Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: IxpDCoBw2H2Wljaeba6FzsrGCcFZAnZe2rCKrOSj59E=
Subject key identifier: 5C:50:42:85:B6:1C:97:A6:C9:68:4D:A2:22:8D:F1:54:10:6A:7E:8A
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 0199FD342CAEC46E7DF6FA754F17891C7B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: jAts3R5pAdc2KQF40T2qcOw3jMo1w4xwSE0vm2dPIBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2c:ae:c4:6e:7d:f6:fa:75:4f:17:89:1c:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=5c504285b61c97a6c9684da2228df154106a7e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:6a:4a:6b:dd:48:82:04:08:7a:65:0b:a6:
3c:00:64:6a:97:b8:76:46:cf:13:0a:fb:39:93:ad:
d5:98:8c:e5:4f:8b:a7:57:5c:48:97:d3:a9:02:5b:
0b:9e:6f:82:8a:1a:c9:06:61:54:26:a8:04:73:b3:
a2:15:cc:73:b4:59:5c:63:17:6a:a8:21:ee:cf:01:
2d:67:a0:0c:f8:6a:98:49:bf:3b:7b:6c:2a:98:b2:
46:d6:21:a5:e3:be:f6:50:d3:f8:7b:6a:68:e9:4b:
97:1b:f3:65:8a:35:ad:55:9b:f6:3a:79:14:69:1f:
74:d2:92:e3:4f:cf:7a:c2:d0:04:7d:f8:d7:9e:f3:
7d:f0:f6:ee:69:7e:e6:6c:8e:da:3e:85:57:6f:56:
40:68:a9:24:49:da:b7:fd:ae:7c:be:b2:00:28:b2:
94:78:f9:16:9c:75:1e:37:c9:79:d8:f2:a7:8b:6d:
0f:a2:79:b7:1a:43:6f:3d:5e:f3:81:f4:44:f9:d5:
77:9d:a9:38:ba:59:c1:ca:ae:3d:77:d3:a8:c3:61:
2c:9c:10:3e:b7:6d:62:8d:8e:b1:98:7b:6b:fe:8b:
b8:b1:54:59:b1:e3:ce:f8:66:5d:be:bf:e7:fb:a7:
64:f1:77:fd:0f:92:f7:5e:e0:bb:78:9e:00:70:e6:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:42:85:B6:1C:97:A6:C9:68:4D:A2:22:8D:F1:54:10:6A:7E:8A
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:1d:f1:48:4d:3e:8f:02:51:1f:68:5b:8e:38:98:89:51:
bc:40:9e:82:00:74:6e:64:17:71:bd:42:d9:18:cd:89:a6:43:
47:12:ca:9b:dd:8f:f6:69:09:55:90:d7:08:5f:cb:ff:6c:a6:
4c:59:02:0e:c3:37:dc:98:84:42:5c:be:ac:77:63:52:68:7b:
07:3e:93:01:73:c8:49:95:0f:fc:c3:15:7b:98:a7:e4:29:5f:
99:b8:5c:0d:ef:22:46:f1:26:73:a0:8d:57:13:be:69:e9:7f:
b9:14:df:04:f7:6b:ac:e7:1c:3a:8b:cc:13:33:b6:34:dd:ff:
85:3f:bf:95:60:9b:8b:bc:f5:5f:aa:40:c4:e2:10:49:e5:8a:
27:31:8e:68:99:93:4e:f3:7b:d8:c6:14:47:c1:7c:18:69:d8:
a4:b6:c3:42:6c:f6:20:66:cd:b9:bf:49:af:12:69:6d:66:88:
65:42:0b:cc:74:ac:45:60:dc:bb:78:a9:cd:9f:3f:37:c6:ae:
6b:b9:1d:51:7c:47:ad:c8:75:f6:59:37:7a:a3:0a:09:58:37:
3d:70:f2:e6:da:54:fd:aa:14:0e:0c:ea:0b:1c:47:39:94:ca:
de:f4:80:d4:d5:47:55:89:f6:48:83:14:33:4d:55:6c:5e:18:
b7:4c:04:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NCyuxG599vp1TxeJHHsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjUxMDE5MTYwMTE4WhcNMjUxMDIwMTYwMTE4WjAzMTEwLwYDVQQD
Eyg1YzUwNDI4NWI2MWM5N2E2Yzk2ODRkYTIyMjhkZjE1NDEwNmE3ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1chqSmvdSIIECHplC6Y8AGRql7h2
Rs8TCvs5k63VmIzlT4unV1xIl9OpAlsLnm+CihrJBmFUJqgEc7OiFcxztFlcYxdq
qCHuzwEtZ6AM+GqYSb87e2wqmLJG1iGl4772UNP4e2po6UuXG/NlijWtVZv2OnkU
aR900pLjT896wtAEffjXnvN98PbuaX7mbI7aPoVXb1ZAaKkkSdq3/a58vrIAKLKU
ePkWnHUeN8l52PKni20Ponm3GkNvPV7zgfRE+dV3nak4ulnByq49d9Oow2EsnBA+
t21ijY6xmHtr/ou4sVRZsePO+GZdvr/n+6dk8Xf9D5L3XuC7eJ4AcOYrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxQQoW2HJemyWhNoiKN8VQQan6KMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/kd8UhN
Po8CUR9oW444mIlRvECeggB0bmQXcb1C2RjNiaZDRxLKm92P9mkJVZDXCF/L/2ym
TFkCDsM33JiEQly+rHdjUmh7Bz6TAXPISZUP/MMVe5in5ClfmbhcDe8iRvEmc6CN
VxO+ael/uRTfBPdrrOccOovMEzO2NN3/hT+/lWCbi7z1X6pAxOIQSeWKJzGOaJmT
TvN72MYUR8F8GGnYpLbDQmz2IGbNub9JrxJpbWaIZUILzHSsRWDcu3ipzZ8/N8au
a7kdUXxHrch19lk3eqMKCVg3PXDy5tpU/aoUDgzqCxxHOZTK3vSA1NVHVYn2SIMU
M01VbF4Yt0wE3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:48 2025 by rpki-client