Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: FxJG1Nva+vwzuGftzLYn8hbnZ2WefnfylzKX+VQgILk=
Subject key identifier: DA:9A:4E:36:0C:24:07:71:41:5D:D4:6B:69:3C:31:FA:3F:B5:9D:65
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 0199FB463B651251C7AB17B1700FC8BC1EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: r6a8dZv6E3CLYtFzPFxHnaLZyVUIAcVPKsEsx05Z0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:3b:65:12:51:c7:ab:17:b1:70:0f:c8:bc:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=da9a4e360c240771415dd46b693c31fa3fb59d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ab:63:f8:bd:33:92:f5:ad:d6:74:f3:81:bb:
b5:5a:d8:44:6a:aa:af:0c:a4:63:04:3f:da:04:2c:
9e:ad:1b:a3:e2:35:b5:72:05:43:61:b4:85:14:d3:
53:c8:5a:15:ad:3c:d1:3e:c2:a1:ea:a8:f5:8c:0b:
7a:5d:fe:72:24:3f:80:73:75:f7:54:1c:0a:fd:80:
03:16:be:51:fd:4c:2c:62:e7:63:87:8f:13:bd:2b:
a4:62:5f:ec:44:e0:74:5d:fa:55:94:b1:29:a5:fe:
64:ed:d5:e7:6c:8a:aa:c1:ef:77:63:a1:c3:60:f2:
f5:9f:5a:82:2f:8b:f0:41:5e:ca:5a:b0:e6:76:3d:
3b:18:55:ef:53:ad:f2:c9:88:ec:0d:ca:fd:9e:3c:
14:2a:0d:b8:b6:50:24:55:02:81:e6:0b:31:45:2a:
22:07:ba:83:e7:a9:70:e9:ac:de:f9:d6:e2:83:86:
15:d9:69:34:a2:ad:e5:3c:a3:87:64:57:dd:a5:02:
8b:75:85:00:d6:77:a8:c3:eb:71:8d:f9:14:24:ad:
f2:23:d2:a2:c2:60:c1:a0:59:8e:c4:77:33:b2:20:
1b:d2:f3:a8:5d:2b:0a:cb:ab:ec:5a:91:5c:9c:92:
ed:ae:03:23:39:69:86:f6:22:c3:0a:d2:dc:12:1c:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:4E:36:0C:24:07:71:41:5D:D4:6B:69:3C:31:FA:3F:B5:9D:65
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:37:7a:bb:0a:f6:19:07:24:d0:b0:25:33:6d:27:58:51:38:
2f:77:eb:20:0b:84:3a:61:72:79:4d:c8:e4:fc:a0:68:c1:34:
91:45:a5:04:bd:eb:2d:b5:32:b3:4d:1c:2e:f4:5a:40:b9:25:
8c:d3:f8:0e:9b:48:9a:a6:0f:aa:47:d6:81:f9:0c:d4:18:9a:
3e:c0:4d:96:b0:05:7f:14:d5:ad:9c:4f:36:0b:6c:8d:21:20:
c1:15:e4:49:34:32:ba:29:2e:37:31:2e:7e:a6:17:e2:b5:96:
e1:f2:e3:82:61:40:0e:9d:e3:4e:e3:3d:c8:bd:40:d5:a7:09:
f2:15:8c:03:43:13:e4:9f:7e:1e:28:1c:55:fc:c2:80:c7:97:
09:16:83:76:03:44:90:0c:a2:f5:9d:04:26:4a:29:cc:9a:d1:
cd:de:32:3d:00:13:60:b1:e3:6c:49:b9:8f:d7:b7:d0:0c:5f:
7a:b3:1f:c9:d2:73:a3:8b:25:d9:17:c8:69:f9:b3:c0:5c:3f:
5e:c6:29:1d:dc:29:9e:8d:93:e2:12:91:51:4b:1f:77:48:c9:
b9:27:e9:11:58:78:70:8e:5e:98:f4:c5:de:05:6f:b2:d9:c4:
d7:44:21:db:d4:c1:fa:e1:0c:40:08:ca:32:6f:f5:ba:33:f9:
d4:e6:9a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RjtlElHHqxexcA/IvB6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUxMDE5MDcwMTQ3WhcNMjUxMDIwMDcwMTQ3WjAzMTEwLwYDVQQD
EyhkYTlhNGUzNjBjMjQwNzcxNDE1ZGQ0NmI2OTNjMzFmYTNmYjU5ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ktj+L0zkvWt1nTzgbu1WthEaqqv
DKRjBD/aBCyerRuj4jW1cgVDYbSFFNNTyFoVrTzRPsKh6qj1jAt6Xf5yJD+Ac3X3
VBwK/YADFr5R/UwsYudjh48TvSukYl/sROB0XfpVlLEppf5k7dXnbIqqwe93Y6HD
YPL1n1qCL4vwQV7KWrDmdj07GFXvU63yyYjsDcr9njwUKg24tlAkVQKB5gsxRSoi
B7qD56lw6aze+dbig4YV2Wk0oq3lPKOHZFfdpQKLdYUA1neow+txjfkUJK3yI9Ki
wmDBoFmOxHczsiAb0vOoXSsKy6vsWpFcnJLtrgMjOWmG9iLDCtLcEhzqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqaTjYMJAdxQV3Ua2k8Mfo/tZ1lMB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjd6uwr2
GQck0LAlM20nWFE4L3frIAuEOmFyeU3I5PygaME0kUWlBL3rLbUys00cLvRaQLkl
jNP4DptImqYPqkfWgfkM1BiaPsBNlrAFfxTVrZxPNgtsjSEgwRXkSTQyuikuNzEu
fqYX4rWW4fLjgmFADp3jTuM9yL1A1acJ8hWMA0MT5J9+HigcVfzCgMeXCRaDdgNE
kAyi9Z0EJkopzJrRzd4yPQATYLHjbEm5j9e30AxferMfydJzo4sl2RfIafmzwFw/
XsYpHdwpno2T4hKRUUsfd0jJuSfpEVh4cI5emPTF3gVvstnE10Qh29TB+uEMQAjK
Mm/1ujP51Oaajw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:18 2025 by rpki-client