Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: DP508SBbP9lPqEuJz9XSV0z13YjsAljIe2Iny+8s9Mo=
Subject key identifier: 45:47:FC:06:2F:5D:EC:0D:95:BC:90:FA:93:16:3F:61:AB:61:8F:0F
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0199FFFE44A41D4F717F35A21254F3B1D7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: JMnvxukXSsPdPA18/skTIw9igbMqVbpH0Vrpt3qteUw=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:44:a4:1d:4f:71:7f:35:a2:12:54:f3:b1:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=4547fc062f5dec0d95bc90fa93163f61ab618f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:50:36:b9:8e:70:d2:0d:cd:5d:d6:6f:2e:
1c:ce:d4:25:67:cd:f0:56:84:81:13:98:a8:f3:fc:
c1:ee:77:32:5e:50:4c:4b:0a:96:90:fa:c6:cc:a5:
26:bc:1d:b0:06:11:8a:53:20:b7:2e:52:19:ff:cd:
0d:20:28:a5:d3:69:d5:b0:b2:fb:ab:8d:82:e5:a0:
ef:40:c5:d3:14:10:f1:0b:1b:7c:c1:f3:9d:0b:99:
12:85:2c:02:c5:bb:d6:67:a8:9f:d5:fa:54:75:1a:
3f:a3:b2:a0:af:b8:f0:bb:28:c0:56:89:db:56:d7:
45:9c:08:cf:a9:d7:8d:69:dc:cf:a8:c5:cd:e6:73:
81:24:8c:45:64:b4:bd:40:80:18:b3:77:5c:08:59:
36:dd:03:88:ab:27:89:2e:1f:37:d3:46:c6:09:49:
5c:0f:9b:c5:41:2b:72:07:5c:d1:77:57:52:d5:fe:
b9:f0:a2:09:cc:1f:b8:e3:46:e4:0b:0d:ca:2c:b5:
0f:0a:37:43:a1:bd:67:64:b3:2f:91:d4:d0:49:e8:
8d:03:00:bc:72:a1:f2:6c:16:e6:46:bf:ba:29:df:
6a:bb:12:c0:99:e3:b2:e6:93:0e:6d:0f:56:da:23:
a4:f0:82:2c:db:71:0c:f1:33:bc:60:a8:62:de:f6:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:FC:06:2F:5D:EC:0D:95:BC:90:FA:93:16:3F:61:AB:61:8F:0F
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:ce:e0:2e:e7:6b:26:7f:14:c0:7f:cf:4f:c0:38:a0:fa:
67:71:04:6f:8d:10:4e:4e:19:bc:b8:8e:79:a0:64:95:59:0c:
fb:30:86:88:cb:ab:76:50:b2:53:38:ed:ec:95:79:2e:1a:29:
57:24:e8:3a:66:78:00:1d:52:03:2a:49:d5:d5:6f:1a:b9:15:
97:87:3f:ab:6f:ff:9d:17:78:c7:cc:e7:89:b4:b6:70:9a:20:
ca:80:7b:19:0f:e1:99:b0:a1:a1:46:44:a3:15:68:b2:dd:88:
99:c2:b8:09:01:a0:50:38:ec:da:58:d5:97:fb:89:43:ea:ef:
3a:87:21:a2:6a:5e:33:43:da:24:c3:38:b9:c8:05:1b:ba:96:
80:47:f3:fe:1b:64:32:90:3c:f9:4e:59:30:8f:c0:3f:67:81:
77:2c:29:f0:e2:c2:45:93:e5:a8:f4:95:93:c3:99:ec:b8:8e:
e9:55:e2:a9:e1:ee:dc:cc:6f:2b:e4:76:7f:b4:95:52:4b:70:
02:6a:e8:4c:8f:88:23:03:7c:5c:64:73:2f:be:07:3f:9e:a9:
cf:06:10:3e:18:90:f0:96:cc:94:45:4e:35:87:e7:46:cc:c1:
d9:76:97:04:44:7e:f1:be:8d:3c:f5:35:b4:04:0c:2e:5b:f0:
c7:f3:44:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kSkHU9xfzWiElTzsdeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOGI3Y2E0MWY0MDA4MjI5MGNhOGFlZmRlYzRiZDI5N2Qz
YWVjMGMwHhcNMjUxMDIwMDUwMTE3WhcNMjUxMDIxMDUwMTE3WjAzMTEwLwYDVQQD
Eyg0NTQ3ZmMwNjJmNWRlYzBkOTViYzkwZmE5MzE2M2Y2MWFiNjE4ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9QNrmOcNINzV3Wby4cztQlZ83w
VoSBE5io8/zB7ncyXlBMSwqWkPrGzKUmvB2wBhGKUyC3LlIZ/80NICil02nVsLL7
q42C5aDvQMXTFBDxCxt8wfOdC5kShSwCxbvWZ6if1fpUdRo/o7Kgr7jwuyjAVonb
VtdFnAjPqdeNadzPqMXN5nOBJIxFZLS9QIAYs3dcCFk23QOIqyeJLh8300bGCUlc
D5vFQStyB1zRd1dS1f658KIJzB+440bkCw3KLLUPCjdDob1nZLMvkdTQSeiNAwC8
cqHybBbmRr+6Kd9quxLAmeOy5pMObQ9W2iOk8IIs23EM8TO8YKhi3vYUWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVH/AYvXewNlbyQ+pMWP2GrYY8PMB8GA1UdIwQY
MBaAFPOLfKQfQAgikMqK797EvSl9OuwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMt
YTNjYTIxMTIyNjhiLzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMtYTNjYTIxMTIyNjhi
LzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+vO4C7n
ayZ/FMB/z0/AOKD6Z3EEb40QTk4ZvLiOeaBklVkM+zCGiMurdlCyUzjt7JV5Lhop
VyToOmZ4AB1SAypJ1dVvGrkVl4c/q2//nRd4x8znibS2cJogyoB7GQ/hmbChoUZE
oxVost2ImcK4CQGgUDjs2ljVl/uJQ+rvOochompeM0PaJMM4ucgFG7qWgEfz/htk
MpA8+U5ZMI/AP2eBdywp8OLCRZPlqPSVk8OZ7LiO6VXiqeHu3MxvK+R2f7SVUktw
AmroTI+IIwN8XGRzL74HP56pzwYQPhiQ8JbMlEVONYfnRszB2XaXBER+8b6NPPU1
tAQMLlvwx/NEzw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:40 2025 by rpki-client