Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: W/GSw5jP2XQK0sRT3wYH4BTLBDMves37VVWL2TFtgG0=
Subject key identifier: 1F:3E:B1:DE:CE:B8:B5:E9:1A:4F:D5:49:EF:E3:A2:13:3F:BA:B8:DF
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0199FE7DB9EF74EEC7B6D6D2DEBE1EF7F8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:16 +0000
Manifest this update: Sun 19 Oct 2025 22:01:16 +0000
Manifest next update: Mon 20 Oct 2025 22:01:16 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: feM72ims3/j8eGrwlpZOila4VjH1EDFFj9kXABILgfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b9:ef:74:ee:c7:b6:d6:d2:de:be:1e:f7:f8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Oct 19 22:01:16 2025 GMT
Not After : Oct 20 22:01:16 2025 GMT
Subject: CN=1f3eb1deceb8b5e91a4fd549efe3a2133fbab8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:af:90:c6:0a:ea:d8:f4:14:05:8d:e0:1e:
3a:39:75:b3:0b:56:56:81:7f:a5:43:bb:1b:28:95:
40:8a:77:ea:8d:4d:de:57:54:3c:79:41:3f:a6:ba:
1d:50:8d:a7:35:74:85:f4:f5:12:9b:a9:f2:0b:d4:
a7:30:ce:1a:1a:09:60:2b:53:08:81:99:20:e2:e7:
2b:95:73:f4:12:ad:db:19:30:68:18:70:d8:d9:3b:
a3:7a:29:e2:e0:ab:47:6e:01:c0:51:90:88:d9:b7:
32:cd:ef:9e:31:59:e0:72:55:2e:65:07:9d:3f:ec:
d0:27:57:13:a7:e3:af:79:98:e7:98:34:eb:d3:03:
83:f6:24:02:12:58:9d:d7:25:35:9f:41:5c:07:e8:
c6:b8:8c:6f:60:db:f6:6b:b6:38:10:c4:ce:31:d2:
22:c3:8e:1f:19:02:73:ec:09:c3:41:5d:04:99:3d:
a2:c3:04:b6:16:bb:8e:ae:d9:e5:18:bb:bf:0b:a7:
47:2f:c4:72:7c:e1:c5:56:e7:b8:76:51:2d:40:f2:
a3:df:b5:8b:8a:5c:21:70:ab:59:54:35:78:b3:c8:
e4:2f:e3:f6:aa:2d:3f:7a:97:1f:be:5d:b4:aa:fb:
09:d8:42:8e:0b:b7:64:4f:23:e0:2e:30:52:0d:b5:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:B1:DE:CE:B8:B5:E9:1A:4F:D5:49:EF:E3:A2:13:3F:BA:B8:DF
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3d:c0:ff:ab:e9:f3:1e:97:17:89:1a:42:86:88:6c:26:d2:
0a:c2:37:8f:a3:69:21:0d:43:5d:f4:a5:8d:44:c0:bb:94:2c:
3d:dd:6c:48:3c:7b:34:11:d6:20:1e:76:4c:fe:0f:b9:24:40:
05:7f:49:01:0a:86:ae:e0:95:23:74:5d:86:07:ac:e0:b9:bc:
8c:12:99:eb:e9:59:d6:a5:1c:89:6f:b3:1b:28:bf:b9:5c:f7:
bc:a5:73:74:8d:90:95:7e:ba:a1:fd:32:f8:3b:4b:dd:2c:55:
f3:ab:f9:fc:7c:52:0f:fa:e2:a2:7e:de:64:83:0b:9b:15:fe:
84:06:b1:9f:82:c9:a3:ea:26:f8:25:93:c1:fc:93:84:1e:7c:
13:74:b9:bb:d7:8b:9d:5c:be:f5:e0:0e:a7:19:6c:b0:e6:3d:
12:52:3a:85:c2:47:d2:a3:84:29:fb:2d:74:71:28:c9:0f:ff:
e1:82:5a:52:7e:f0:7a:78:31:df:91:c0:4b:5b:79:43:2a:7e:
c9:95:60:b4:83:3a:38:66:e7:91:97:a8:67:3b:07:b7:9f:7f:
f3:4f:40:dc:fc:d3:03:70:4c:fa:f8:0f:29:45:23:ea:4b:7a:
d3:ff:da:a6:81:d2:21:7c:0b:a9:8f:20:e7:8a:62:d4:45:fe:
34:2a:80:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fbnvdO7HttbS3r4e9/i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz
MmFlYmYwHhcNMjUxMDE5MjIwMTE2WhcNMjUxMDIwMjIwMTE2WjAzMTEwLwYDVQQD
EygxZjNlYjFkZWNlYjhiNWU5MWE0ZmQ1NDllZmUzYTIxMzNmYmFiOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjauvkMYK6tj0FAWN4B46OXWzC1ZW
gX+lQ7sbKJVAinfqjU3eV1Q8eUE/prodUI2nNXSF9PUSm6nyC9SnMM4aGglgK1MI
gZkg4ucrlXP0Eq3bGTBoGHDY2Tujeini4KtHbgHAUZCI2bcyze+eMVngclUuZQed
P+zQJ1cTp+OveZjnmDTr0wOD9iQCElid1yU1n0FcB+jGuIxvYNv2a7Y4EMTOMdIi
w44fGQJz7AnDQV0EmT2iwwS2FruOrtnlGLu/C6dHL8RyfOHFVue4dlEtQPKj37WL
ilwhcKtZVDV4s8jkL+P2qi0/epcfvl20qvsJ2EKOC7dkTyPgLjBSDbUl+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8+sd7OuLXpGk/VSe/johM/urjfMB8GA1UdIwQY
MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt
ZGExZmU5ZWJlZThlLzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl
LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD3A/6vp
8x6XF4kaQoaIbCbSCsI3j6NpIQ1DXfSljUTAu5QsPd1sSDx7NBHWIB52TP4PuSRA
BX9JAQqGruCVI3Rdhges4Lm8jBKZ6+lZ1qUciW+zGyi/uVz3vKVzdI2QlX66of0y
+DtL3SxV86v5/HxSD/rion7eZIMLmxX+hAaxn4LJo+om+CWTwfyThB58E3S5u9eL
nVy+9eAOpxlssOY9ElI6hcJH0qOEKfstdHEoyQ//4YJaUn7wengx35HAS1t5Qyp+
yZVgtIM6OGbnkZeoZzsHt59/809A3PzTA3BM+vgPKUUj6kt60//apoHSIXwLqY8g
54pi1EX+NCqAyQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:15 2025 by rpki-client