Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: QTGCwTdO4puPTHPhwjlwvoKODX/SNZAfCXYPHg4Mz3k=
Subject key identifier: B7:AA:0F:A4:EB:AD:B6:3E:07:F3:EF:E9:3C:74:78:23:68:7E:ED:D9
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 0199FC21C634EE4860BFBA892581EF3876AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: 9LDXFkRQR69YXTp+G94XkH1LKSUR+30gKlDsX5u1Mc0=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c6:34:ee:48:60:bf:ba:89:25:81:ef:38:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=b7aa0fa4ebadb63e07f3efe93c747823687eedd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:d1:08:59:7d:91:53:d9:94:a7:14:2a:dc:
65:77:6d:d0:88:e7:fe:d3:61:67:30:2a:17:7d:1c:
30:2e:fb:a4:7d:a3:e1:a0:2c:dc:57:b5:1b:a1:5d:
a7:e7:3f:87:7f:6b:a8:8b:56:6b:24:c0:29:07:0c:
d5:31:26:8a:51:33:61:34:27:72:27:34:c9:bf:f6:
24:42:81:89:5b:e3:1e:bc:80:4a:fd:05:c7:a3:65:
43:53:d1:7d:11:84:cf:5b:aa:b7:99:d7:6f:06:2a:
ee:f6:d6:48:74:72:cd:fa:c8:89:a9:d9:cf:13:2a:
28:f9:49:e3:5a:63:74:3c:26:00:9a:b6:70:6a:74:
68:48:f8:46:07:d7:23:6f:99:d4:91:e2:15:d1:7c:
e4:40:ab:f4:fc:ba:24:12:12:c1:bc:9b:da:40:3d:
74:01:0d:fb:d3:6f:f6:3d:5d:e3:53:24:78:11:85:
36:ff:b7:27:bd:36:3a:62:bf:5a:51:bc:5b:77:49:
11:2e:dc:11:90:d0:8c:67:91:b9:75:d5:15:39:11:
49:ee:65:16:cb:d0:ff:b4:f9:bc:3d:90:40:68:79:
d4:5f:74:9e:fc:86:3a:14:3e:2c:9b:ce:94:a2:7b:
3a:3a:19:f0:1f:fc:28:44:aa:db:b0:5f:10:91:1c:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:0F:A4:EB:AD:B6:3E:07:F3:EF:E9:3C:74:78:23:68:7E:ED:D9
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:b2:27:fd:d8:17:91:96:f4:a7:d1:26:8d:0b:2f:50:ca:
e0:dd:51:f7:7e:ba:05:29:08:1c:37:19:b2:7e:45:15:90:bd:
8f:20:fc:ac:3a:5c:19:c6:e1:65:91:93:6a:85:ba:4d:26:00:
4c:cc:6e:3a:f2:6e:ea:a2:3d:0d:64:74:54:56:41:29:96:af:
3f:56:02:6d:67:e0:d6:d4:87:48:2a:bd:c1:3a:41:5b:80:a2:
0c:87:1c:80:44:01:2e:72:03:27:16:c9:de:9e:93:e1:17:2c:
8c:91:6c:71:9e:10:c9:d9:92:75:5f:8b:db:25:93:81:64:82:
93:2e:75:2b:8f:57:5c:ca:34:7f:4a:3d:0d:c2:21:77:3a:8f:
de:9c:ac:f4:6f:0a:b1:97:fd:f6:ae:67:a4:45:ea:8c:24:3a:
66:dd:8c:0a:e1:12:93:26:35:20:eb:59:c1:47:3a:89:96:67:
24:03:50:0a:7c:9b:7a:ba:0e:bd:66:dd:07:e9:86:86:96:60:
fb:99:ed:d3:59:08:f2:dd:2d:21:d8:68:fe:fd:49:05:ad:f2:
73:81:14:4c:ab:8a:cd:9d:81:ba:37:43:0e:6e:d1:11:32:c1:
f1:50:be:74:f5:91:10:06:63:94:8a:58:9d:a6:f1:51:db:40:
da:2c:14:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcY07khgv7qJJYHvOHavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzhjNGY5NTEyMDZmMWFiZDg2YTczZDFjYmJiMzk5MDdl
ODZlMWYwHhcNMjUxMDE5MTEwMTM1WhcNMjUxMDIwMTEwMTM1WjAzMTEwLwYDVQQD
EyhiN2FhMGZhNGViYWRiNjNlMDdmM2VmZTkzYzc0NzgyMzY4N2VlZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LDRCFl9kVPZlKcUKtxld23QiOf+
02FnMCoXfRwwLvukfaPhoCzcV7UboV2n5z+Hf2uoi1ZrJMApBwzVMSaKUTNhNCdy
JzTJv/YkQoGJW+MevIBK/QXHo2VDU9F9EYTPW6q3mddvBiru9tZIdHLN+siJqdnP
Eyoo+UnjWmN0PCYAmrZwanRoSPhGB9cjb5nUkeIV0XzkQKv0/LokEhLBvJvaQD10
AQ3702/2PV3jUyR4EYU2/7cnvTY6Yr9aUbxbd0kRLtwRkNCMZ5G5ddUVORFJ7mUW
y9D/tPm8PZBAaHnUX3Se/IY6FD4sm86Uons6OhnwH/woRKrbsF8QkRzUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeqD6TrrbY+B/Pv6Tx0eCNofu3ZMB8GA1UdIwQY
MBaAFFPIxPlRIG8avYanPRy7s5kH6G4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83OTMyODMtZTMwNC00MjcwLWIzMDAt
MWIxNWIyNTg3OWYyLzEvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83OTMyODMtZTMwNC00MjcwLWIzMDAtMWIxNWIyNTg3OWYy
LzEvVThqRS1WRWdieHE5aHFjOUhMdXptUWZvYmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprSyJ/3Y
F5GW9KfRJo0LL1DK4N1R9366BSkIHDcZsn5FFZC9jyD8rDpcGcbhZZGTaoW6TSYA
TMxuOvJu6qI9DWR0VFZBKZavP1YCbWfg1tSHSCq9wTpBW4CiDIccgEQBLnIDJxbJ
3p6T4RcsjJFscZ4QydmSdV+L2yWTgWSCky51K49XXMo0f0o9DcIhdzqP3pys9G8K
sZf99q5npEXqjCQ6Zt2MCuESkyY1IOtZwUc6iZZnJANQCnyberoOvWbdB+mGhpZg
+5nt01kI8t0tIdho/v1JBa3yc4EUTKuKzZ2BujdDDm7RETLB8VC+dPWREAZjlIpY
nabxUdtA2iwULQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:34 2025 by rpki-client