Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: dHzIV8UbAgEqvtRUcwSrAqNDpPkdNKDteD4ZYpmFgZU=
Subject key identifier: 7C:E5:B9:91:AE:C9:F2:A2:B3:32:AE:D0:41:5A:0D:61:0F:B1:82:6B
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 0199FC584A5E2ECAD77EA87B6410D2E16327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: cOkNBeGCjDi0Ed0YmWqnQ0VEu31uNLJP+RBALL7qRu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4a:5e:2e:ca:d7:7e:a8:7b:64:10:d2:e1:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=7ce5b991aec9f2a2b332aed0415a0d610fb1826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:38:4f:9e:7a:c3:02:c0:4c:2e:00:19:ee:
49:fe:e5:95:3a:54:f8:65:f4:33:f2:69:a9:db:46:
f7:8a:7f:06:e1:82:57:b7:6f:44:f6:a7:34:80:70:
b7:42:04:8b:31:c2:c4:a9:ba:b3:d0:40:a5:3e:d6:
7b:db:f6:f6:6e:e2:d8:d7:a6:81:7f:63:08:f8:46:
8a:a9:74:c1:0c:df:ca:3d:f5:b7:69:a6:c9:be:5a:
de:85:14:a9:c7:97:4d:a3:5f:0e:8b:31:3b:2b:3a:
84:1b:1c:ff:ac:07:d5:41:68:54:67:11:a1:2f:c7:
56:8a:1f:dc:25:6d:68:a2:3d:a7:dd:65:1b:d6:ba:
31:9a:d8:88:cb:e2:81:8d:61:0c:62:7a:e3:28:27:
2b:ff:eb:d0:32:19:f7:ba:ee:e1:81:bf:f8:f3:57:
2a:b0:51:65:4c:ed:ed:7b:61:c1:6a:56:b9:af:6c:
8a:95:c9:2c:74:e3:98:f2:41:22:ef:a6:28:43:02:
78:8b:7b:e1:37:a6:ea:fb:d2:85:28:5e:23:e0:a1:
64:03:e2:33:31:1f:5c:39:2c:3a:2f:29:c1:a4:7d:
7c:96:30:0c:d4:96:d1:45:40:3a:d4:25:23:df:b7:
0d:6a:66:2c:6a:f5:e0:bd:19:23:9b:fe:d2:b3:4b:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:B9:91:AE:C9:F2:A2:B3:32:AE:D0:41:5A:0D:61:0F:B1:82:6B
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:e5:e4:18:f6:fa:f0:03:d0:93:ab:2c:0b:c4:07:ac:54:
de:5d:69:66:22:e9:f0:13:be:cc:77:59:59:c2:2c:37:e8:2c:
1a:35:d9:6f:47:b0:13:18:e6:4d:3f:ac:b7:74:ea:1a:18:3e:
1d:90:5b:d8:31:f2:f8:a2:69:26:ea:b9:a8:be:f8:41:87:76:
e5:8b:37:1a:1e:43:22:31:8b:db:6e:60:a5:fc:0b:32:33:0c:
32:dd:ee:e4:c0:35:e4:5a:04:88:c1:21:18:2f:a3:56:42:60:
c0:cc:ca:f4:58:f1:f9:32:fe:a8:64:9f:0e:1e:0b:17:58:5b:
0c:44:05:4f:7b:86:1c:fe:36:0b:b3:06:91:1a:21:77:2c:2c:
de:8a:a8:f1:f5:d4:b4:84:ca:eb:2a:9e:b2:84:1a:e5:ad:24:
ae:fd:c8:4a:c5:a1:c9:75:cf:f5:aa:90:55:c7:5b:2f:78:0a:
e9:88:42:6a:00:f9:83:7d:60:f0:79:2e:a6:26:59:0a:60:9f:
af:2d:dc:fe:3d:38:fe:21:8a:ab:c1:60:02:ac:32:71:27:7b:
74:f9:05:04:64:1d:02:d0:a0:a4:a4:b3:32:a7:64:fd:99:2a:
0c:48:bc:47:61:24:f3:e0:6c:83:22:a6:11:5a:52:76:be:a0:
ec:72:a3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEpeLsrXfqh7ZBDS4WMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjgwNTJhZTdkMTBmZDIyNjFhMjI0OGZjMDBkMjAyYjBm
MjU1NzQwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
Eyg3Y2U1Yjk5MWFlYzlmMmEyYjMzMmFlZDA0MTVhMGQ2MTBmYjE4MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RI4T556wwLATC4AGe5J/uWVOlT4
ZfQz8mmp20b3in8G4YJXt29E9qc0gHC3QgSLMcLEqbqz0EClPtZ72/b2buLY16aB
f2MI+EaKqXTBDN/KPfW3aabJvlrehRSpx5dNo18OizE7KzqEGxz/rAfVQWhUZxGh
L8dWih/cJW1ooj2n3WUb1roxmtiIy+KBjWEMYnrjKCcr/+vQMhn3uu7hgb/481cq
sFFlTO3te2HBala5r2yKlcksdOOY8kEi76YoQwJ4i3vhN6bq+9KFKF4j4KFkA+Iz
MR9cOSw6LynBpH18ljAM1JbRRUA61CUj37cNamYsavXgvRkjm/7Ss0uJAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzluZGuyfKiszKu0EFaDWEPsYJrMB8GA1UdIwQY
MBaAFHcoBSrn0Q/SJhoiSPwA0gKw8lV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUt
MmNiYzQwZTVmZTYyLzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUtMmNiYzQwZTVmZTYy
LzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI7l5Bj2
+vAD0JOrLAvEB6xU3l1pZiLp8BO+zHdZWcIsN+gsGjXZb0ewExjmTT+st3TqGhg+
HZBb2DHy+KJpJuq5qL74QYd25Ys3Gh5DIjGL225gpfwLMjMMMt3u5MA15FoEiMEh
GC+jVkJgwMzK9Fjx+TL+qGSfDh4LF1hbDEQFT3uGHP42C7MGkRohdyws3oqo8fXU
tITK6yqesoQa5a0krv3ISsWhyXXP9aqQVcdbL3gK6YhCagD5g31g8HkupiZZCmCf
ry3c/j04/iGKq8FgAqwycSd7dPkFBGQdAtCgpKSzMqdk/ZkqDEi8R2Ek8+BsgyKm
EVpSdr6g7HKj3g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:51 2025 by rpki-client