Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: 89Zb/RmorV1jGh4HN9r4tx73a40Adq18BHTf216zKIk=
Subject key identifier: 4A:3E:19:D8:30:90:AF:6B:3B:B1:5E:49:A2:04:68:34:20:46:21:56
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0199FC8F84B302BDD3FA14A16831A720651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: Ha4iqiemRVs4K0apcX26aGgxEQM.roa (hash: Y9w0WT6CR9hlG1wNToGxOj1Wt0I5gYiZH++6mqrNiy0=)
2: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: 3xR/fm8MQJCmWEfQiTnfGJf66zbaPPueW0vmx/d1eZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:84:b3:02:bd:d3:fa:14:a1:68:31:a7:20:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=4a3e19d83090af6b3bb15e49a204683420462156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:4d:44:81:e2:66:1b:fe:e4:5d:e0:ad:bb:
8e:cf:e7:21:0e:d8:c7:9f:3b:6f:92:f6:10:ea:cb:
d0:de:04:eb:18:a2:ea:cd:ed:05:7b:dd:0e:32:94:
7e:b8:d5:03:1f:13:10:cc:68:86:3e:e5:42:3a:ad:
11:cc:6a:6b:b6:af:0b:18:6b:fc:44:fd:aa:73:3a:
82:81:5b:4c:38:e1:41:d1:89:46:7b:33:28:0e:df:
b8:30:c8:fc:bb:67:3a:d1:38:b2:fd:3c:b1:a0:5e:
9c:14:1f:9a:e3:1f:31:30:17:50:1a:db:09:1e:5f:
a5:c9:35:6d:c1:41:d3:c7:43:a3:9b:23:59:c0:10:
95:0b:f2:7f:bf:de:cd:b2:a9:33:a6:ab:e5:79:51:
01:4d:72:a4:00:1c:8d:36:58:2c:1c:b8:86:cd:0c:
a6:9b:72:ee:db:76:70:63:89:cb:55:5c:80:a9:42:
c1:ad:9e:aa:34:35:c1:d4:53:ea:e9:0c:5d:8e:b3:
17:08:e9:08:24:8c:86:20:90:d7:68:5e:79:f0:2e:
f8:f0:5e:5e:f8:b7:8f:b6:34:83:a9:d2:c7:09:00:
66:e7:36:55:3a:58:2c:ec:e7:7a:7d:2b:1c:e6:42:
93:98:df:6b:c0:ab:fc:0a:c9:66:5d:00:f5:6c:99:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:19:D8:30:90:AF:6B:3B:B1:5E:49:A2:04:68:34:20:46:21:56
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3d:2b:6b:90:22:7e:69:a3:a4:e5:ca:37:b3:65:c2:5b:6b:
d4:10:a3:04:95:5d:b9:54:10:92:d3:b5:7d:87:8c:91:c9:8c:
87:04:36:e4:0b:8e:3e:0e:24:1c:b8:99:9c:52:b7:88:72:be:
a4:7f:3e:fe:4e:6f:8b:1b:5d:97:d6:35:99:22:5d:41:27:14:
7f:41:b2:25:d7:de:22:ac:b4:2d:fb:c7:b9:72:39:e1:b9:9e:
4c:bd:27:b1:0d:7a:04:f2:4e:2b:0f:0e:b5:5f:a0:ff:ee:b2:
80:11:c9:c0:01:82:74:10:7d:3b:84:54:63:0e:d5:65:d3:a1:
22:95:fc:35:b2:77:4d:b4:ca:f7:a4:4a:df:b2:b5:f7:60:87:
3b:dc:65:f6:18:c9:3b:62:83:5f:ea:a7:d4:5c:d9:35:cc:e5:
72:42:7a:b2:10:ba:b6:09:84:6a:68:1f:ac:ee:69:56:e2:c9:
c5:8a:b2:4e:98:99:f3:15:14:33:be:32:01:50:dd:61:28:af:
f6:bd:2f:4b:41:f9:7b:4d:93:4c:39:69:03:23:45:35:cf:cd:
ac:0c:d3:bc:ff:04:f5:8a:11:c8:26:90:e6:77:15:77:76:8e:
cb:eb:ff:23:e0:90:d7:63:d0:16:6e:a6:3c:d4:85:66:68:5d:
d9:ac:b8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4SzAr3T+hShaDGnIGUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q5MGFiY2RkZTBiYzZmMGJjYWFmMjFjZWMzYTRmMmFj
ZmFlNGYwHhcNMjUxMDE5MTMwMTI3WhcNMjUxMDIwMTMwMTI3WjAzMTEwLwYDVQQD
Eyg0YTNlMTlkODMwOTBhZjZiM2JiMTVlNDlhMjA0NjgzNDIwNDYyMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWZNRIHiZhv+5F3grbuOz+chDtjH
nztvkvYQ6svQ3gTrGKLqze0Fe90OMpR+uNUDHxMQzGiGPuVCOq0RzGprtq8LGGv8
RP2qczqCgVtMOOFB0YlGezMoDt+4MMj8u2c60Tiy/TyxoF6cFB+a4x8xMBdQGtsJ
Hl+lyTVtwUHTx0OjmyNZwBCVC/J/v97NsqkzpqvleVEBTXKkAByNNlgsHLiGzQym
m3Lu23ZwY4nLVVyAqULBrZ6qNDXB1FPq6QxdjrMXCOkIJIyGIJDXaF558C748F5e
+LePtjSDqdLHCQBm5zZVOlgs7Od6fSsc5kKTmN9rwKv8CslmXQD1bJklLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo+GdgwkK9rO7FeSaIEaDQgRiFWMB8GA1UdIwQY
MBaAFI99kKvN3gvG8Lyq8hzsOk8qz65PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQt
MzdlMzJlYWE3NjY3LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQtMzdlMzJlYWE3NjY3
LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj0ra5Ai
fmmjpOXKN7Nlwltr1BCjBJVduVQQktO1fYeMkcmMhwQ25AuOPg4kHLiZnFK3iHK+
pH8+/k5vixtdl9Y1mSJdQScUf0GyJdfeIqy0LfvHuXI54bmeTL0nsQ16BPJOKw8O
tV+g/+6ygBHJwAGCdBB9O4RUYw7VZdOhIpX8NbJ3TbTK96RK37K192CHO9xl9hjJ
O2KDX+qn1FzZNczlckJ6shC6tgmEamgfrO5pVuLJxYqyTpiZ8xUUM74yAVDdYSiv
9r0vS0H5e02TTDlpAyNFNc/NrAzTvP8E9YoRyCaQ5ncVd3aOy+v/I+CQ12PQFm6m
PNSFZmhd2ay4lQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:10 2025 by rpki-client