Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: JE8JXEDaiwLsE95tK15JIS+BhyxHUblnbbNOK1GMKIs=
Subject key identifier: D8:72:E4:20:82:48:C9:B0:45:C0:F9:39:8A:B3:47:A5:38:0B:CB:83
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0199FE476A1C1E16E0EC13B50B773C144EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 21:01:56 +0000
Manifest this update: Sun 19 Oct 2025 21:01:56 +0000
Manifest next update: Mon 20 Oct 2025 21:01:56 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: Uu0jIjVq+ZG2Sw1FV0CXZ6mbz5ZmXfonEqwZLGXSxe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:6a:1c:1e:16:e0:ec:13:b5:0b:77:3c:14:4e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Oct 19 21:01:56 2025 GMT
Not After : Oct 20 21:01:56 2025 GMT
Subject: CN=d872e4208248c9b045c0f9398ab347a5380bcb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:d9:71:37:84:12:de:43:c7:ba:67:a5:1a:
c4:04:f9:b7:8a:aa:ae:63:aa:21:99:53:78:95:95:
34:34:fc:93:0d:d8:1a:62:c0:dd:40:98:9b:aa:e6:
f7:11:06:e5:eb:44:74:23:8d:e0:8c:6d:23:48:26:
35:a9:f3:d7:58:ed:32:5f:ba:aa:a3:8c:e2:64:a7:
71:b0:ed:ad:0a:b3:e4:ba:4d:43:a0:29:4d:13:4b:
29:bb:35:2e:f3:8f:95:c2:90:a8:78:0d:fa:17:34:
84:c9:5e:64:30:8e:50:8d:33:7e:e5:e6:fb:4e:be:
74:99:9e:c6:d8:32:0a:50:a0:66:19:13:90:cc:cf:
36:81:b8:59:87:70:e3:2b:41:20:e2:12:fc:b4:5a:
8f:c6:a7:05:29:42:77:13:1e:29:d7:a7:3a:5e:48:
5f:e9:c8:fe:28:f1:d6:79:1c:ac:f0:d4:49:02:40:
79:37:b3:d2:40:5c:43:39:83:66:6e:8d:a7:55:b3:
71:5a:e7:fd:d1:6f:a2:b5:d4:9e:ca:27:19:24:47:
33:15:1c:51:7a:9d:dc:6c:80:2e:a4:6a:e4:df:fc:
36:cb:15:e2:ea:39:54:92:45:e8:1f:c1:4f:27:16:
1e:d5:de:ff:4a:1a:0a:62:e5:3b:1f:17:0c:25:89:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:E4:20:82:48:C9:B0:45:C0:F9:39:8A:B3:47:A5:38:0B:CB:83
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:af:4e:95:39:d1:fe:0d:2a:fd:a1:ef:68:b7:51:f6:b1:
ef:e3:11:44:36:18:91:de:fc:af:64:bb:7a:2e:d9:53:dd:67:
e5:b9:80:a5:bd:0b:77:16:f5:17:f3:bc:c4:71:87:67:42:22:
ac:42:03:4a:de:42:2f:97:5d:c6:66:36:a8:d1:79:b6:d4:c4:
57:c4:16:fc:c3:db:5f:91:94:8b:2e:5d:47:82:dd:be:76:ca:
f2:15:97:59:1e:57:df:df:b3:14:19:f0:f1:13:45:29:c9:89:
a7:c1:67:73:43:c3:2b:60:05:04:0a:f1:5e:a1:be:c0:26:77:
e1:ec:0a:19:c9:e7:b4:f0:59:55:75:71:57:f7:a6:1f:bf:28:
c5:79:c8:dd:df:b5:7c:ac:c1:31:b2:44:e6:48:f2:39:6d:f3:
38:97:e9:b5:92:e8:50:c6:d1:e6:2b:34:bf:f8:fe:f4:e1:fb:
39:24:20:c1:58:4e:c4:ae:64:56:bc:7a:f1:d1:0f:9c:85:b2:
4a:86:61:0b:d2:8b:86:b3:1d:40:50:2f:7b:cc:47:d2:12:16:
a4:b4:c0:77:22:cc:36:48:31:40:ba:8c:6a:15:ee:1c:1d:5c:
9a:dd:a2:4e:8d:9d:4e:85:17:7b:23:c8:f0:5b:17:66:6c:d0:
b9:db:87:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R2ocHhbg7BO1C3c8FE79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjFlMzdlYWI2ZWY2MzI2OTMzZTVmYTM3NDhkMDdkODMw
MjZkYjAwHhcNMjUxMDE5MjEwMTU2WhcNMjUxMDIwMjEwMTU2WjAzMTEwLwYDVQQD
EyhkODcyZTQyMDgyNDhjOWIwNDVjMGY5Mzk4YWIzNDdhNTM4MGJjYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK3ZcTeEEt5Dx7pnpRrEBPm3iqqu
Y6ohmVN4lZU0NPyTDdgaYsDdQJibqub3EQbl60R0I43gjG0jSCY1qfPXWO0yX7qq
o4ziZKdxsO2tCrPkuk1DoClNE0spuzUu84+VwpCoeA36FzSEyV5kMI5QjTN+5eb7
Tr50mZ7G2DIKUKBmGROQzM82gbhZh3DjK0Eg4hL8tFqPxqcFKUJ3Ex4p16c6Xkhf
6cj+KPHWeRys8NRJAkB5N7PSQFxDOYNmbo2nVbNxWuf90W+itdSeyicZJEczFRxR
ep3cbIAupGrk3/w2yxXi6jlUkkXoH8FPJxYe1d7/ShoKYuU7HxcMJYkm6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhy5CCCSMmwRcD5OYqzR6U4C8uDMB8GA1UdIwQY
MBaAFJgh436rbvYyaTPl+jdI0H2DAm2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQt
YWVmYTc1N2UwYzM4LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQtYWVmYTc1N2UwYzM4
LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPOvTpU5
0f4NKv2h72i3Ufax7+MRRDYYkd78r2S7ei7ZU91n5bmApb0Ldxb1F/O8xHGHZ0Ii
rEIDSt5CL5ddxmY2qNF5ttTEV8QW/MPbX5GUiy5dR4LdvnbK8hWXWR5X39+zFBnw
8RNFKcmJp8Fnc0PDK2AFBArxXqG+wCZ34ewKGcnntPBZVXVxV/emH78oxXnI3d+1
fKzBMbJE5kjyOW3zOJfptZLoUMbR5is0v/j+9OH7OSQgwVhOxK5kVrx68dEPnIWy
SoZhC9KLhrMdQFAve8xH0hIWpLTAdyLMNkgxQLqMahXuHB1cmt2iTo2dToUXeyPI
8FsXZmzQuduHpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:31 2025 by rpki-client