoNt4i1wd+DTTtJmr4evAJcBZHh3H
X/W70AFqexM7anOT3NezOSKfogjLl/HR17+zTOv/xS8t1nV05dDaKAMh+Bsl+Qyj
IvlouruX25jDLnQfFLUjGdAqRzJzT0MHE1r2Pkz44g6JQJTLxyh6c1EcRNV5OG2T
QbP7NwY+O/8DOJ0REP06+NUT5BWaqy76ooIaJBRLNhwuyDeVlXNcbkyYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj8ft0jNlPj7sn+HgKM610z/9M3MB8GA1UdIwQY
MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt
MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0
LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqYcrTb3
EcFpQGvsi6FsU8xL9Ng7gUkuOpFvSIIERooPewDxf7bA3l3xlcHWucOPof43vPhx
Fly0rHA93t3+M+LS5YKVpcbUBVmC2ti6pcUG9TN4lJmkji0D+hQtIijzpPBbJzst
Jgw2BkpXv52YrYyREGIVRL892Oqh1r7dT9hOwNZGpLmlV5XlM8AUoRk4xv9eaIX1
fo2a4xbgzyB6gZttmGgG+jaurGs6rgT6rDt8Z65640afvQaGQD5EJvK46Su2oc0T
uU06iM+jlJdFi143Ms+HBsMPGkE3sjquZxXBvNyhHeQJe0jPkALH7aKqQSH1h2kA
h0O0KzBxjIBYYw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:26 2025 by rpki-client