Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: jrG7qwivG25ZGwceFRzcWJNuX8lasS2u1hLXAjapyRg=
Subject key identifier: 3F:8B:12:1A:FA:0E:87:C8:1D:C4:D6:FA:F2:49:CF:3A:7F:8E:E0:33
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0199FE471C07924A844E3C4F81F71A9D30C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: TdoQIASyikqUevYbZs5T-_NUhsA.roa (hash: GUpM54hhs9YZPF//jA+AK0p+Pcnyv2rBVFcTgqhcKTE=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: cyhdUZPHmS7QoTj7r2k6JM3ObVUt2BxnuYE6QtVzgTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1c:07:92:4a:84:4e:3c:4f:81:f7:1a:9d:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=3f8b121afa0e87c81dc4d6faf249cf3a7f8ee033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:94:a6:52:9d:a1:b7:c0:a2:cf:f5:5a:c9:
a8:20:38:a9:31:bc:fc:0e:01:ff:10:b8:14:7a:fe:
75:5f:27:9e:a9:c5:a4:07:53:94:9f:83:08:e6:aa:
2f:ac:f9:0f:76:8e:97:c5:c7:7b:a2:2f:59:d1:ad:
2b:6a:ca:d7:93:1c:a7:b9:1e:18:b9:2f:e4:1b:1a:
ed:b3:59:54:9d:a2:64:d8:27:bc:99:17:57:53:f8:
ce:15:01:9e:07:32:b0:a9:e3:70:1a:95:5f:28:cd:
c0:85:c5:e0:0d:2b:87:50:d5:9c:7a:29:2e:49:56:
9f:24:15:b6:33:82:c9:12:96:b7:04:d6:f1:be:1f:
f6:02:ee:fe:10:4e:4a:05:25:cc:80:3d:90:f6:a7:
42:de:80:39:24:fd:b6:48:b3:13:61:17:27:b7:35:
20:1a:0b:05:1d:1c:29:38:47:ce:c7:a9:5e:f4:99:
53:8f:97:59:f8:db:1e:54:d2:d0:56:16:22:06:09:
b9:f0:6a:1c:b8:03:a5:06:3d:83:09:a4:b8:92:fe:
21:b6:4e:42:54:ae:77:42:9e:3c:8c:d1:95:e1:9d:
46:23:7a:42:19:80:c0:5a:77:74:c2:50:6b:3e:55:
c4:62:da:cd:8c:b2:cf:40:af:e4:16:ed:64:a6:a6:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:12:1A:FA:0E:87:C8:1D:C4:D6:FA:F2:49:CF:3A:7F:8E:E0:33
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:9d:15:35:30:fa:ca:84:f9:23:38:38:a5:4f:36:b3:05:
ed:57:28:05:03:ab:66:e3:9c:13:af:d1:90:12:28:4e:56:f5:
f3:df:b3:3a:a3:94:1e:60:c6:73:47:25:82:31:40:28:7e:a2:
85:f1:b2:56:3a:86:fd:81:eb:f9:99:b5:1b:0a:31:c4:55:0d:
05:f2:2e:db:c6:93:95:e5:75:bb:8b:f4:05:50:05:d5:41:a3:
fc:20:e4:af:3c:f1:1f:61:08:50:53:88:20:4d:fb:b7:ea:fd:
c9:e4:a6:c1:a4:63:6f:a3:fa:a2:d6:b6:46:44:06:ba:e1:46:
88:d3:d1:47:9f:09:c4:ca:61:b7:41:59:9d:46:69:75:4e:ac:
f6:c4:42:6d:2d:d5:f2:79:fb:e4:67:ae:97:fd:58:98:3e:e2:
72:ff:0e:74:cf:ab:d2:df:34:41:9f:a0:ad:b3:3b:a7:dc:0c:
c0:e1:dc:a5:fa:df:47:b8:76:5e:fb:42:a9:3d:36:a3:a2:e2:
3d:fc:5b:28:85:b7:b8:33:fc:9a:cc:66:a4:b3:bf:a8:48:31:
4c:f1:c7:da:96:6e:32:d7:b1:28:cb:c2:8c:13:ec:7b:18:ce:
01:12:a6:ad:36:09:4a:4f:92:e1:b7:ab:c0:00:73:e3:f3:90:
c0:95:12:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxwHkkqETjxPgfcanTDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1
ZTkyMzYwHhcNMjUxMDE5MjEwMTM3WhcNMjUxMDIwMjEwMTM3WjAzMTEwLwYDVQQD
EygzZjhiMTIxYWZhMGU4N2M4MWRjNGQ2ZmFmMjQ5Y2YzYTdmOGVlMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMmUplKdobfAos/1WsmoIDipMbz8
DgH/ELgUev51XyeeqcWkB1OUn4MI5qovrPkPdo6Xxcd7oi9Z0a0rasrXkxynuR4Y
uS/kGxrts1lUnaJk2Ce8mRdXU/jOFQGeBzKwqeNwGpVfKM3AhcXgDSuHUNWceiku
SVafJBW2M4LJEpa3BNbxvh/2Au7+EE5KBSXMgD2Q9qdC3oA5JP22SLMTYRcntzUg
GgsFHRwpOEfOx6le9JlTj5dZ+NseVNLQVhYiBgm58GocuAOlBj2DCaS4kv4htk5C
VK53Qp48jNGV4Z1GI3pCGYDAWnd0wlBrPlXEYtrNjLLPQK/kFu1kpqY/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+LEhr6DofIHcTW+vJJzzp/juAzMB8GA1UdIwQY
MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt
NmYxNjM5NjZhZjhiLzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi
LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO+dFTUw
+sqE+SM4OKVPNrMF7VcoBQOrZuOcE6/RkBIoTlb189+zOqOUHmDGc0clgjFAKH6i
hfGyVjqG/YHr+Zm1GwoxxFUNBfIu28aTleV1u4v0BVAF1UGj/CDkrzzxH2EIUFOI
IE37t+r9yeSmwaRjb6P6ota2RkQGuuFGiNPRR58JxMpht0FZnUZpdU6s9sRCbS3V
8nn75Geul/1YmD7icv8OdM+r0t80QZ+grbM7p9wMwOHcpfrfR7h2XvtCqT02o6Li
PfxbKIW3uDP8msxmpLO/qEgxTPHH2pZuMtexKMvCjBPsexjOARKmrTYJSk+S4ber
wABz4/OQwJUStg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:27 2025 by rpki-client