Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: 3YKwzpii6lFnnSwX3Ph61DAYjDeG65WOYfeXp/4UWZs=
Subject key identifier: 4A:9F:83:FC:21:83:D4:16:C5:01:18:55:D6:92:91:9D:1C:2F:F7:16
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 0199FBEB73C981708A8513BCBA2732D9DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: DqIDo19qv0W7zP0nBbvbv9JfFP4HOlHWqVK4A0mJ/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:c9:81:70:8a:85:13:bc:ba:27:32:d9:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=4a9f83fc2183d416c5011855d692919d1c2ff716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:68:8a:0e:8c:fb:15:1d:fe:ba:f1:53:8b:
33:75:83:a5:a8:ed:ce:e7:de:d0:35:fe:01:4c:a9:
02:12:06:42:19:61:30:50:ba:5d:e5:cd:c1:73:f9:
c1:97:46:c3:c7:72:59:86:6a:93:04:96:0f:d8:73:
5e:d4:06:4e:72:f8:ef:b8:f1:21:19:41:1d:b2:a4:
c6:2a:8a:6c:9b:a6:19:bf:5e:90:ca:ee:8e:ef:97:
b0:f2:5e:5e:4a:5b:47:fc:b9:cf:4b:3d:6d:18:c3:
2a:fe:19:85:36:44:e0:8c:8c:75:0d:b5:f6:73:0b:
58:f3:1c:38:27:02:24:28:4d:8e:fa:fa:a3:7f:9c:
f1:d1:1b:45:e4:09:d3:a3:b8:4f:32:a8:18:21:4f:
df:78:2d:e9:ed:e8:0d:d3:31:a3:28:85:8a:37:58:
92:79:74:31:3a:11:a3:21:52:0d:5a:00:c1:76:76:
3d:7b:1c:5c:40:83:b4:22:0c:cc:a3:68:ef:0a:51:
46:d3:75:8f:0f:08:17:73:df:e5:53:4f:3c:57:12:
c7:1c:20:57:44:35:1f:2c:64:6e:52:62:12:c3:1b:
50:50:e1:7d:df:1a:1d:4f:94:88:7b:48:60:ea:66:
d9:64:55:66:80:78:f5:e9:8a:13:d8:be:31:a8:7e:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:83:FC:21:83:D4:16:C5:01:18:55:D6:92:91:9D:1C:2F:F7:16
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:4d:75:b7:4d:72:b8:5f:1f:5c:31:d7:8a:25:8d:ff:06:
4d:ec:4b:eb:ab:a6:3e:b5:42:71:5b:34:16:07:c0:b1:8d:77:
fc:e7:20:67:9a:44:91:82:ab:a1:40:7b:50:2b:1a:05:21:e4:
bd:8c:e3:bb:cb:84:3f:83:aa:30:2c:06:ca:6c:0d:e7:9d:76:
e3:75:08:b0:12:5d:40:e8:31:69:36:d9:2b:f2:65:b4:80:e8:
66:7a:66:85:bf:2e:d3:11:7c:d5:1a:bd:34:de:9c:35:ab:78:
8c:59:66:82:69:9a:c8:5e:3f:f6:91:b5:53:95:a6:71:51:ee:
a8:b3:f8:27:1f:fe:a1:a7:69:98:f2:13:f5:08:cc:87:cb:b8:
e8:9f:69:db:04:ea:15:38:61:c8:d8:58:ad:be:4c:ce:7c:bb:
9d:ba:8c:69:01:0e:e2:40:b2:aa:18:3b:22:4f:e9:c4:bf:08:
ed:cc:b5:c8:6c:69:22:bf:cd:4a:f2:d2:cd:b4:f3:d2:93:0b:
a7:97:8d:6c:2a:9c:df:78:be:88:57:f3:32:75:7e:c3:30:b3:
ce:e1:2d:f0:54:29:dc:d8:53:8f:c6:21:9b:4e:ee:d5:70:17:
ca:88:fd:ee:cf:6d:2f:88:ea:68:41:fe:52:9e:1d:a4:2e:c4:
67:a5:86:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763PJgXCKhRO8uicy2dtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTRmZjY2M2ZhNjcxNWRiMGM2YmZlNzlhOTI4N2VhZGE2
Y2IzZTYwHhcNMjUxMDE5MTAwMjE1WhcNMjUxMDIwMTAwMjE1WjAzMTEwLwYDVQQD
Eyg0YTlmODNmYzIxODNkNDE2YzUwMTE4NTVkNjkyOTE5ZDFjMmZmNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55hoig6M+xUd/rrxU4szdYOlqO3O
597QNf4BTKkCEgZCGWEwULpd5c3Bc/nBl0bDx3JZhmqTBJYP2HNe1AZOcvjvuPEh
GUEdsqTGKopsm6YZv16Qyu6O75ew8l5eSltH/LnPSz1tGMMq/hmFNkTgjIx1DbX2
cwtY8xw4JwIkKE2O+vqjf5zx0RtF5AnTo7hPMqgYIU/feC3p7egN0zGjKIWKN1iS
eXQxOhGjIVINWgDBdnY9exxcQIO0IgzMo2jvClFG03WPDwgXc9/lU088VxLHHCBX
RDUfLGRuUmISwxtQUOF93xodT5SIe0hg6mbZZFVmgHj16YoT2L4xqH4ZOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqfg/whg9QWxQEYVdaSkZ0cL/cWMB8GA1UdIwQY
MBaAFNek/2Y/pnFdsMa/55qSh+rabLPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUt
NmNlNjdlMGYyNTkzLzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUtNmNlNjdlMGYyNTkz
LzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazxNdbdN
crhfH1wx14oljf8GTexL66umPrVCcVs0FgfAsY13/OcgZ5pEkYKroUB7UCsaBSHk
vYzju8uEP4OqMCwGymwN551243UIsBJdQOgxaTbZK/JltIDoZnpmhb8u0xF81Rq9
NN6cNat4jFlmgmmayF4/9pG1U5WmcVHuqLP4Jx/+oadpmPIT9QjMh8u46J9p2wTq
FThhyNhYrb5Mzny7nbqMaQEO4kCyqhg7Ik/pxL8I7cy1yGxpIr/NSvLSzbTz0pML
p5eNbCqc33i+iFfzMnV+wzCzzuEt8FQp3NhTj8Yhm07u1XAXyoj97s9tL4jqaEH+
Up4dpC7EZ6WGfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:25 2025 by rpki-client