Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: DuLePabNUSiwmiIU8eHRWWIxO+dvrrgsbMfDLRdoTng=
Subject key identifier: D8:E7:31:09:BE:2E:EC:1D:D6:7A:BF:8A:A7:7D:C8:F6:45:D1:8D:59
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0199FCFD52BD7B6ED652648DACC81540F96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: vV3rXhx7NrACIileIDHMtYAgdOb9139h9CQyCutQMhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:52:bd:7b:6e:d6:52:64:8d:ac:c8:15:40:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=d8e73109be2eec1dd67abf8aa77dc8f645d18d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:6a:75:e3:70:8e:38:9b:58:56:58:3c:3f:
06:07:d7:91:66:da:95:0e:06:09:30:28:6c:93:08:
0b:2a:a5:77:62:b7:5e:4d:a6:45:ec:62:82:c0:43:
00:64:12:95:38:41:74:23:47:90:cd:a8:61:1d:c5:
b3:63:9d:4b:4f:25:a5:f5:c6:b0:97:63:e2:92:0e:
ba:99:fe:d2:a0:93:a9:ea:dd:a9:8d:0b:45:26:bd:
57:66:8d:27:cf:9d:a8:93:6f:70:2f:47:cd:1a:27:
19:cf:c4:65:a9:33:a5:ca:6f:50:99:69:b4:e2:56:
a7:76:85:e2:3f:7b:00:24:45:e0:74:57:3f:5f:b7:
1b:0e:96:5a:cf:57:90:e5:0e:9a:e4:bd:ee:56:61:
5e:63:09:2c:78:9a:e7:f8:a3:e5:da:30:5a:9f:a6:
49:ee:c1:9d:93:70:a2:41:8b:43:84:9f:ae:97:86:
5c:d7:47:b2:f3:9a:9f:0d:f5:b4:56:48:38:61:d3:
ec:0c:91:77:e2:2d:7c:1b:43:f2:5a:c0:6c:d9:82:
42:ce:b8:e8:b6:61:60:23:5b:23:9e:e3:c4:19:5f:
20:e5:9c:70:d6:c1:99:0d:c5:4c:dc:68:e2:4e:23:
b0:9d:b1:5d:c1:10:ae:18:77:7a:03:a8:aa:59:92:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:31:09:BE:2E:EC:1D:D6:7A:BF:8A:A7:7D:C8:F6:45:D1:8D:59
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:fd:fb:09:1c:ca:8f:0c:73:6b:c2:d6:49:46:dc:a2:f1:
d3:53:fd:ca:7f:6f:e6:6c:2f:1b:e9:71:11:9a:2c:01:1d:25:
ca:f3:b0:43:9a:e9:b7:1a:38:01:fb:66:26:c2:d9:ec:07:9f:
8e:db:8d:df:2e:0d:e9:da:0c:cc:80:b7:9a:e7:8c:2b:6f:c4:
bf:5b:a7:90:91:51:03:4e:7f:bb:5e:2b:2d:56:4d:fb:f9:42:
45:50:42:7b:f8:2b:4e:69:8f:ef:55:3f:5e:3e:24:3d:86:51:
46:88:ad:ad:c7:6a:37:42:ca:f2:78:da:79:47:d6:0d:bb:f8:
49:b5:ce:b1:42:97:cb:3f:4b:1e:07:b4:e6:03:59:4e:fe:25:
d0:e7:43:b7:a9:6c:ab:32:4a:e9:46:88:c6:51:88:5a:73:f1:
a5:1d:f1:8a:a0:a9:3a:08:0c:a4:94:ef:4e:c5:8b:af:a5:a7:
1a:9a:08:46:e9:d0:44:00:3a:c1:70:43:f3:45:63:b4:30:88:
d0:72:1a:05:db:b4:83:0c:9a:87:62:97:7d:49:cb:9d:41:53:
60:68:23:fd:a0:65:1f:5e:ef:df:a5:12:b8:83:0f:94:ce:48:
87:e3:7c:14:cf:3f:ce:52:06:40:9d:87:55:7a:bc:68:cb:32:
11:14:33:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VK9e27WUmSNrMgVQPlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjViYWMxMzJlNDc5YTI4ZGYzMzU3M2RkMTA5NmE5Yjdi
NzhkMzIwHhcNMjUxMDE5MTUwMTI0WhcNMjUxMDIwMTUwMTI0WjAzMTEwLwYDVQQD
EyhkOGU3MzEwOWJlMmVlYzFkZDY3YWJmOGFhNzdkYzhmNjQ1ZDE4ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWRqdeNwjjibWFZYPD8GB9eRZtqV
DgYJMChskwgLKqV3YrdeTaZF7GKCwEMAZBKVOEF0I0eQzahhHcWzY51LTyWl9caw
l2Pikg66mf7SoJOp6t2pjQtFJr1XZo0nz52ok29wL0fNGicZz8RlqTOlym9QmWm0
4landoXiP3sAJEXgdFc/X7cbDpZaz1eQ5Q6a5L3uVmFeYwkseJrn+KPl2jBan6ZJ
7sGdk3CiQYtDhJ+ul4Zc10ey85qfDfW0Vkg4YdPsDJF34i18G0PyWsBs2YJCzrjo
tmFgI1sjnuPEGV8g5Zxw1sGZDcVM3GjiTiOwnbFdwRCuGHd6A6iqWZLLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjnMQm+Luwd1nq/iqd9yPZF0Y1ZMB8GA1UdIwQY
MBaAFLAlusEy5HmijfM1c90Qlqm3t40yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQt
N2M4ZjNmZWNkYjJjLzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQtN2M4ZjNmZWNkYjJj
LzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjj9+wkc
yo8Mc2vC1klG3KLx01P9yn9v5mwvG+lxEZosAR0lyvOwQ5rptxo4AftmJsLZ7Aef
jtuN3y4N6doMzIC3mueMK2/Ev1unkJFRA05/u14rLVZN+/lCRVBCe/grTmmP71U/
Xj4kPYZRRoitrcdqN0LK8njaeUfWDbv4SbXOsUKXyz9LHge05gNZTv4l0OdDt6ls
qzJK6UaIxlGIWnPxpR3xiqCpOggMpJTvTsWLr6WnGpoIRunQRAA6wXBD80VjtDCI
0HIaBdu0gwyah2KXfUnLnUFTYGgj/aBlH17v36USuIMPlM5Ih+N8FM8/zlIGQJ2H
VXq8aMsyERQz8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:47 2025 by rpki-client