Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: NJQBpBl14qQgrXBAXtIJqjrzJKlVv2vV3TPAX+N/ex4=
Subject key identifier: 59:C7:8A:D0:74:47:4E:D7:6A:64:06:6A:EF:1D:A4:BD:1B:03:3E:7C
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0199FCFDABB5541774B10DD978A72A0EB88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: 6AWs9HrfG0PL7V7qwOUK0Aqp97Arsln4nZNBNRmufvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ab:b5:54:17:74:b1:0d:d9:78:a7:2a:0e:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=59c78ad074474ed76a64066aef1da4bd1b033e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:e5:3a:78:1b:b9:8d:81:84:82:88:09:62:
99:da:f4:45:dc:5f:ca:0b:42:b4:9a:13:87:33:cf:
c0:b8:ff:6d:d9:84:f0:ce:36:f2:39:5d:79:b5:0a:
95:b1:a4:d5:e4:4a:e2:2e:c4:24:4b:e5:19:a0:b0:
1a:65:2f:2a:08:63:18:ff:6c:1f:ce:34:25:ff:9d:
2e:91:5e:09:5c:e7:52:56:7f:8a:41:79:e4:6f:04:
3c:a5:a9:82:82:58:d9:6e:9b:3f:16:7f:72:88:a4:
b7:cd:50:26:e5:22:55:c3:e3:8b:5b:b9:cb:5b:56:
d6:07:31:6c:17:47:f8:ef:85:d4:da:03:ee:d4:65:
f3:c1:84:e6:af:ef:f9:f7:87:57:38:9f:6e:43:1b:
96:cf:e1:7c:34:30:bb:43:17:5a:2e:c3:d9:bf:1f:
99:84:7e:69:97:f2:42:a2:b9:29:85:3c:89:16:f9:
d8:44:53:20:a6:e3:a4:fe:53:36:e2:fa:e5:45:4a:
a1:cf:40:b6:74:ce:88:3e:04:bb:1f:7f:44:dc:2c:
7d:5a:9a:54:6d:9d:2f:4e:42:68:58:4d:11:48:53:
fc:e9:2c:e1:11:95:1d:52:b5:36:66:8f:57:27:d2:
54:66:88:73:8c:ad:27:b4:57:b9:cf:82:d1:8d:a9:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:8A:D0:74:47:4E:D7:6A:64:06:6A:EF:1D:A4:BD:1B:03:3E:7C
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:85:4b:9b:a6:05:86:44:a6:3a:15:7d:77:f3:7e:b5:33:
52:8e:ae:bd:cc:8b:a0:67:ad:09:6e:5e:4a:81:c1:81:97:19:
95:0d:cd:49:16:51:b0:11:8d:58:7f:e8:48:09:6f:fb:74:6d:
91:ac:1d:38:88:a6:e5:a0:7b:9f:84:7c:5f:bb:e6:6e:fe:f6:
d6:eb:8e:9a:4e:8e:16:de:f6:43:07:39:74:99:50:a5:a7:4d:
ee:68:3e:ff:95:7c:89:7d:c1:04:a8:de:27:72:d1:03:73:56:
c9:2e:19:8c:b0:c0:6b:22:e6:82:b4:0f:af:34:61:55:9c:28:
37:05:c5:fd:4e:a8:8d:fb:6b:cb:a0:71:46:c0:75:c5:dd:43:
8c:3c:46:76:26:41:62:bb:69:b4:7f:8f:c1:51:b7:09:c9:bc:
18:9c:46:11:66:2b:7c:47:00:1e:f5:46:40:aa:77:71:3f:08:
f0:2d:28:39:b2:39:55:d6:81:a6:0a:53:b6:db:78:19:0a:e3:
54:31:25:82:43:2b:31:31:5c:13:85:1f:42:4d:1e:aa:c3:94:
a1:47:00:88:cc:2a:0b:ab:91:c2:6b:d9:25:cc:40:7d:2e:e3:
b3:e9:c3:70:41:20:47:ea:89:27:26:48:6a:19:27:62:6b:6f:
fc:88:11:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/au1VBd0sQ3ZeKcqDriMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5
NDNjNWYwHhcNMjUxMDE5MTUwMTQ2WhcNMjUxMDIwMTUwMTQ2WjAzMTEwLwYDVQQD
Eyg1OWM3OGFkMDc0NDc0ZWQ3NmE2NDA2NmFlZjFkYTRiZDFiMDMzZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQblOngbuY2BhIKICWKZ2vRF3F/K
C0K0mhOHM8/AuP9t2YTwzjbyOV15tQqVsaTV5EriLsQkS+UZoLAaZS8qCGMY/2wf
zjQl/50ukV4JXOdSVn+KQXnkbwQ8pamCgljZbps/Fn9yiKS3zVAm5SJVw+OLW7nL
W1bWBzFsF0f474XU2gPu1GXzwYTmr+/594dXOJ9uQxuWz+F8NDC7QxdaLsPZvx+Z
hH5pl/JCorkphTyJFvnYRFMgpuOk/lM24vrlRUqhz0C2dM6IPgS7H39E3Cx9WppU
bZ0vTkJoWE0RSFP86SzhEZUdUrU2Zo9XJ9JUZohzjK0ntFe5z4LRjant8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnHitB0R07XamQGau8dpL0bAz58MB8GA1UdIwQY
MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt
MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4
LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETyFS5um
BYZEpjoVfXfzfrUzUo6uvcyLoGetCW5eSoHBgZcZlQ3NSRZRsBGNWH/oSAlv+3Rt
kawdOIim5aB7n4R8X7vmbv721uuOmk6OFt72Qwc5dJlQpadN7mg+/5V8iX3BBKje
J3LRA3NWyS4ZjLDAayLmgrQPrzRhVZwoNwXF/U6ojftry6BxRsB1xd1DjDxGdiZB
YrtptH+PwVG3Ccm8GJxGEWYrfEcAHvVGQKp3cT8I8C0oObI5VdaBpgpTttt4GQrj
VDElgkMrMTFcE4UfQk0eqsOUoUcAiMwqC6uRwmvZJcxAfS7js+nDcEEgR+qJJyZI
ahknYmtv/IgR3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client