Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: m+poTknu8OiKpa/KdG29r5aimRaU3ycTYB7+kBu5Mvk=
Subject key identifier: 22:D8:23:D2:C7:42:ED:C8:56:34:5F:D5:A9:CF:AD:4C:BD:28:8A:D1
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 0198D6614225874092E6E2D25AB6729BB6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: bjABU8F3sTv3NGy6gSPDBY8LNZI/LArI8xc0rJ/ppQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:42:25:87:40:92:e6:e2:d2:5a:b6:72:9b:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=22d823d2c742edc856345fd5a9cfad4cbd288ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:5e:f7:1a:e8:a1:64:6c:cf:fd:a7:27:39:
b5:4f:2e:43:5b:44:d4:e9:f1:0d:ca:cb:24:d7:65:
f6:2b:00:64:6e:5a:df:7d:1c:35:69:66:e1:73:c4:
21:50:da:bc:8d:d9:51:61:e8:30:2f:ff:92:99:ab:
0e:6f:e3:97:8f:b9:11:9c:c1:31:7e:80:4f:1a:2b:
7c:c8:ba:8c:24:e2:41:c9:c7:49:c4:2b:23:95:83:
58:aa:43:1d:ad:b5:f7:56:8a:fe:b9:c0:e8:4a:89:
80:ce:f1:62:0a:f1:e9:61:5d:a5:06:47:60:fe:e4:
09:c1:76:b9:cd:0b:25:e3:8d:19:b9:25:00:af:1e:
b7:0e:de:17:f5:53:ef:5c:67:b5:fc:08:1d:1c:a1:
e6:a5:65:c9:cd:40:59:72:e0:8c:1b:c3:32:d3:c5:
5e:ee:36:74:cb:c1:3c:34:b8:3e:cb:05:9c:72:af:
dc:1a:57:0a:d2:42:00:99:be:c0:a4:9b:7a:ff:4b:
85:41:9e:ad:27:e0:bc:f9:6d:ef:26:e6:29:aa:2f:
df:13:50:30:40:41:d4:f0:9e:f8:d3:76:1b:9e:14:
7e:70:ed:f2:23:34:d8:67:28:c6:83:31:62:72:84:
27:b2:75:72:d6:f2:69:16:c2:0c:45:5b:d2:d2:3a:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:23:D2:C7:42:ED:C8:56:34:5F:D5:A9:CF:AD:4C:BD:28:8A:D1
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:64:66:b7:3c:05:d2:28:2b:48:5d:ac:df:f2:20:c0:17:
b8:57:4b:9e:a9:40:f0:5a:5b:4b:c6:fb:e9:e0:e1:39:f5:d9:
56:6a:57:91:f9:e5:ea:fe:e2:bd:f9:84:77:9c:18:58:39:7b:
6f:cb:fa:c3:8d:fb:18:ee:86:5e:13:93:ef:7e:95:2e:ad:86:
85:ac:90:d6:51:0d:14:93:0b:79:7e:04:4f:05:94:e7:4a:e1:
17:e9:1d:94:c8:f5:dd:de:ff:c3:b1:e1:35:11:5e:09:52:e6:
99:44:de:8f:74:bb:a9:05:5f:64:f8:f6:b9:22:54:28:de:d6:
45:bc:d4:0a:0c:7f:0a:18:77:83:b4:34:c5:dd:c1:fe:7a:67:
8a:38:d8:26:34:77:b0:f3:1d:59:cd:86:82:a6:2a:e1:43:1d:
38:3b:57:50:5a:45:dc:6e:09:99:1e:24:5d:f1:a7:c5:ca:df:
11:59:03:ff:e7:1b:21:cd:08:81:de:37:f0:f7:07:87:63:6c:
08:4c:4f:96:86:0c:29:ee:64:c7:d7:d3:0e:76:5a:74:76:0a:
5d:92:61:05:3e:8e:fc:07:de:dd:e6:f8:dc:ea:1d:f2:19:3c:
1f:e8:67:60:4f:69:b3:90:2d:49:a0:0e:ea:07:1a:84:f7:39:
62:a9:a8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUIlh0CS5uLSWrZym7agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTRmZjY2M2ZhNjcxNWRiMGM2YmZlNzlhOTI4N2VhZGE2
Y2IzZTYwHhcNMjUwODIzMTAwMjM0WhcNMjUwODI0MTAwMjM0WjAzMTEwLwYDVQQD
EygyMmQ4MjNkMmM3NDJlZGM4NTYzNDVmZDVhOWNmYWQ0Y2JkMjg4YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHFe9xrooWRsz/2nJzm1Ty5DW0TU
6fENyssk12X2KwBkblrffRw1aWbhc8QhUNq8jdlRYegwL/+SmasOb+OXj7kRnMEx
foBPGit8yLqMJOJBycdJxCsjlYNYqkMdrbX3Vor+ucDoSomAzvFiCvHpYV2lBkdg
/uQJwXa5zQsl440ZuSUArx63Dt4X9VPvXGe1/AgdHKHmpWXJzUBZcuCMG8My08Ve
7jZ0y8E8NLg+ywWccq/cGlcK0kIAmb7ApJt6/0uFQZ6tJ+C8+W3vJuYpqi/fE1Aw
QEHU8J7403YbnhR+cO3yIzTYZyjGgzFicoQnsnVy1vJpFsIMRVvS0jqx6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLYI9LHQu3IVjRf1anPrUy9KIrRMB8GA1UdIwQY
MBaAFNek/2Y/pnFdsMa/55qSh+rabLPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUt
NmNlNjdlMGYyNTkzLzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUtNmNlNjdlMGYyNTkz
LzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ1kZrc8
BdIoK0hdrN/yIMAXuFdLnqlA8FpbS8b76eDhOfXZVmpXkfnl6v7ivfmEd5wYWDl7
b8v6w437GO6GXhOT736VLq2GhayQ1lENFJMLeX4ETwWU50rhF+kdlMj13d7/w7Hh
NRFeCVLmmUTej3S7qQVfZPj2uSJUKN7WRbzUCgx/Chh3g7Q0xd3B/npnijjYJjR3
sPMdWc2GgqYq4UMdODtXUFpF3G4JmR4kXfGnxcrfEVkD/+cbIc0Igd438PcHh2Ns
CExPloYMKe5kx9fTDnZadHYKXZJhBT6O/Afe3eb43Ood8hk8H+hnYE9ps5AtSaAO
6gcahPc5Yqmouw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:05 2025 by rpki-client