Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: IrFhCDgU88J3zW4JgTXd+C+aFuixPcA+zZxq3XaYuEo=
Subject key identifier: 9A:4C:73:61:F8:EA:29:EA:81:18:C8:AC:C5:71:9E:34:D5:FF:70:E4
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0199FDD99FD9916EA78CDF9F8A2B1D953FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: MWYFSTVfH1krJl2LO2HtTbGS8Qh8QhncuLDPEjLBvCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9f:d9:91:6e:a7:8c:df:9f:8a:2b:1d:95:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=9a4c7361f8ea29ea8118c8acc5719e34d5ff70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:45:bc:6c:44:25:86:ec:e0:6e:16:ae:29:
16:71:c7:ea:76:d3:7a:eb:56:a8:c9:dd:cb:54:96:
54:4e:67:0f:fc:3d:61:28:c3:8a:01:36:3d:67:7c:
0a:07:d4:4d:80:65:1c:46:4d:da:fe:a4:e7:b0:7c:
26:34:65:64:8a:dd:c0:ff:3a:ad:4d:c9:ed:1d:6e:
ad:19:bf:a3:a2:8f:b9:c2:31:b0:53:72:6a:64:27:
e0:27:63:c0:06:26:ed:b3:66:b7:f0:47:3f:42:f8:
c6:61:59:79:49:59:ef:4e:a2:17:95:fd:2f:8c:58:
e7:b9:2c:97:70:36:71:a8:c6:ca:77:5b:fb:c4:6e:
7a:2c:81:48:f6:d4:3c:5a:f7:01:6d:34:7b:e3:66:
55:db:be:cc:4c:bd:5d:8d:94:34:5e:2e:22:d1:7a:
e0:d1:d4:af:86:c5:a0:9f:a2:be:d5:54:49:aa:c4:
29:96:d8:6d:b5:dc:68:19:e8:8a:fb:30:70:e6:b4:
0e:2f:57:7b:a6:43:4a:10:05:b9:ae:a6:0f:50:43:
bf:57:15:fb:9f:1d:30:fe:9e:cf:7c:95:eb:bf:2c:
05:7c:cf:d4:25:6a:72:29:76:80:00:97:5c:fb:e6:
f3:b8:35:d6:b4:03:05:ff:33:95:8c:a8:9b:a7:a4:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:73:61:F8:EA:29:EA:81:18:C8:AC:C5:71:9E:34:D5:FF:70:E4
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:ab:30:b1:97:cd:a6:50:84:a5:40:bb:de:ae:0d:e8:d2:
4e:9b:8a:cd:2f:8a:c3:f6:5f:cb:01:e4:3c:45:8c:bd:00:a9:
b5:97:04:06:a7:a3:ee:2b:35:95:46:ed:65:86:f4:b4:d0:57:
59:b8:3d:8a:80:d7:16:53:c1:33:22:95:c9:a1:fd:67:bf:a2:
34:4a:81:98:7b:2d:80:07:08:2b:e3:54:6f:d4:af:8e:64:93:
b9:d9:85:30:b1:99:1b:18:aa:d5:8a:33:10:da:e3:01:28:3c:
15:b4:cf:cf:6d:5d:c7:a9:09:bb:38:81:84:c8:01:57:3b:b2:
de:97:a6:88:7a:00:e0:69:a9:1a:54:a7:3b:57:31:8c:34:7c:
ab:f5:45:05:d4:df:19:f2:05:7c:e6:16:bc:36:7d:d3:10:dc:
11:93:e1:6e:88:f8:5a:c9:02:11:6c:79:6f:b3:9e:98:50:50:
ea:48:6b:b0:77:4b:dc:7e:0a:d5:5e:c5:d3:10:aa:ea:22:25:
ec:28:dd:f3:6c:12:6f:dc:b0:82:b6:e7:f5:ea:b2:a4:6d:84:
fc:97:0e:70:f3:d6:2b:09:a0:7e:6b:07:ce:dc:25:ce:58:cc:
ff:08:a4:33:ea:df:b0:a1:a0:f1:af:fa:8e:39:b7:f9:9b:0c:
97:40:5a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Z/ZkW6njN+fiisdlT/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjUxMDE5MTkwMjAxWhcNMjUxMDIwMTkwMjAxWjAzMTEwLwYDVQQD
Eyg5YTRjNzM2MWY4ZWEyOWVhODExOGM4YWNjNTcxOWUzNGQ1ZmY3MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw1FvGxEJYbs4G4WrikWccfqdtN6
61aoyd3LVJZUTmcP/D1hKMOKATY9Z3wKB9RNgGUcRk3a/qTnsHwmNGVkit3A/zqt
TcntHW6tGb+joo+5wjGwU3JqZCfgJ2PABibts2a38Ec/QvjGYVl5SVnvTqIXlf0v
jFjnuSyXcDZxqMbKd1v7xG56LIFI9tQ8WvcBbTR742ZV277MTL1djZQ0Xi4i0Xrg
0dSvhsWgn6K+1VRJqsQplthttdxoGeiK+zBw5rQOL1d7pkNKEAW5rqYPUEO/VxX7
nx0w/p7PfJXrvywFfM/UJWpyKXaAAJdc++bzuDXWtAMF/zOVjKibp6T1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpMc2H46inqgRjIrMVxnjTV/3DkMB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6urMLGX
zaZQhKVAu96uDejSTpuKzS+Kw/ZfywHkPEWMvQCptZcEBqej7is1lUbtZYb0tNBX
Wbg9ioDXFlPBMyKVyaH9Z7+iNEqBmHstgAcIK+NUb9SvjmSTudmFMLGZGxiq1Yoz
ENrjASg8FbTPz21dx6kJuziBhMgBVzuy3pemiHoA4GmpGlSnO1cxjDR8q/VFBdTf
GfIFfOYWvDZ90xDcEZPhboj4WskCEWx5b7OemFBQ6khrsHdL3H4K1V7F0xCq6iIl
7Cjd82wSb9ywgrbn9eqypG2E/JcOcPPWKwmgfmsHztwlzljM/wikM+rfsKGg8a/6
jjm3+ZsMl0Ba4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:41 2025 by rpki-client