Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier: C4kDRFfBd7g1xePeoV5v7Fkd5UK6e30XZTCbjsjY5r0=
Subject key identifier: C6:DB:25:E1:70:5F:2B:10:DC:D0:31:1F:86:07:2A:57:75:46:F6:C2
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 0199FC8F4683FD6E370F2AD63EC5EE86A3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number: 137A
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: 0+jUSpCOSOqtLyLZJnilbjhwo8EIFSRnOulGvIsaw6E=)
2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:46:83:fd:6e:37:0f:2a:d6:3e:c5:ee:86:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=c6db25e1705f2b10dcd0311f86072a577546f6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:ef:57:52:3a:e1:86:24:c9:9c:54:3f:fe:
de:ab:96:4b:0d:85:ec:02:80:24:4a:f8:7c:a0:31:
2b:16:0b:69:00:ec:80:fc:a6:eb:d9:01:3e:f8:fa:
52:51:3d:76:9a:4d:07:3b:90:7e:21:52:a4:b1:80:
63:03:14:12:3c:d8:69:99:28:12:d9:6d:b8:db:b3:
1e:7d:2e:b5:0b:aa:36:f1:07:63:3d:fa:c7:0b:df:
a7:95:f5:20:d9:3e:ab:1a:ba:35:b9:c5:a7:4e:9f:
c8:0b:ba:12:1f:a2:0b:0c:3d:14:eb:8a:37:e5:9f:
15:b2:64:62:fc:74:cb:a1:f1:bc:08:c9:f5:29:a0:
58:84:f0:ed:47:9d:bb:2a:5e:da:e3:4e:f3:41:8f:
36:27:6d:33:12:37:ae:d0:88:5d:51:29:75:0b:17:
5e:6f:87:ac:45:e3:e0:89:27:69:9d:f3:c5:0a:6f:
62:a5:d5:ec:08:4f:fe:4c:5f:9a:2c:e7:d5:de:43:
ac:6b:9b:68:c3:f8:90:8e:38:32:b9:9c:08:d4:09:
6a:fa:55:b7:89:e9:5d:48:f0:32:ae:39:25:49:a8:
e9:6b:75:e5:1e:d9:f8:b5:fc:42:8c:8a:a5:ae:f0:
81:b5:96:c1:13:41:39:01:89:9f:88:44:9d:82:ca:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:25:E1:70:5F:2B:10:DC:D0:31:1F:86:07:2A:57:75:46:F6:C2
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:16:61:b3:e2:8b:fb:f7:6e:45:82:b6:0b:4c:5b:4e:6d:95:
86:c1:55:3e:66:7a:d9:ee:71:6b:bf:2b:f3:b9:c6:34:e4:c1:
81:e4:62:25:19:a9:ed:fb:3a:61:3f:85:73:66:42:28:73:cc:
df:01:99:9f:b7:7f:96:ec:2a:b9:fc:6a:8a:ce:6b:59:30:da:
41:04:f8:79:d2:b1:4f:01:d1:82:ec:44:89:ce:dd:d6:0f:c3:
e4:8e:e7:54:87:4c:46:49:08:80:7b:d0:c0:26:d6:8d:28:af:
1e:69:33:30:d1:47:80:c7:34:87:ae:27:f6:2f:50:c1:d6:7f:
4a:48:ff:80:27:5a:a7:64:91:b2:db:08:75:b3:3e:72:ee:33:
4f:74:1f:0c:7d:e3:38:de:7b:f5:59:00:fa:5e:42:27:7c:eb:
04:bf:ce:88:36:b4:b1:db:1c:af:13:b7:38:2c:0a:88:6d:b9:
18:d8:dc:b1:0d:49:9c:ff:80:24:51:83:30:af:68:b9:39:95:
9e:8a:75:13:1f:f3:74:7f:19:9e:0f:04:27:e7:ad:27:13:da:
2f:02:a6:e5:6f:eb:a0:80:0b:32:9e:f7:66:31:7a:c2:13:5d:
1a:e2:6e:78:36:2c:77:72:dd:54:de:34:50:52:c2:ad:ef:96:
e9:ae:ad:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0aD/W43DyrWPsXuhqOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD
EyhjNmRiMjVlMTcwNWYyYjEwZGNkMDMxMWY4NjA3MmE1Nzc1NDZmNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstnvV1I64YYkyZxUP/7eq5ZLDYXs
AoAkSvh8oDErFgtpAOyA/Kbr2QE++PpSUT12mk0HO5B+IVKksYBjAxQSPNhpmSgS
2W2427MefS61C6o28QdjPfrHC9+nlfUg2T6rGro1ucWnTp/IC7oSH6ILDD0U64o3
5Z8VsmRi/HTLofG8CMn1KaBYhPDtR527Kl7a407zQY82J20zEjeu0IhdUSl1Cxde
b4esRePgiSdpnfPFCm9ipdXsCE/+TF+aLOfV3kOsa5tow/iQjjgyuZwI1Alq+lW3
ieldSPAyrjklSajpa3XlHtn4tfxCjIqlrvCBtZbBE0E5AYmfiESdgsoaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbbJeFwXysQ3NAxH4YHKld1RvbCMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthZhs+KL
+/duRYK2C0xbTm2VhsFVPmZ62e5xa78r87nGNOTBgeRiJRmp7fs6YT+Fc2ZCKHPM
3wGZn7d/luwqufxqis5rWTDaQQT4edKxTwHRguxEic7d1g/D5I7nVIdMRkkIgHvQ
wCbWjSivHmkzMNFHgMc0h64n9i9QwdZ/Skj/gCdap2SRstsIdbM+cu4zT3QfDH3j
ON579VkA+l5CJ3zrBL/OiDa0sdscrxO3OCwKiG25GNjcsQ1JnP+AJFGDMK9ouTmV
nop1Ex/zdH8Zng8EJ+etJxPaLwKm5W/roIALMp73ZjF6whNdGuJueDYsd3LdVN40
UFLCre+W6a6tNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:25 2025 by rpki-client