Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json)
Hash identifier: fQ8vwyqg5VJLlitMW2RQVn7GZCmJuH/oHcbZ68N574k=
Subject key identifier: 23:4C:2B:E3:6A:21:60:15:42:1D:5E:22:EC:74:D6:38:42:A3:3C:AE
Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Certificate serial: 0199FC215A400C4F7D0CCE6E005602E3A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
Manifest number: 0228
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=)
2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: Np2vVlDp7aLFG3hpKttuK0ePHm0q/kaY3jS7MLBaBdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5a:40:0c:4f:7d:0c:ce:6e:00:56:02:e3:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=234c2be36a216015421d5e22ec74d63842a33cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:4c:93:1e:31:ea:c2:81:4a:d7:01:9b:fe:
32:22:27:f9:b9:c1:16:5b:e5:26:78:4d:39:dd:f6:
48:88:02:a7:98:2d:4d:b2:41:dd:9b:cc:c4:0c:14:
29:b3:eb:5e:77:8e:53:f5:ff:f9:5c:04:e8:46:42:
45:52:33:b1:4a:af:75:61:88:7e:81:40:1f:2a:9b:
85:3b:6a:84:a9:b6:fc:aa:eb:63:9d:6f:ca:1f:a3:
34:09:1d:bc:d5:8c:b6:95:ae:b6:93:27:54:63:6c:
d8:d4:59:3e:3c:10:89:56:24:d0:54:3d:c8:2b:3d:
83:f0:cc:8f:8f:32:5c:0e:93:52:11:25:e5:a6:5a:
51:ae:a3:23:94:2e:c8:59:4a:3b:b0:ea:f1:23:41:
40:aa:21:80:27:18:d1:9d:40:45:27:45:11:44:07:
8a:ee:f8:4f:4f:7a:23:04:09:c3:55:76:79:b7:90:
d4:7f:9b:06:be:b7:67:77:37:18:a3:3d:24:14:4d:
9d:af:3f:f0:9c:9a:b9:cc:06:f2:44:b5:e7:ae:a2:
e6:ef:e3:17:b1:88:67:3d:02:09:34:65:40:fe:46:
fe:19:58:19:4c:45:75:4f:3e:78:7b:9b:aa:e6:49:
13:8a:5c:3e:6d:8b:5c:38:53:5c:52:5e:25:57:18:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:2B:E3:6A:21:60:15:42:1D:5E:22:EC:74:D6:38:42:A3:3C:AE
X509v3 Authority Key Identifier:
keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:23:95:3b:44:75:4c:01:75:4a:42:c5:1b:05:62:0d:19:b1:
bc:32:5c:bc:98:77:28:c3:4e:b2:ca:c4:cc:40:50:ac:c5:dd:
5b:ac:90:e6:0e:36:e4:1b:df:27:d9:62:cf:2e:43:bd:10:f2:
53:93:d3:66:e6:4b:1d:7f:51:86:76:17:45:2b:5b:05:40:94:
03:76:6d:d9:f4:64:1c:77:0a:9f:41:b5:c2:20:0b:53:2b:c9:
f6:59:f9:83:06:02:07:65:df:40:c6:79:dc:c8:62:c4:9c:30:
4c:76:0c:c3:af:ed:46:cb:e7:8e:86:b3:9a:dd:1f:09:be:2b:
82:b4:93:52:f1:d0:b8:69:4e:4c:a7:e8:db:8a:7f:15:4c:a8:
0b:95:12:93:50:91:5a:29:d2:28:08:e2:73:5c:81:85:21:c9:
66:a4:92:7c:a1:4c:b2:33:11:9f:a8:7d:5d:8d:21:79:8c:68:
44:4c:d1:d6:e8:af:bf:ae:b0:3a:a1:ab:df:2a:10:8e:34:7b:
8b:47:c9:30:88:38:d9:09:7c:ff:9b:fa:53:46:05:bb:bb:bc:
ee:38:39:f3:16:55:94:fe:7a:58:4f:85:db:b9:1d:d9:3b:e6:
f9:c4:e2:c9:55:1c:04:46:6c:92:ef:a5:c5:d8:93:b0:1e:61:
5c:86:92:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVpADE99DM5uAFYC46PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZmUzYzc5ZjMyNzdiZTZiZjMyYjBhYTY3OTNkZjhlZTRm
YzY5M2YwHhcNMjUxMDE5MTEwMTA4WhcNMjUxMDIwMTEwMTA4WjAzMTEwLwYDVQQD
EygyMzRjMmJlMzZhMjE2MDE1NDIxZDVlMjJlYzc0ZDYzODQyYTMzY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUpMkx4x6sKBStcBm/4yIif5ucEW
W+UmeE053fZIiAKnmC1NskHdm8zEDBQps+ted45T9f/5XAToRkJFUjOxSq91YYh+
gUAfKpuFO2qEqbb8qutjnW/KH6M0CR281Yy2la62kydUY2zY1Fk+PBCJViTQVD3I
Kz2D8MyPjzJcDpNSESXlplpRrqMjlC7IWUo7sOrxI0FAqiGAJxjRnUBFJ0URRAeK
7vhPT3ojBAnDVXZ5t5DUf5sGvrdndzcYoz0kFE2drz/wnJq5zAbyRLXnrqLm7+MX
sYhnPQIJNGVA/kb+GVgZTEV1Tz54e5uq5kkTilw+bYtcOFNcUl4lVxhpfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNMK+NqIWAVQh1eIux01jhCozyuMB8GA1UdIwQY
MBaAFP/+PHnzJ3vmvzKwqmeT347k/Gk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQt
ZjIwMjVkN2FlOGJkLzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQtZjIwMjVkN2FlOGJk
LzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiOVO0R1
TAF1SkLFGwViDRmxvDJcvJh3KMNOssrEzEBQrMXdW6yQ5g425BvfJ9lizy5DvRDy
U5PTZuZLHX9RhnYXRStbBUCUA3Zt2fRkHHcKn0G1wiALUyvJ9ln5gwYCB2XfQMZ5
3MhixJwwTHYMw6/tRsvnjoazmt0fCb4rgrSTUvHQuGlOTKfo24p/FUyoC5USk1CR
WinSKAjic1yBhSHJZqSSfKFMsjMRn6h9XY0heYxoREzR1uivv66wOqGr3yoQjjR7
i0fJMIg42Ql8/5v6U0YFu7u87jg58xZVlP56WE+F27kd2Tvm+cTiyVUcBEZsku+l
xdiTsB5hXIaSBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:50 2025 by rpki-client