Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: S3hv+YO0iA8uZ73jSNy0LyYv4s/ylHNSCeE0/a7CX04=
Subject key identifier: 1C:A0:0D:AC:65:7F:24:F5:12:7F:74:D8:41:62:61:AC:08:E5:93:8A
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 0199FBEBCC024959E6C079459B8100E1FB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: wvfVkKDsM0dalVDTg4nOAS8zAAYRHsX/HAc3cFjerwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cc:02:49:59:e6:c0:79:45:9b:81:00:e1:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=1ca00dac657f24f5127f74d8416261ac08e5938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:04:5e:ad:1b:00:0d:cc:b1:a7:ff:53:d7:
18:9e:bd:77:11:a4:44:a8:23:66:8e:a7:38:19:8c:
80:40:d4:da:1d:cb:ed:57:f7:4d:95:1f:90:4f:22:
1e:50:b3:e4:7f:32:77:22:8b:e0:fe:48:68:1d:b8:
ed:61:10:a2:fc:c7:41:d6:73:41:4e:5c:f6:c9:dc:
27:19:cc:34:ca:64:ee:b9:1b:5a:76:48:b7:0c:2d:
67:b0:08:6f:41:2c:34:b0:cd:2f:67:c4:81:a6:ab:
0e:0a:a3:f6:89:f2:54:a4:c4:bd:d5:99:a4:da:ae:
c6:cb:c6:cd:41:3b:27:53:3d:43:9b:de:64:a8:d3:
54:57:bf:61:bb:44:de:f6:b0:3f:e9:d0:a4:0d:e2:
17:2d:0c:8c:ff:13:1b:82:8a:d6:e8:43:90:78:a8:
22:9f:23:8c:06:c4:03:62:93:90:2f:ed:c2:56:70:
24:cd:83:df:e6:0b:b4:d1:f8:8c:e5:07:29:2a:24:
b1:ff:c1:f2:f2:9d:0c:46:39:61:23:62:70:df:b0:
68:d6:05:ed:78:34:2f:da:a8:a5:ed:d4:f9:fb:4f:
34:7f:3a:71:c2:20:db:da:ee:c2:b6:0c:ac:71:5a:
c0:ae:fd:d5:93:af:33:05:82:82:ae:af:cb:07:6e:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:0D:AC:65:7F:24:F5:12:7F:74:D8:41:62:61:AC:08:E5:93:8A
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:4d:1a:8b:5b:78:9a:25:c1:55:4f:3e:a4:3e:e1:4f:00:
e8:fb:69:fa:77:ff:85:f7:9c:d6:12:20:b1:4d:50:b5:6f:90:
d5:94:0b:7c:65:45:d3:b1:7b:83:14:33:c3:3d:a2:72:c2:0d:
b2:a3:05:e2:29:b0:b2:d2:ab:17:f4:31:8e:64:8c:e4:15:36:
40:3f:6d:11:d4:5e:08:05:eb:5b:85:ac:c5:95:f2:16:f2:7d:
53:b2:14:56:47:1e:fd:ce:19:b4:b0:f7:fe:ae:27:ca:4f:de:
bb:43:16:b8:be:b1:41:e3:f6:c2:84:55:d2:33:ef:71:38:53:
fa:bb:56:b7:fc:6d:f2:90:88:db:58:b8:30:45:a7:25:60:2b:
2c:10:c3:5e:28:09:60:61:36:da:7b:d8:ca:46:e1:bb:70:a9:
ce:47:cb:64:42:65:de:98:1f:f4:fc:a4:78:ab:0d:fe:3c:ca:
a5:33:0a:e1:59:59:10:42:8b:0c:49:7f:16:64:13:7b:ec:44:
d1:d0:ba:0a:75:ae:c1:f0:ec:da:ea:70:65:b0:8c:ef:30:ac:
b6:8b:ae:18:e5:2f:f6:34:06:77:53:c4:15:31:3a:e7:f0:05:
43:ea:b2:5b:13:f1:5c:d7:e3:79:36:ab:d6:35:a5:23:16:1d:
a2:b9:7b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768wCSVnmwHlFm4EA4fsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDNmMDVjYTNmZGY5ZTdmOTljNjVjYzZhMGE2NzI0ZjU5
MzFhNzAwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
EygxY2EwMGRhYzY1N2YyNGY1MTI3Zjc0ZDg0MTYyNjFhYzA4ZTU5MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMEXq0bAA3Msaf/U9cYnr13EaRE
qCNmjqc4GYyAQNTaHcvtV/dNlR+QTyIeULPkfzJ3Iovg/khoHbjtYRCi/MdB1nNB
Tlz2ydwnGcw0ymTuuRtadki3DC1nsAhvQSw0sM0vZ8SBpqsOCqP2ifJUpMS91Zmk
2q7Gy8bNQTsnUz1Dm95kqNNUV79hu0Te9rA/6dCkDeIXLQyM/xMbgorW6EOQeKgi
nyOMBsQDYpOQL+3CVnAkzYPf5gu00fiM5QcpKiSx/8Hy8p0MRjlhI2Jw37Bo1gXt
eDQv2qil7dT5+080fzpxwiDb2u7CtgyscVrArv3Vk68zBYKCrq/LB264KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBygDaxlfyT1En902EFiYawI5ZOKMB8GA1UdIwQY
MBaAFP7T8Fyj/fnn+ZxlzGoKZyT1kxpwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWIt
YWM1ZWU2MjViYWJjLzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWItYWM1ZWU2MjViYWJj
LzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCxNGotb
eJolwVVPPqQ+4U8A6Ptp+nf/hfec1hIgsU1QtW+Q1ZQLfGVF07F7gxQzwz2icsIN
sqMF4imwstKrF/QxjmSM5BU2QD9tEdReCAXrW4WsxZXyFvJ9U7IUVkce/c4ZtLD3
/q4nyk/eu0MWuL6xQeP2woRV0jPvcThT+rtWt/xt8pCI21i4MEWnJWArLBDDXigJ
YGE22nvYykbhu3CpzkfLZEJl3pgf9PykeKsN/jzKpTMK4VlZEEKLDEl/FmQTe+xE
0dC6CnWuwfDs2upwZbCM7zCstouuGOUv9jQGd1PEFTE65/AFQ+qyWxPxXNfjeTar
1jWlIxYdorl7Rg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:05 2025 by rpki-client