Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: SQQ4KXNizOnku/jb1LMAdySCh8IA88hqPXkIGLGJlDg=
Subject key identifier: F1:F0:41:27:11:8F:A1:1C:CD:A1:51:57:41:BB:15:20:0E:D9:25:AD
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 0199FB4624A81EAFA71506DE70B57A28AD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: Zv6Tni60BJrxVTmHQqrI1iltqIIUPdIs37ZWuhxGeuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:a8:1e:af:a7:15:06:de:70:b5:7a:28:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=f1f04127118fa11ccda1515741bb15200ed925ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:be:33:50:70:09:06:fe:ea:f3:53:1c:85:
5a:d7:76:9c:94:c9:1d:bb:a6:a1:38:12:51:34:d8:
ba:a3:e1:7e:94:eb:8e:cd:f0:ea:0d:a3:8c:8e:c0:
5d:a3:5b:3d:49:d2:1b:0c:37:f0:73:30:6e:87:ac:
ac:f6:0a:f4:82:b9:89:89:d5:9c:9a:ec:39:68:db:
45:9e:6b:48:18:15:9f:e8:c8:b8:91:7c:40:02:ad:
37:d8:7e:26:ad:5e:a3:06:ff:59:75:e2:20:c1:47:
54:c3:43:4d:5b:a0:02:c9:33:c0:95:af:2d:87:ad:
a6:81:ea:e0:cf:60:08:6d:e4:17:43:b2:35:12:e8:
68:8b:01:6f:21:b1:cb:3d:7b:86:44:37:9b:40:a8:
14:8b:a3:18:63:22:eb:99:59:4e:43:7b:6e:e4:3f:
ed:0c:9c:e1:27:3a:80:90:29:42:a6:b8:fb:82:b4:
51:f5:b9:7e:70:fd:9f:05:50:0e:6f:ec:7f:72:f8:
71:f0:3e:a7:e0:48:fd:19:59:31:2d:2e:86:d6:26:
e7:e8:aa:9f:58:d5:72:c4:12:31:4f:02:76:6e:64:
56:c0:da:59:5e:71:5f:fb:2c:3e:80:39:bd:ac:3b:
ef:5e:7a:bb:81:82:a1:9e:a5:7d:ca:13:da:84:5e:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:41:27:11:8F:A1:1C:CD:A1:51:57:41:BB:15:20:0E:D9:25:AD
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:b6:e3:eb:4f:a9:32:32:36:53:c8:51:0f:89:cf:5f:05:
32:f3:2e:13:88:c7:61:6b:ea:cb:da:05:10:48:df:44:0f:23:
fd:b8:ee:1f:ba:2e:b6:3a:c1:2e:f1:be:d7:96:ae:b3:d6:01:
1c:95:21:95:d8:63:ce:76:14:fd:39:67:ca:aa:5c:44:37:78:
2e:8c:98:da:e9:43:f0:a8:ba:7c:39:0e:69:29:34:68:77:0d:
b1:42:ac:01:66:20:81:53:e3:b1:87:0a:0f:15:63:3e:70:7c:
56:4f:2c:5d:ae:6a:13:d1:01:29:1f:29:b8:6e:da:17:47:0c:
20:8a:04:3e:5c:82:d6:41:91:f5:47:b2:5f:66:ce:0b:65:6b:
34:98:f6:47:4d:b9:5d:25:1a:6f:d1:e9:f4:6d:10:c1:00:fb:
f1:5e:73:aa:19:a7:1d:db:ee:c7:f4:81:47:c4:b8:9a:88:0e:
4a:8e:e2:62:8a:9a:5c:0b:19:6a:12:73:48:24:d7:be:98:11:
af:f5:f5:d8:3c:09:e0:6b:5f:13:6f:6d:0e:da:d7:49:a7:9a:
a1:50:0d:48:58:98:35:78:5a:2b:0e:68:a2:9c:34:4f:09:19:
90:48:c2:99:63:7c:c8:41:fd:16:38:08:1f:d7:ba:a7:47:ef:
84:fe:2a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RiSoHq+nFQbecLV6KK2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi
ZDEwZjMwHhcNMjUxMDE5MDcwMTQxWhcNMjUxMDIwMDcwMTQxWjAzMTEwLwYDVQQD
EyhmMWYwNDEyNzExOGZhMTFjY2RhMTUxNTc0MWJiMTUyMDBlZDkyNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02K+M1BwCQb+6vNTHIVa13aclMkd
u6ahOBJRNNi6o+F+lOuOzfDqDaOMjsBdo1s9SdIbDDfwczBuh6ys9gr0grmJidWc
muw5aNtFnmtIGBWf6Mi4kXxAAq032H4mrV6jBv9ZdeIgwUdUw0NNW6ACyTPAla8t
h62mgergz2AIbeQXQ7I1EuhoiwFvIbHLPXuGRDebQKgUi6MYYyLrmVlOQ3tu5D/t
DJzhJzqAkClCprj7grRR9bl+cP2fBVAOb+x/cvhx8D6n4Ej9GVkxLS6G1ibn6Kqf
WNVyxBIxTwJ2bmRWwNpZXnFf+yw+gDm9rDvvXnq7gYKhnqV9yhPahF5vIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHwQScRj6EczaFRV0G7FSAO2SWtMB8GA1UdIwQY
MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt
YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1
LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIi24+tP
qTIyNlPIUQ+Jz18FMvMuE4jHYWvqy9oFEEjfRA8j/bjuH7outjrBLvG+15aus9YB
HJUhldhjznYU/TlnyqpcRDd4LoyY2ulD8Ki6fDkOaSk0aHcNsUKsAWYggVPjsYcK
DxVjPnB8Vk8sXa5qE9EBKR8puG7aF0cMIIoEPlyC1kGR9UeyX2bOC2VrNJj2R025
XSUab9Hp9G0QwQD78V5zqhmnHdvux/SBR8S4mogOSo7iYoqaXAsZahJzSCTXvpgR
r/X12DwJ4GtfE29tDtrXSaeaoVANSFiYNXhaKw5oopw0TwkZkEjCmWN8yEH9FjgI
H9e6p0fvhP4qDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:40 2025 by rpki-client