Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 8SoxhNvg37vwfc37S1Il8UJ4BOwrfRuoZu9h3Bg/ttY=
Subject key identifier: A4:B0:8C:DC:8B:50:10:7E:65:CD:7D:B2:72:75:10:3A:19:1F:FA:4A
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 0199FB0EC18DD3E413E3F6AE412026764740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:12 +0000
Manifest this update: Sun 19 Oct 2025 06:01:12 +0000
Manifest next update: Mon 20 Oct 2025 06:01:12 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: fOVsTofdmYNYwPOQuC3zroZwZL5eiL0bvaptxdmOM2M=)
2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c1:8d:d3:e4:13:e3:f6:ae:41:20:26:76:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Oct 19 06:01:12 2025 GMT
Not After : Oct 20 06:01:12 2025 GMT
Subject: CN=a4b08cdc8b50107e65cd7db27275103a191ffa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:d4:7c:1a:f3:99:b1:69:04:be:e1:43:29:
48:cf:8f:d1:2b:22:74:0d:fa:2f:4d:68:34:15:fd:
d9:d9:7f:6b:ea:b2:7b:52:f0:83:46:72:71:2e:51:
27:ae:91:20:3e:03:ca:15:33:7e:d6:f2:88:b2:5d:
10:fb:f8:57:72:a3:05:d2:7b:a3:06:a4:99:6f:64:
d9:5b:3d:c7:ad:29:02:ca:20:de:33:a6:b5:47:52:
5d:db:29:8a:c0:02:c9:5b:56:00:ef:f6:b5:eb:c7:
2b:37:b1:d3:93:2e:ce:47:69:e1:f0:b0:72:60:03:
52:2c:18:3f:7a:62:4a:e1:bc:7f:87:16:87:9c:3a:
e2:0f:2d:85:f1:47:a7:f5:d1:ea:d8:86:55:53:78:
45:54:f4:9c:10:44:c8:c9:2f:94:5c:c1:50:68:68:
f1:e2:36:fc:23:6b:10:2e:ea:a4:9f:a8:7b:e3:47:
2b:67:24:b1:5e:3f:67:65:c4:de:f0:77:d4:d1:46:
1a:73:25:94:68:bf:e3:c2:39:b3:6d:69:47:a9:56:
3a:5c:74:e4:8f:f0:25:03:a1:c7:88:f6:78:e6:3d:
cf:91:37:fc:e6:f7:c2:17:9c:46:50:56:cf:54:dc:
1e:fa:d7:f0:72:18:42:01:51:fa:46:cb:fa:9d:c9:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:8C:DC:8B:50:10:7E:65:CD:7D:B2:72:75:10:3A:19:1F:FA:4A
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b2:e7:2c:8b:5d:90:85:73:bf:fe:2d:20:b7:d8:4a:e2:06:
ff:8e:be:28:75:d5:36:6f:30:41:aa:2e:57:f9:4d:db:7a:0f:
a6:b3:e1:86:f3:0a:8d:a7:45:d8:eb:d5:7b:18:c3:59:d7:d8:
8f:45:74:b7:2b:ec:6d:99:89:92:b7:d9:10:e1:34:0a:6d:76:
fe:43:ca:00:09:57:ba:76:8c:98:65:c7:60:91:11:57:29:e4:
09:9a:00:34:03:fb:7c:5e:36:37:1c:5a:35:d7:cd:05:c3:d1:
6e:64:6a:a8:23:d5:f0:99:e6:fc:ff:5b:35:ac:3d:f2:4f:02:
25:61:88:4c:55:3d:1b:88:a4:37:a8:74:f6:a3:54:49:9d:09:
26:ea:55:36:fd:15:2c:dd:ca:96:5d:ce:36:ae:70:59:0b:2c:
d1:45:a9:c6:a4:45:f1:2d:a8:ad:7b:c4:77:f8:40:67:00:14:
7e:0d:c2:57:f1:02:88:d7:41:b8:cc:fa:1d:b6:8b:ab:b6:7e:
ea:8c:44:f7:ea:38:23:e7:d5:60:da:8e:12:57:16:61:db:64:
62:5d:22:ec:0b:b1:e8:ce:d3:66:2d:e8:bc:42:28:05:9a:31:
1a:0f:70:3c:1e:ae:66:43:22:d5:02:66:93:44:07:4b:3c:7e:
d6:81:ec:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DsGN0+QT4/auQSAmdkdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj
ODM0YzYwHhcNMjUxMDE5MDYwMTEyWhcNMjUxMDIwMDYwMTEyWjAzMTEwLwYDVQQD
EyhhNGIwOGNkYzhiNTAxMDdlNjVjZDdkYjI3Mjc1MTAzYTE5MWZmYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DbUfBrzmbFpBL7hQylIz4/RKyJ0
DfovTWg0Ff3Z2X9r6rJ7UvCDRnJxLlEnrpEgPgPKFTN+1vKIsl0Q+/hXcqMF0nuj
BqSZb2TZWz3HrSkCyiDeM6a1R1Jd2ymKwALJW1YA7/a168crN7HTky7OR2nh8LBy
YANSLBg/emJK4bx/hxaHnDriDy2F8Uen9dHq2IZVU3hFVPScEETIyS+UXMFQaGjx
4jb8I2sQLuqkn6h740crZySxXj9nZcTe8HfU0UYacyWUaL/jwjmzbWlHqVY6XHTk
j/AlA6HHiPZ45j3PkTf85vfCF5xGUFbPVNwe+tfwchhCAVH6Rsv6ncltMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSwjNyLUBB+Zc19snJ1EDoZH/pKMB8GA1UdIwQY
MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt
MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl
LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7LnLItd
kIVzv/4tILfYSuIG/46+KHXVNm8wQaouV/lN23oPprPhhvMKjadF2OvVexjDWdfY
j0V0tyvsbZmJkrfZEOE0Cm12/kPKAAlXunaMmGXHYJERVynkCZoANAP7fF42Nxxa
NdfNBcPRbmRqqCPV8Jnm/P9bNaw98k8CJWGITFU9G4ikN6h09qNUSZ0JJupVNv0V
LN3Kll3ONq5wWQss0UWpxqRF8S2orXvEd/hAZwAUfg3CV/ECiNdBuMz6HbaLq7Z+
6oxE9+o4I+fVYNqOElcWYdtkYl0i7Aux6M7TZi3ovEIoBZoxGg9wPB6uZkMi1QJm
k0QHSzx+1oHs6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client