Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: hIBiKCQj6MEk8o0Td57fg5RDVL/xg1mX99lXiz8DtDA=
Subject key identifier: FF:21:C3:03:3C:F8:B4:52:49:63:1F:30:F7:6A:7D:58:AB:F7:3A:21
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0199FD342E6838722C9B641E20EA5C3CF0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: VnhVRR6In5g3oBdGL+vmUi9bVojc6iDgtmeCeRT1cRc=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2e:68:38:72:2c:9b:64:1e:20:ea:5c:3c:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=ff21c3033cf8b45249631f30f76a7d58abf73a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:ff:37:98:6d:4b:19:5e:e9:28:36:df:e3:
cf:15:bf:51:6d:a6:48:4d:9e:1b:68:2d:79:b1:a7:
5b:bf:99:8f:01:ab:a7:84:85:59:1c:cd:c8:b4:95:
5e:66:4d:84:cf:1b:f3:d8:3c:0a:77:60:92:d6:e1:
d0:7c:eb:dc:23:7f:61:d2:ad:e7:25:a6:7d:8d:b7:
cc:23:e6:11:f0:96:ec:c7:49:ac:fa:7d:6f:67:5d:
ef:94:23:7c:66:18:73:f5:db:0e:7a:f9:b8:61:06:
b8:13:ea:a4:c6:ac:f6:75:e4:13:90:e6:e3:fb:7b:
86:b9:0b:7e:eb:a8:6a:1c:f2:2a:84:f6:e4:9d:dd:
62:32:7c:18:1b:09:d1:fb:1c:c5:90:69:bc:a2:40:
79:b9:4a:5a:aa:12:6e:df:43:2b:82:17:94:01:be:
16:4d:ce:89:d6:f2:21:f2:13:ee:15:1a:6c:ed:07:
b3:0a:05:3e:a9:86:f6:de:cc:53:39:f8:8c:6c:ca:
eb:ac:85:33:59:82:85:f3:2e:0a:23:9b:18:55:6d:
5b:21:06:46:41:0b:10:4f:f9:fa:42:61:93:d5:1f:
a2:6a:46:06:08:34:0d:f8:fd:1c:5e:e9:ef:f6:5c:
2b:ad:40:f4:f0:fd:79:da:4a:51:bb:be:ff:5b:20:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:C3:03:3C:F8:B4:52:49:63:1F:30:F7:6A:7D:58:AB:F7:3A:21
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:55:e4:d7:53:41:45:9f:4e:c3:1a:45:4e:9c:8e:92:25:a9:
80:63:36:e5:c3:dc:43:7b:31:a9:23:ea:4f:33:c6:f0:7c:de:
dc:d8:02:0b:9c:5f:b5:36:cf:cf:c8:fc:8c:14:7b:2c:d1:bf:
95:b8:cc:86:fc:f9:b1:6a:8a:ec:cf:ee:cd:de:59:19:7a:d4:
eb:f2:16:00:53:31:57:6c:57:e4:46:bd:3a:39:ff:7d:57:92:
e6:06:ce:d5:08:40:aa:d6:4f:56:e5:96:87:32:56:28:b3:c5:
58:e9:b8:b3:4b:bc:5f:ff:95:eb:cd:52:49:c7:7d:79:ad:84:
f2:09:72:c9:88:f8:31:3a:0c:bd:2e:24:4e:93:4d:5c:d0:66:
21:0e:3c:bc:96:d8:79:7b:8d:8f:4f:36:da:6d:c3:8c:2e:f2:
49:4b:e1:e7:4a:3d:3f:3c:17:f6:61:17:05:0b:f3:42:a5:7e:
67:28:30:dd:9c:76:0a:ff:fc:7a:6a:56:56:0c:8d:2d:9b:78:
9b:68:c3:c0:22:c5:34:fa:99:e1:7e:c2:d4:fd:6b:25:0b:8f:
2d:cd:e7:4d:80:2b:c9:9c:6c:53:0c:0c:06:57:56:0f:74:d0:
04:d0:03:e0:c9:6c:6a:a4:69:99:83:ba:10:fb:12:08:cf:e0:
e8:59:c7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NC5oOHIsm2QeIOpcPPDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy
YTY3ZTcwHhcNMjUxMDE5MTYwMTE5WhcNMjUxMDIwMTYwMTE5WjAzMTEwLwYDVQQD
EyhmZjIxYzMwMzNjZjhiNDUyNDk2MzFmMzBmNzZhN2Q1OGFiZjczYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G3/N5htSxle6Sg23+PPFb9RbaZI
TZ4baC15sadbv5mPAaunhIVZHM3ItJVeZk2Ezxvz2DwKd2CS1uHQfOvcI39h0q3n
JaZ9jbfMI+YR8Jbsx0ms+n1vZ13vlCN8Zhhz9dsOevm4YQa4E+qkxqz2deQTkObj
+3uGuQt+66hqHPIqhPbknd1iMnwYGwnR+xzFkGm8okB5uUpaqhJu30MrgheUAb4W
Tc6J1vIh8hPuFRps7QezCgU+qYb23sxTOfiMbMrrrIUzWYKF8y4KI5sYVW1bIQZG
QQsQT/n6QmGT1R+iakYGCDQN+P0cXunv9lwrrUD08P152kpRu77/WyDvgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8hwwM8+LRSSWMfMPdqfVir9zohMB8GA1UdIwQY
MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt
ZWZlYTYzZDA2ZjgwLzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw
LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1Xk11NB
RZ9OwxpFTpyOkiWpgGM25cPcQ3sxqSPqTzPG8Hze3NgCC5xftTbPz8j8jBR7LNG/
lbjMhvz5sWqK7M/uzd5ZGXrU6/IWAFMxV2xX5Ea9Ojn/fVeS5gbO1QhAqtZPVuWW
hzJWKLPFWOm4s0u8X/+V681SScd9ea2E8glyyYj4MToMvS4kTpNNXNBmIQ48vJbY
eXuNj0822m3DjC7ySUvh50o9PzwX9mEXBQvzQqV+Zygw3Zx2Cv/8empWVgyNLZt4
m2jDwCLFNPqZ4X7C1P1rJQuPLc3nTYAryZxsUwwMBldWD3TQBNAD4MlsaqRpmYO6
EPsSCM/g6FnH1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:18 2025 by rpki-client