Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: fEyAOG0EyUy3UvwebRm9wS/MgPThvS1PQ+GaDdbetn0=
Subject key identifier: 38:BD:B6:DE:71:A2:B0:51:7C:51:A5:EE:50:54:3B:38:62:2C:5F:A5
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 0199FC588CF62A32807C42692546D2F3A61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: 1pI8pzkulVuQXrSjgBHIlqkKiKv0WjTh4QzOdtlAPxE=)
2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8c:f6:2a:32:80:7c:42:69:25:46:d2:f3:a6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=38bdb6de71a2b0517c51a5ee50543b38622c5fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:c7:e9:33:dc:1c:47:d4:34:f7:8d:c9:0b:
06:63:8f:0f:6f:f7:09:4b:b0:c9:52:4d:00:6a:19:
95:e1:ff:34:d3:e7:99:60:01:6e:e4:4e:ad:d7:f1:
92:f2:56:02:f4:dc:03:eb:9b:54:16:b0:aa:ae:04:
e9:b1:11:28:89:b7:f7:ea:93:73:f5:09:f4:57:1e:
09:bb:6d:ff:0d:e5:76:8d:2f:ea:b3:02:5d:a7:a9:
8d:d5:07:97:1f:22:4f:ac:e8:33:de:45:32:1e:3a:
79:75:52:82:c8:94:de:4c:ae:a8:45:d7:47:4d:4f:
3e:f0:2c:e4:38:54:f1:5f:ce:d1:13:69:32:9f:f5:
f4:66:b6:5c:a1:38:9c:a6:75:bb:e3:d6:64:88:2e:
e7:c3:e0:78:0e:2f:f6:c0:4c:f7:e9:01:01:85:aa:
79:e0:d4:47:2a:e2:0c:0c:af:60:1b:30:1f:15:38:
38:4a:b4:5e:c6:d3:93:0a:71:6e:66:c3:ce:96:9d:
83:09:08:36:6b:61:f0:b3:a6:7a:c3:da:a4:e1:53:
5c:c5:d9:89:fd:c4:80:3f:82:2a:cc:50:9f:14:f9:
4e:9c:af:b6:c1:cf:e6:11:56:ab:c2:4e:1e:d4:8a:
5e:63:64:8e:f0:de:65:4e:c6:64:b2:3c:58:7b:ca:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:B6:DE:71:A2:B0:51:7C:51:A5:EE:50:54:3B:38:62:2C:5F:A5
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:69:a9:86:84:73:62:7a:12:de:36:16:5f:5a:9a:39:5e:8e:
aa:29:c1:03:9e:45:ca:ee:85:85:0d:51:63:29:d6:ec:ae:8f:
00:90:38:ac:ad:6a:8c:79:ef:1d:04:cc:ab:7d:10:1d:38:25:
6e:ea:a4:6f:25:21:af:a1:26:bd:b4:4b:90:39:47:1b:ac:30:
8c:cc:cd:80:5e:b0:30:d1:41:26:96:01:a9:22:7f:1c:f3:d2:
9d:ff:ff:c0:75:86:91:3b:e7:1a:c3:b5:cb:f4:c6:87:db:92:
31:56:e6:a1:41:34:5d:55:8b:0b:6a:0d:57:99:d2:07:13:2d:
46:56:96:90:c7:3c:98:ed:34:6a:25:fe:e5:16:5b:38:7d:de:
4d:97:a6:b7:cf:32:3c:1a:12:4e:2c:43:63:b6:e5:05:0e:7b:
4a:fc:af:c9:dc:2d:6a:3d:96:cf:0f:ad:31:a8:6b:d7:a2:6b:
3d:65:61:47:7c:e8:85:06:2e:38:12:68:7e:c5:ff:ab:77:a4:
ca:f6:48:eb:50:47:0f:de:e4:b2:7b:21:55:b7:04:db:5a:eb:
50:bd:e6:9e:4b:5e:ac:df:0f:3a:bf:ee:d9:93:be:15:b1:30:
bb:d9:25:18:59:d8:c4:04:31:dc:bb:90:3f:e5:07:de:81:57:
96:2d:1c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIz2KjKAfEJpJUbS86YcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDc4YjJkYzA4NmNlNTk1NWU2MmRiOTIyZjM1NGI4MmQx
M2NkNWIwHhcNMjUxMDE5MTIwMTI1WhcNMjUxMDIwMTIwMTI1WjAzMTEwLwYDVQQD
EygzOGJkYjZkZTcxYTJiMDUxN2M1MWE1ZWU1MDU0M2IzODYyMmM1ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAHH6TPcHEfUNPeNyQsGY48Pb/cJ
S7DJUk0AahmV4f800+eZYAFu5E6t1/GS8lYC9NwD65tUFrCqrgTpsREoibf36pNz
9Qn0Vx4Ju23/DeV2jS/qswJdp6mN1QeXHyJPrOgz3kUyHjp5dVKCyJTeTK6oRddH
TU8+8CzkOFTxX87RE2kyn/X0ZrZcoTicpnW749ZkiC7nw+B4Di/2wEz36QEBhap5
4NRHKuIMDK9gGzAfFTg4SrRextOTCnFuZsPOlp2DCQg2a2Hws6Z6w9qk4VNcxdmJ
/cSAP4IqzFCfFPlOnK+2wc/mEVarwk4e1IpeY2SO8N5lTsZksjxYe8onkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi9tt5xorBRfFGl7lBUOzhiLF+lMB8GA1UdIwQY
MBaAFEYHiy3Ahs5ZVeYtuSLzVLgtE81bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYt
ZTVkZDYzODJhMWM3LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYtZTVkZDYzODJhMWM3
LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3GmphoRz
YnoS3jYWX1qaOV6OqinBA55Fyu6FhQ1RYynW7K6PAJA4rK1qjHnvHQTMq30QHTgl
buqkbyUhr6EmvbRLkDlHG6wwjMzNgF6wMNFBJpYBqSJ/HPPSnf//wHWGkTvnGsO1
y/TGh9uSMVbmoUE0XVWLC2oNV5nSBxMtRlaWkMc8mO00aiX+5RZbOH3eTZemt88y
PBoSTixDY7blBQ57Svyvydwtaj2Wzw+tMahr16JrPWVhR3zohQYuOBJofsX/q3ek
yvZI61BHD97ksnshVbcE21rrUL3mnkterN8POr/u2ZO+FbEwu9klGFnYxAQx3LuQ
P+UH3oFXli0cYg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:16 2025 by rpki-client