Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: W7fgfFBgk4PfR9oE/sHr/m2pZTIE3TlEKlJgOGVkjR0=
Subject key identifier: 62:16:EC:AA:64:9E:AA:E6:71:5F:45:27:52:50:A6:2D:87:6E:A1:12
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0199FCFD1BE26A2A88E2497996FDDC2CB20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0D4E
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: rXyyT3K4JCP0xP81HgHh/ExQWDnq3ZAgYgPICFwd9l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1b:e2:6a:2a:88:e2:49:79:96:fd:dc:2c:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=6216ecaa649eaae6715f45275250a62d876ea112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:fe:6a:50:27:ff:78:89:25:24:2c:b5:d0:
73:11:12:47:1d:0e:3c:fc:e7:ae:1f:22:b4:76:b2:
4f:79:09:aa:89:c0:34:37:bf:2b:98:13:a4:5d:15:
b3:c0:68:f1:2e:84:0e:86:9d:65:c2:5b:ab:41:0c:
9c:e9:f8:1d:f7:2f:7e:2e:7c:b5:99:bc:d3:31:a2:
8c:ec:56:d0:21:4c:92:95:a0:4e:26:ca:98:cb:89:
f2:29:14:a9:7b:71:a7:be:bd:ff:62:4c:b9:9e:34:
2f:07:5f:d2:97:60:92:30:78:a8:30:bd:57:a3:1a:
6a:89:3d:14:a2:9e:2f:7a:94:06:66:d5:cb:84:21:
f3:ac:3b:e3:44:1b:65:c7:a8:05:bd:6e:f3:0e:ec:
f0:2a:d6:6a:e6:2d:77:ab:f0:07:e8:09:b3:64:b3:
ee:66:26:08:96:5c:15:c1:0f:ff:e5:80:de:1a:b6:
99:b6:ee:78:df:a2:40:fe:d3:5d:0f:ed:25:d6:19:
5a:31:d5:b4:a9:5d:3b:c0:b2:c5:b7:f5:e1:c7:6c:
22:77:b3:a1:2e:b0:18:85:bb:bb:37:6d:15:fc:e5:
61:a5:a0:07:08:2e:fa:fc:b7:84:2f:fe:59:f6:f2:
8b:31:fb:06:23:d2:94:b2:e6:4f:8f:b9:1a:7f:2a:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:EC:AA:64:9E:AA:E6:71:5F:45:27:52:50:A6:2D:87:6E:A1:12
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:17:0a:04:d2:62:0a:25:a2:34:ba:0e:83:a5:ad:cb:d5:
9a:40:26:ce:a6:78:64:b6:40:36:73:88:8a:45:f9:88:0e:fc:
08:96:43:1c:2c:d1:22:5b:be:0f:44:09:87:a4:81:f4:59:ff:
aa:d0:92:df:f2:ff:db:c1:63:be:b6:a0:25:fd:fa:0b:b8:8d:
02:6e:ba:35:8b:f2:97:ec:f0:7b:ef:95:48:3a:38:ff:b8:c6:
0b:24:ef:38:70:6d:1c:7f:c2:90:f3:3a:43:a9:10:2e:3e:19:
cb:56:58:97:35:02:00:81:ce:6f:1e:ea:81:15:94:9e:5d:46:
ce:b2:e5:c7:a3:a8:71:29:e6:22:8c:5d:61:0a:3a:c5:85:b1:
ba:6d:ce:be:98:4d:b9:6a:ce:81:f5:7f:ea:57:52:27:a3:f5:
29:dc:af:5c:c9:22:24:21:1f:64:7f:11:f3:ba:9c:b8:cc:b5:
33:a2:5d:e3:70:b9:bb:ce:7f:0a:41:a1:41:59:27:ea:01:15:
09:9f:77:b8:41:6c:ca:0c:ff:12:32:15:7c:41:e1:9b:20:80:
14:12:7b:64:62:49:18:d9:07:dc:a7:ca:89:1b:a8:58:d5:ee:
43:e9:bd:90:2c:b1:3e:c2:12:74:7e:7c:f0:1b:b8:93:5a:7c:
e7:d9:65:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/RviaiqI4kl5lv3cLLINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZjFiODFjZmU2YWJiMTE4ZTk3ZTAzMjViNjYyZWFmOTg0
ZjJmNmEwHhcNMjUxMDE5MTUwMTEwWhcNMjUxMDIwMTUwMTEwWjAzMTEwLwYDVQQD
Eyg2MjE2ZWNhYTY0OWVhYWU2NzE1ZjQ1Mjc1MjUwYTYyZDg3NmVhMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IX+alAn/3iJJSQstdBzERJHHQ48
/OeuHyK0drJPeQmqicA0N78rmBOkXRWzwGjxLoQOhp1lwlurQQyc6fgd9y9+Lny1
mbzTMaKM7FbQIUySlaBOJsqYy4nyKRSpe3Gnvr3/Yky5njQvB1/Sl2CSMHioML1X
oxpqiT0Uop4vepQGZtXLhCHzrDvjRBtlx6gFvW7zDuzwKtZq5i13q/AH6AmzZLPu
ZiYIllwVwQ//5YDeGraZtu5436JA/tNdD+0l1hlaMdW0qV07wLLFt/Xhx2wid7Oh
LrAYhbu7N20V/OVhpaAHCC76/LeEL/5Z9vKLMfsGI9KUsuZPj7kafyo4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIW7KpknqrmcV9FJ1JQpi2HbqESMB8GA1UdIwQY
MBaAFH/xuBz+arsRjpfgMltmLq+YTy9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEt
Y2VhN2ViMzUwNTM3LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEtY2VhN2ViMzUwNTM3
LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf4XCgTS
YgolojS6DoOlrcvVmkAmzqZ4ZLZANnOIikX5iA78CJZDHCzRIlu+D0QJh6SB9Fn/
qtCS3/L/28FjvragJf36C7iNAm66NYvyl+zwe++VSDo4/7jGCyTvOHBtHH/CkPM6
Q6kQLj4Zy1ZYlzUCAIHObx7qgRWUnl1GzrLlx6OocSnmIoxdYQo6xYWxum3OvphN
uWrOgfV/6ldSJ6P1KdyvXMkiJCEfZH8R87qcuMy1M6Jd43C5u85/CkGhQVkn6gEV
CZ93uEFsygz/EjIVfEHhmyCAFBJ7ZGJJGNkH3KfKiRuoWNXuQ+m9kCyxPsISdH58
8Bu4k1p859ll7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:24 2025 by rpki-client