Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: CYQqJoCTlpDyZfvcRl9q9IWia0g0QDUTuQmKDKbdqtU=
Subject key identifier: 18:7E:E8:E8:5A:3D:BB:9E:55:85:D9:5B:D7:F9:FD:10:01:4F:AC:F3
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 0199FFC776689E145ED65458DD1DB811AC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:25 +0000
Manifest this update: Mon 20 Oct 2025 04:01:25 +0000
Manifest next update: Tue 21 Oct 2025 04:01:25 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: JQp78PRuEpp2gqT7+SESAredBYnWJ/7i/d0F1MH0g1g=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:76:68:9e:14:5e:d6:54:58:dd:1d:b8:11:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Oct 20 04:01:25 2025 GMT
Not After : Oct 21 04:01:25 2025 GMT
Subject: CN=187ee8e85a3dbb9e5585d95bd7f9fd10014facf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:3b:f1:ba:a9:1b:38:9f:a3:3f:31:36:29:
de:86:43:66:4b:64:59:70:19:b6:b1:25:78:4a:3b:
eb:cb:d1:43:29:b9:9b:97:2a:29:7b:ed:57:14:15:
90:af:14:9b:69:af:d2:6a:8f:61:72:aa:42:5a:cd:
c3:aa:f3:3f:db:9f:c6:88:1a:53:07:ac:1c:5f:7d:
4e:50:48:ca:0f:40:e6:ee:f1:31:d9:fe:e7:d2:2f:
d8:c5:f7:c9:cc:eb:29:34:40:67:a1:d3:ab:81:dc:
b3:ad:bf:ab:40:57:75:d8:4f:12:18:c5:fe:8e:59:
e4:0e:8e:67:6b:a2:3a:5d:7e:75:f1:54:8f:92:81:
39:72:34:a1:c8:4e:60:9c:18:d4:b7:ef:44:c0:75:
9d:2a:d4:72:6b:96:fd:33:f1:b0:b4:40:60:bc:b1:
b2:23:4b:ef:cf:52:25:ac:71:61:8c:11:fd:b1:b5:
51:b0:c7:2b:61:ef:39:27:cd:c1:c4:da:2e:f0:ca:
4a:93:c3:41:83:7e:fd:37:97:88:d4:67:99:52:0c:
87:6e:97:67:3a:b2:c5:5c:2a:76:7a:12:b4:78:7c:
a7:75:c8:61:1c:05:ff:88:ca:76:33:ad:ee:1e:1d:
55:1e:63:ce:97:68:0f:e0:4e:10:9a:49:1d:80:05:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:E8:E8:5A:3D:BB:9E:55:85:D9:5B:D7:F9:FD:10:01:4F:AC:F3
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:26:fb:e8:92:ca:cb:bb:3d:1b:f7:67:f5:db:99:cc:d1:98:
6a:69:39:5b:aa:3f:e5:86:74:52:02:e6:57:69:8e:67:a6:1e:
26:c6:c7:1f:af:02:47:f7:96:09:f9:79:d6:a7:05:50:4e:7f:
01:29:81:aa:b4:37:88:6c:d8:e4:aa:f8:8e:be:6a:fa:49:af:
07:14:61:b7:c9:81:1a:3e:a0:09:26:c9:7e:e4:a7:96:bb:01:
0c:bd:2e:af:58:c9:1d:9f:0e:69:af:67:70:3f:92:6f:28:7a:
91:4f:7d:37:3f:02:48:97:0f:f0:2f:e4:11:aa:10:f0:d3:45:
98:d3:6a:f4:a6:01:82:fc:e5:b5:81:1f:e7:f2:e9:dc:fd:8a:
98:1f:6f:84:c7:e7:f1:22:7c:c8:e5:ac:d9:75:48:42:33:d4:
c2:f1:4e:71:5f:b0:38:63:cb:7c:8d:f0:64:3f:71:89:18:9e:
3b:62:66:97:18:4b:47:de:36:2b:fc:fd:7c:07:4f:21:a3:db:
04:ad:76:3e:00:53:97:0c:5a:37:19:7a:62:94:9f:e5:b3:aa:
13:0f:89:f3:c4:a5:85:28:e6:08:64:32:44:bc:fb:4c:cb:ec:
f8:eb:8c:38:3e:9c:11:f4:01:4b:1b:76:2d:d6:ab:7d:47:1e:
fd:2d:d3:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x3ZonhRe1lRY3R24EawGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2M1ODliOTliYTQ5NDJjYWRlZGMxNzg5Mzg5NjQyOTYz
YzQ4YWUwHhcNMjUxMDIwMDQwMTI1WhcNMjUxMDIxMDQwMTI1WjAzMTEwLwYDVQQD
EygxODdlZThlODVhM2RiYjllNTU4NWQ5NWJkN2Y5ZmQxMDAxNGZhY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6M78bqpGzifoz8xNinehkNmS2RZ
cBm2sSV4Sjvry9FDKbmblyope+1XFBWQrxSbaa/Sao9hcqpCWs3DqvM/25/GiBpT
B6wcX31OUEjKD0Dm7vEx2f7n0i/YxffJzOspNEBnodOrgdyzrb+rQFd12E8SGMX+
jlnkDo5na6I6XX518VSPkoE5cjShyE5gnBjUt+9EwHWdKtRya5b9M/GwtEBgvLGy
I0vvz1IlrHFhjBH9sbVRsMcrYe85J83BxNou8MpKk8NBg379N5eI1GeZUgyHbpdn
OrLFXCp2ehK0eHyndchhHAX/iMp2M63uHh1VHmPOl2gP4E4QmkkdgAXqbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh+6OhaPbueVYXZW9f5/RABT6zzMB8GA1UdIwQY
MBaAFOPMWJuZuklCyt7cF4k4lkKWPEiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzIt
MWMyMjY3ZWJmNWQ1LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzItMWMyMjY3ZWJmNWQ1
LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeib76JLK
y7s9G/dn9duZzNGYamk5W6o/5YZ0UgLmV2mOZ6YeJsbHH68CR/eWCfl51qcFUE5/
ASmBqrQ3iGzY5Kr4jr5q+kmvBxRht8mBGj6gCSbJfuSnlrsBDL0ur1jJHZ8Oaa9n
cD+Sbyh6kU99Nz8CSJcP8C/kEaoQ8NNFmNNq9KYBgvzltYEf5/Lp3P2KmB9vhMfn
8SJ8yOWs2XVIQjPUwvFOcV+wOGPLfI3wZD9xiRieO2JmlxhLR942K/z9fAdPIaPb
BK12PgBTlwxaNxl6YpSf5bOqEw+J88SlhSjmCGQyRLz7TMvs+OuMOD6cEfQBSxt2
LdarfUce/S3Tjw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:59 2025 by rpki-client