Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: Pw784ExTBdr/ppKWEIuWhffXArtMo0kECcZbxxWAddA=
Subject key identifier: 06:61:E7:3A:38:A6:50:E4:35:5E:FF:90:29:10:99:B4:5E:43:FA:3E
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0199FC58FCBF959AF4416EB2F44126797EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 148D
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: sbX3YZWgeEL/uvNmi5cX+Rps/0cN1mjN69DCmDFQ0e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fc:bf:95:9a:f4:41:6e:b2:f4:41:26:79:7e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=0661e73a38a650e4355eff90291099b45e43fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:b9:21:06:b2:ea:90:16:84:bd:c8:1b:b6:
3c:a3:f4:d1:8a:69:c2:12:3f:90:62:8b:49:75:47:
71:ef:16:18:0b:4a:82:ca:b5:ca:54:d1:a8:6f:83:
b5:e1:8e:28:10:a2:26:49:cf:6a:46:14:cc:b2:43:
a9:ae:1e:45:90:7d:13:05:f6:4e:a2:4a:f4:42:d4:
a5:5d:2c:82:23:ae:9b:c0:d0:82:8e:aa:69:b2:aa:
0f:90:20:7c:13:84:21:9f:d1:4b:8f:d5:e6:c8:c3:
2f:d4:0a:d9:65:f7:14:6b:3b:f1:d5:27:5f:5a:01:
d7:f6:2c:72:45:81:b1:1d:c0:cf:51:71:d6:45:20:
5e:6b:3a:5a:26:65:df:ee:32:6f:eb:c2:e1:d2:35:
fa:46:d4:89:b1:d6:eb:10:07:85:1b:0a:c5:80:a6:
c2:35:2b:33:d9:f3:01:7c:8c:35:7f:b0:fb:b1:90:
a4:6f:c9:a5:44:c9:7d:12:aa:e5:a3:58:17:8e:68:
24:00:1a:6a:86:95:b7:9b:94:e4:77:50:b8:88:02:
35:6d:dc:4a:27:6e:a9:70:c6:d9:d2:1e:b7:a8:21:
55:5f:f2:f1:eb:dc:1d:fb:ae:1a:26:67:66:b1:0f:
0b:dd:d9:2a:a1:be:08:8a:74:8d:b2:b1:68:bf:03:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:E7:3A:38:A6:50:E4:35:5E:FF:90:29:10:99:B4:5E:43:FA:3E
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:38:5d:78:9e:9b:a8:88:c7:79:82:59:72:1a:73:4e:6e:27:
99:16:0f:84:80:9b:3a:40:31:69:fd:76:b8:81:13:3f:e4:da:
9c:21:ba:f5:c6:5d:e6:20:c0:27:24:b1:8f:89:68:f3:ba:c6:
93:07:79:a9:2a:3d:38:b7:af:d6:31:51:ff:d1:1f:b7:1a:55:
54:2d:95:de:e0:40:59:47:91:b5:a3:5a:3c:90:0f:f0:63:47:
b9:f2:89:19:b1:f7:e5:f2:26:85:d8:ff:fa:56:0e:d6:cf:71:
f6:47:63:62:6d:65:35:13:83:48:12:2a:9c:b0:22:cf:01:76:
c9:11:f9:cd:f7:21:b2:7c:02:f0:c7:92:31:6f:1d:6d:f3:e7:
5e:04:f9:74:33:1a:f1:11:2a:c8:bb:1c:81:71:1c:a4:9e:72:
5d:13:ca:32:18:02:a4:cf:08:04:4b:80:d5:20:f0:e9:80:a9:
91:d2:56:d9:5f:b7:ef:a8:e6:18:13:49:a6:db:e7:19:9c:16:
3d:a4:cb:b1:ce:97:4b:27:5b:7e:13:a3:af:97:52:72:0c:92:
5d:ba:df:c3:9d:e1:d3:18:e6:d3:0f:6f:68:fc:f2:42:b8:c3:
61:7b:fe:22:db:f6:c2:b1:3c:5a:64:7e:19:7e:51:80:3b:fb:
64:96:49:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPy/lZr0QW6y9EEmeX6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm
Y2FhOWYwHhcNMjUxMDE5MTIwMTU0WhcNMjUxMDIwMTIwMTU0WjAzMTEwLwYDVQQD
EygwNjYxZTczYTM4YTY1MGU0MzU1ZWZmOTAyOTEwOTliNDVlNDNmYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y+5IQay6pAWhL3IG7Y8o/TRimnC
Ej+QYotJdUdx7xYYC0qCyrXKVNGob4O14Y4oEKImSc9qRhTMskOprh5FkH0TBfZO
okr0QtSlXSyCI66bwNCCjqppsqoPkCB8E4Qhn9FLj9XmyMMv1ArZZfcUazvx1Sdf
WgHX9ixyRYGxHcDPUXHWRSBeazpaJmXf7jJv68Lh0jX6RtSJsdbrEAeFGwrFgKbC
NSsz2fMBfIw1f7D7sZCkb8mlRMl9Eqrlo1gXjmgkABpqhpW3m5Tkd1C4iAI1bdxK
J26pcMbZ0h63qCFVX/Lx69wd+64aJmdmsQ8L3dkqob4IinSNsrFovwNsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZh5zo4plDkNV7/kCkQmbReQ/o+MB8GA1UdIwQY
MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt
YmM1YjY5MTQ0NTg3LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3
LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDhdeJ6b
qIjHeYJZchpzTm4nmRYPhICbOkAxaf12uIETP+TanCG69cZd5iDAJySxj4lo87rG
kwd5qSo9OLev1jFR/9EftxpVVC2V3uBAWUeRtaNaPJAP8GNHufKJGbH35fImhdj/
+lYO1s9x9kdjYm1lNRODSBIqnLAizwF2yRH5zfchsnwC8MeSMW8dbfPnXgT5dDMa
8REqyLscgXEcpJ5yXRPKMhgCpM8IBEuA1SDw6YCpkdJW2V+376jmGBNJptvnGZwW
PaTLsc6XSydbfhOjr5dScgySXbrfw53h0xjm0w9vaPzyQrjDYXv+Itv2wrE8WmR+
GX5RgDv7ZJZJXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:16 2025 by rpki-client