Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: U+5cI55WucVAr8RyHNeKyxrWdeaAec7cKa1OqXA2wQY=
Subject key identifier: 5E:16:DB:E5:42:27:A9:D9:52:84:2D:9A:C2:41:86:85:26:1C:5C:01
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 0199FD6ACE97DC73DC949D50F786DC1219E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: 8dxX9PcxhsQ2yF5meF1InMyokWjaUOLvEWuWSCKw99Y=)
2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ce:97:dc:73:dc:94:9d:50:f7:86:dc:12:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=5e16dbe54227a9d952842d9ac2418685261c5c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:80:4f:66:a4:5c:b9:52:40:36:2d:0f:90:
7f:30:88:1d:57:55:d7:a8:b8:d2:dd:aa:fa:d9:b8:
fb:f8:f4:c5:33:75:88:68:da:58:48:47:0c:bc:b0:
3b:47:9f:eb:6a:42:30:67:f0:d9:00:23:bd:e5:0c:
5f:0e:63:70:c3:78:31:44:05:10:2d:bc:9a:b2:43:
59:4c:99:7d:1c:44:ea:1d:af:ce:8b:c0:97:b7:4c:
a5:c7:53:9c:0f:26:d5:2d:4c:25:9e:3a:8e:d1:24:
0d:ce:52:53:50:f1:32:76:b2:87:a4:0e:1d:00:ca:
9a:ed:0a:21:8c:45:3d:a4:11:01:1b:d3:9c:57:13:
d2:dc:90:8f:8c:59:90:14:ae:88:b9:94:a2:e6:75:
52:41:10:be:c5:32:ce:4d:eb:0f:29:1d:75:db:84:
68:3d:b4:11:ef:4f:f9:6c:d4:13:c2:19:a3:7a:8e:
e7:4d:a3:52:ea:cf:70:9d:e7:db:a5:d1:eb:58:7e:
25:f5:4f:f5:7f:f8:12:68:58:77:4c:1e:eb:2d:e1:
dd:2b:f3:6f:fb:09:b1:bd:09:82:6b:b1:9b:86:ad:
5f:a5:59:61:e5:ef:ed:03:f3:f1:5d:76:7a:3f:7e:
a2:45:67:70:94:8f:20:c2:af:e4:a7:0d:35:78:dc:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:DB:E5:42:27:A9:D9:52:84:2D:9A:C2:41:86:85:26:1C:5C:01
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a4:4f:e3:97:cc:c7:da:b9:dd:ff:20:8e:7f:9d:62:68:5a:
b5:8c:59:62:dc:27:c9:4b:76:5d:12:04:cf:64:b3:31:c5:f7:
aa:06:82:92:6e:ec:cc:28:f6:94:c7:a7:58:d2:2c:05:8e:2e:
75:de:39:c0:05:c1:b2:0f:1d:83:53:84:84:5e:9a:13:b8:3c:
42:81:6a:00:da:bb:ca:7a:6d:18:90:fd:78:bd:7d:47:00:c6:
2b:d5:58:d5:86:3f:a3:99:8f:da:c5:58:00:b6:24:2d:a2:37:
f4:1b:1e:60:fb:b0:f1:da:c6:32:9e:ae:f1:f0:78:05:9c:97:
9c:5c:2c:7f:ca:33:35:98:9a:68:70:48:7e:cf:bf:c3:fe:f4:
13:c8:15:f3:85:82:49:c2:45:ae:93:de:51:1f:4f:aa:f6:40:
93:74:d0:c0:e9:62:b8:72:30:6b:b2:84:45:d9:d9:f6:e0:e5:
a3:ff:4e:94:4f:4a:b0:67:74:88:a0:f8:d7:b9:e7:e4:b4:d3:
a1:da:6b:c3:e2:33:7a:9b:9c:f9:e0:e8:2d:30:8b:d0:49:1f:
d7:7b:b3:cf:1e:c5:e2:1c:fb:28:0e:2d:88:5e:74:cb:24:28:
06:3d:44:93:24:3c:dc:9d:d4:71:35:c4:d4:b9:5f:3a:44:3b:
7b:ec:de:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9as6X3HPclJ1Q94bcEhnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2NlNjRhY2UwMmNjZDMzMGNlZWY5OGQwNWRmMGZiMjAz
MTdhOTEwHhcNMjUxMDE5MTcwMDU5WhcNMjUxMDIwMTcwMDU5WjAzMTEwLwYDVQQD
Eyg1ZTE2ZGJlNTQyMjdhOWQ5NTI4NDJkOWFjMjQxODY4NTI2MWM1YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldeAT2akXLlSQDYtD5B/MIgdV1XX
qLjS3ar62bj7+PTFM3WIaNpYSEcMvLA7R5/rakIwZ/DZACO95QxfDmNww3gxRAUQ
LbyaskNZTJl9HETqHa/Oi8CXt0ylx1OcDybVLUwlnjqO0SQNzlJTUPEydrKHpA4d
AMqa7QohjEU9pBEBG9OcVxPS3JCPjFmQFK6IuZSi5nVSQRC+xTLOTesPKR1124Ro
PbQR70/5bNQTwhmjeo7nTaNS6s9wnefbpdHrWH4l9U/1f/gSaFh3TB7rLeHdK/Nv
+wmxvQmCa7Gbhq1fpVlh5e/tA/PxXXZ6P36iRWdwlI8gwq/kpw01eNw8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4W2+VCJ6nZUoQtmsJBhoUmHFwBMB8GA1UdIwQY
MBaAFDJ85krOAszTMM7vmNBd8PsgMXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMt
YTNkOWQ2MTRmMTk3LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMtYTNkOWQ2MTRmMTk3
LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzaRP45fM
x9q53f8gjn+dYmhatYxZYtwnyUt2XRIEz2SzMcX3qgaCkm7szCj2lMenWNIsBY4u
dd45wAXBsg8dg1OEhF6aE7g8QoFqANq7ynptGJD9eL19RwDGK9VY1YY/o5mP2sVY
ALYkLaI39BseYPuw8drGMp6u8fB4BZyXnFwsf8ozNZiaaHBIfs+/w/70E8gV84WC
ScJFrpPeUR9PqvZAk3TQwOliuHIwa7KERdnZ9uDlo/9OlE9KsGd0iKD417nn5LTT
odprw+Izepuc+eDoLTCL0Ekf13uzzx7F4hz7KA4tiF50yyQoBj1EkyQ83J3UcTXE
1LlfOkQ7e+zeeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:06 2025 by rpki-client