Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: sQpgMQtuXfD81EBvWX1PR90PdVABW+VeJVGFFGsxn5g=
Subject key identifier: BA:4B:59:21:43:25:9B:01:27:5B:1A:11:BA:F5:8F:FB:C1:AB:E6:BE
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 0199FC58FC20C4A5A84AFD572BA2EE390AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: /9AuUyG211sj7BhFKvlIaAHnKidtxIh3Zf4kR4mh4BI=)
2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fc:20:c4:a5:a8:4a:fd:57:2b:a2:ee:39:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=ba4b592143259b01275b1a11baf58ffbc1abe6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:c1:65:12:86:1e:17:93:a4:67:84:5f:44:
21:79:fa:c9:d9:5b:e7:49:2c:c5:7e:5c:81:77:bd:
79:e2:bf:e7:6c:35:a0:3f:03:f7:78:f1:5a:3c:cb:
8b:e5:9f:e5:41:62:eb:32:66:3e:dd:77:b4:25:33:
2b:22:74:2c:b2:6d:fb:2a:d6:c5:4a:ce:c2:94:71:
96:9c:c2:c4:f7:1f:0b:29:b0:92:b5:3e:a2:53:c2:
6e:f8:96:c2:62:3f:d3:50:d5:ab:2e:f9:86:aa:86:
d4:84:59:f2:84:2c:22:f8:7f:3b:96:22:00:67:e0:
d6:86:f3:66:17:71:e9:cd:5b:b8:b6:7c:6e:ee:a2:
7c:22:ee:57:ff:2a:28:f0:7c:3b:c4:83:14:7d:28:
67:23:85:29:dc:e9:52:02:b4:c0:ec:b2:25:f8:a0:
7d:4c:db:68:92:4c:2f:24:c4:cf:ac:52:db:76:5c:
7f:f8:40:13:e2:89:b2:4a:73:94:ff:7d:cf:cb:39:
86:21:79:68:8a:4e:33:1a:aa:b4:3d:13:2d:d8:59:
13:93:56:8e:c3:f0:88:35:a6:36:31:9f:fa:b4:45:
aa:8f:82:bd:d0:a4:34:13:87:bf:86:90:c0:47:82:
d0:4e:26:83:f1:c9:33:b9:86:e9:c5:1a:b6:b5:83:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:59:21:43:25:9B:01:27:5B:1A:11:BA:F5:8F:FB:C1:AB:E6:BE
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:66:bf:22:48:31:3f:b3:73:17:43:07:2e:1b:9c:db:13:87:
20:e3:9d:3f:b9:30:f4:d6:07:83:f7:a6:55:fe:a7:7f:90:6c:
0e:25:58:c2:19:c2:1e:bb:ac:8c:e1:ca:d0:71:5f:4a:28:eb:
a2:d7:e1:26:0a:91:14:ad:22:0d:9e:6c:ff:b7:76:04:ed:a9:
0e:4f:be:d9:9f:c2:44:c2:cd:57:a6:48:20:34:2e:5d:19:f7:
14:81:eb:c9:97:57:d0:e0:4c:20:54:fa:37:22:5e:25:2a:2e:
0a:99:d3:4d:e8:ff:35:3b:83:47:cf:60:cc:47:51:af:b8:48:
5e:51:32:e2:62:f1:7e:23:00:77:4f:1c:d4:e7:bb:b9:03:c2:
52:c3:e8:9e:a5:75:a9:be:98:19:39:08:c8:30:dc:85:44:23:
db:ff:e1:9c:22:61:33:89:3c:ae:eb:41:88:e2:dc:19:b5:be:
db:be:93:1d:f7:91:8b:0a:89:ec:89:76:a1:bc:58:e5:66:8a:
ae:04:cc:dd:c8:c5:1c:47:df:3a:ee:36:a3:bd:aa:2e:78:f2:
ef:10:52:54:5b:cc:08:d5:45:9c:16:6b:52:25:f2:c8:07:8f:
be:a0:66:31:5e:5c:c8:b8:fc:80:a1:7c:98:09:3b:0b:3d:a4:
eb:e5:81:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPwgxKWoSv1XK6LuOQq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjcyZGYwZTQ2OTg4YmJlZWQ5YmU1NDEwZGExMmEzZjE3
MGQ2OTEwHhcNMjUxMDE5MTIwMTU0WhcNMjUxMDIwMTIwMTU0WjAzMTEwLwYDVQQD
EyhiYTRiNTkyMTQzMjU5YjAxMjc1YjFhMTFiYWY1OGZmYmMxYWJlNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnfBZRKGHheTpGeEX0QhefrJ2Vvn
SSzFflyBd7154r/nbDWgPwP3ePFaPMuL5Z/lQWLrMmY+3Xe0JTMrInQssm37KtbF
Ss7ClHGWnMLE9x8LKbCStT6iU8Ju+JbCYj/TUNWrLvmGqobUhFnyhCwi+H87liIA
Z+DWhvNmF3HpzVu4tnxu7qJ8Iu5X/yoo8Hw7xIMUfShnI4Up3OlSArTA7LIl+KB9
TNtokkwvJMTPrFLbdlx/+EAT4omySnOU/33PyzmGIXloik4zGqq0PRMt2FkTk1aO
w/CINaY2MZ/6tEWqj4K90KQ0E4e/hpDAR4LQTiaD8ckzuYbpxRq2tYMsswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpLWSFDJZsBJ1saEbr1j/vBq+a+MB8GA1UdIwQY
MBaAFPNnLfDkaYi77tm+VBDaEqPxcNaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMt
M2UyMjE5OGFlYjUyLzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMtM2UyMjE5OGFlYjUy
LzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWa/Ikgx
P7NzF0MHLhuc2xOHIOOdP7kw9NYHg/emVf6nf5BsDiVYwhnCHrusjOHK0HFfSijr
otfhJgqRFK0iDZ5s/7d2BO2pDk++2Z/CRMLNV6ZIIDQuXRn3FIHryZdX0OBMIFT6
NyJeJSouCpnTTej/NTuDR89gzEdRr7hIXlEy4mLxfiMAd08c1Oe7uQPCUsPonqV1
qb6YGTkIyDDchUQj2//hnCJhM4k8rutBiOLcGbW+276THfeRiwqJ7Il2obxY5WaK
rgTM3cjFHEffOu42o72qLnjy7xBSVFvMCNVFnBZrUiXyyAePvqBmMV5cyLj8gKF8
mAk7Cz2k6+WBpg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:48 2025 by rpki-client