Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: 4SBx3fBLS68XbFmbycM7/MvKzPm1AWYL3L+Zi0fKHUE=
Subject key identifier: 73:21:E1:D8:47:B8:06:11:CA:27:E3:59:88:57:AA:45:A9:D2:5E:57
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 0199FD6B32F93E9E165D784D721DD36779F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:25 +0000
Manifest this update: Sun 19 Oct 2025 17:01:25 +0000
Manifest next update: Mon 20 Oct 2025 17:01:25 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: P5dgcCFi4s92JG6EoVjkbWktVWqKVPSoTEfw1a23yis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:32:f9:3e:9e:16:5d:78:4d:72:1d:d3:67:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Oct 19 17:01:25 2025 GMT
Not After : Oct 20 17:01:25 2025 GMT
Subject: CN=7321e1d847b80611ca27e3598857aa45a9d25e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:85:9c:48:b7:86:77:31:2a:72:d1:f9:6e:
a8:d5:8a:32:99:29:59:ca:d4:ab:4f:86:7f:19:08:
f7:21:25:4f:ec:7e:20:eb:d5:5f:1a:af:50:4c:2d:
7e:be:a3:6b:0e:e9:1e:27:39:6e:82:8f:61:77:a6:
e4:c1:90:ed:af:7c:7f:e1:cc:26:3f:e3:16:9e:75:
4c:e8:24:fe:e1:67:57:e7:bd:45:8f:b7:9c:03:9a:
55:cd:99:7f:c1:d7:0f:e2:d7:d8:17:26:30:18:e9:
36:d3:ae:c6:56:0d:f1:59:7c:46:2e:65:64:98:99:
d4:57:35:16:c5:bb:0b:95:62:3a:74:6f:29:11:fe:
9e:72:06:2f:2f:d9:db:61:3a:23:49:c6:b9:c3:bb:
6b:22:31:e3:42:13:c7:e8:fc:bd:e2:2a:70:17:5f:
2e:31:dc:d9:4f:a6:5b:89:e5:ec:e1:03:a2:78:83:
97:43:9a:72:f1:73:e7:c1:d6:47:ff:31:e5:b3:db:
4e:4b:5e:5b:8f:a2:4c:4a:58:df:53:98:e7:d4:75:
95:fa:90:e7:7d:62:75:1c:af:e8:0a:1c:d9:78:28:
6b:1a:0b:16:f7:4f:14:d5:58:77:16:32:c0:57:bc:
f8:a2:15:9b:5c:74:85:e7:94:64:c6:a2:09:1d:96:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:E1:D8:47:B8:06:11:CA:27:E3:59:88:57:AA:45:A9:D2:5E:57
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fa:19:93:f2:14:db:56:68:76:f3:d4:8f:5f:6f:fa:66:4d:
39:9b:f9:9b:e7:e3:16:4a:14:e4:f3:8f:23:71:0a:3f:b4:3e:
05:f5:35:6e:21:55:20:39:88:60:bf:0f:a2:2a:49:51:39:d3:
12:7d:e0:6e:5d:d7:6d:f3:00:8a:e6:a1:16:18:d5:0e:11:23:
27:29:c8:05:f1:6d:49:5d:5a:d3:52:cd:b2:71:e7:bf:e4:29:
18:ef:aa:2f:1c:4d:f6:35:ab:29:b6:34:86:7f:2a:e2:bb:57:
ba:cc:5f:bc:08:93:20:4c:88:f5:46:15:2a:a0:0d:41:3f:05:
cc:a9:75:ba:7c:58:cc:ea:f7:fe:b5:cd:d6:cb:0e:2f:b1:bb:
3a:c3:b0:fb:7f:8d:a7:4e:61:a9:49:8e:0d:25:f0:a2:10:d4:
a4:cf:28:0d:a1:3b:56:e8:ee:69:ce:e3:3c:78:7d:15:e2:5a:
8a:73:32:7f:30:5c:30:a7:33:1c:04:67:6a:c5:33:da:28:78:
6f:f9:8c:92:eb:3a:37:3d:3e:ff:6a:0a:d2:f1:08:7a:8a:dc:
42:80:0e:03:78:c9:37:0a:e1:09:50:de:b8:d7:df:06:01:27:
2e:28:ec:99:5b:af:43:fe:04:be:26:7a:3b:23:59:37:c2:68:
1f:d5:14:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9azL5Pp4WXXhNch3TZ3nxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzQ4MTQxZmM0NmRjMDE4NzA4N2NiYzg2NTU2ZTlhNDQ5
ZWUxZTcwHhcNMjUxMDE5MTcwMTI1WhcNMjUxMDIwMTcwMTI1WjAzMTEwLwYDVQQD
Eyg3MzIxZTFkODQ3YjgwNjExY2EyN2UzNTk4ODU3YWE0NWE5ZDI1ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwICFnEi3hncxKnLR+W6o1YoymSlZ
ytSrT4Z/GQj3ISVP7H4g69VfGq9QTC1+vqNrDukeJzlugo9hd6bkwZDtr3x/4cwm
P+MWnnVM6CT+4WdX571Fj7ecA5pVzZl/wdcP4tfYFyYwGOk2067GVg3xWXxGLmVk
mJnUVzUWxbsLlWI6dG8pEf6ecgYvL9nbYTojSca5w7trIjHjQhPH6Py94ipwF18u
MdzZT6ZbieXs4QOieIOXQ5py8XPnwdZH/zHls9tOS15bj6JMSljfU5jn1HWV+pDn
fWJ1HK/oChzZeChrGgsW908U1Vh3FjLAV7z4ohWbXHSF55RkxqIJHZaCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMh4dhHuAYRyifjWYhXqkWp0l5XMB8GA1UdIwQY
MBaAFEQ0gUH8RtwBhwh8vIZVbppEnuHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmIt
NDVhMTEyYTFlN2FjLzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmItNDVhMTEyYTFlN2Fj
LzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPoZk/IU
21ZodvPUj19v+mZNOZv5m+fjFkoU5POPI3EKP7Q+BfU1biFVIDmIYL8PoipJUTnT
En3gbl3XbfMAiuahFhjVDhEjJynIBfFtSV1a01LNsnHnv+QpGO+qLxxN9jWrKbY0
hn8q4rtXusxfvAiTIEyI9UYVKqANQT8FzKl1unxYzOr3/rXN1ssOL7G7OsOw+3+N
p05hqUmODSXwohDUpM8oDaE7Vujuac7jPHh9FeJainMyfzBcMKczHARnasUz2ih4
b/mMkus6Nz0+/2oK0vEIeorcQoAOA3jJNwrhCVDeuNffBgEnLijsmVuvQ/4EviZ6
OyNZN8JoH9UUoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:18 2025 by rpki-client