Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: 6jUZE6GBcEQ3nqRDr987OvB8DernIKD/sdvjEnonhmg=
Subject key identifier: 75:BB:DB:D2:34:2F:03:5C:DB:09:20:B3:A9:A9:4B:3B:D0:D4:BC:C8
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 0199FD6B1951DDF574E4A02C47FB1C4A3537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: rbxQVysditwmk/KHgJV65VWAi9KqwCg2/wgx1DP/30U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:19:51:dd:f5:74:e4:a0:2c:47:fb:1c:4a:35:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=75bbdbd2342f035cdb0920b3a9a94b3bd0d4bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:c7:a5:df:03:aa:28:89:3c:bd:8f:9b:50:
dd:4b:f6:cf:78:d4:b8:3b:69:cb:2a:97:6c:2f:7a:
b1:a4:ed:1b:4f:c5:b0:9a:fc:68:83:58:97:34:bc:
e5:46:c1:82:dc:0e:17:c7:79:0a:94:b3:fb:21:e0:
44:cf:90:71:31:fa:53:d9:b3:0c:92:69:dd:cd:e2:
d2:e9:1a:2d:4c:45:b9:ab:4b:c2:3f:e4:e8:e7:43:
d7:b4:f6:c2:2f:ae:34:28:d0:a5:41:6d:8d:ac:b7:
c8:4e:4b:28:e7:d3:3d:60:d1:24:fb:c3:ad:cd:17:
6a:7a:e0:83:a5:59:8a:d3:10:dc:6f:3d:cf:40:1d:
de:d5:43:c1:65:fd:2e:7d:73:07:e8:9b:c1:81:9c:
af:15:e0:36:2f:88:d0:02:86:cf:13:14:4f:56:ab:
89:99:b7:80:61:12:23:2a:99:e1:26:d7:5d:36:b7:
c3:72:fc:e4:df:fe:3b:f2:16:1a:23:d5:6b:1a:3e:
68:38:99:2c:cf:03:2b:6f:53:1e:60:fa:e9:89:12:
06:91:c0:8b:30:39:e8:77:d9:fb:95:1e:c1:13:92:
b3:3f:21:5a:08:0a:b6:4b:b8:92:c7:7d:04:8b:7f:
78:5b:1e:9f:9c:e3:e3:bf:cf:86:f1:8c:79:4e:a9:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:DB:D2:34:2F:03:5C:DB:09:20:B3:A9:A9:4B:3B:D0:D4:BC:C8
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:60:a3:9a:eb:51:65:65:6d:5d:a0:f3:2b:12:67:ed:82:
f0:4f:4c:66:be:3c:a7:3b:4c:5a:1a:05:33:2d:a3:0e:7e:39:
a3:b6:74:8c:0f:3c:f2:85:69:cb:53:95:5c:b4:2c:1a:46:64:
cc:aa:d7:65:cf:95:5d:67:55:c1:d1:3d:e7:cc:b0:dc:c8:9d:
d1:7a:95:c4:3e:52:59:cf:35:d9:c3:9c:4d:48:ee:f3:04:0c:
64:fd:10:36:20:f0:03:11:e3:04:74:70:69:1e:9a:e1:34:a2:
da:45:70:84:0b:eb:83:55:56:d0:31:6c:8e:f2:2f:b9:67:d4:
09:94:68:dc:89:6b:a2:90:31:de:3a:36:de:ce:43:d0:e8:61:
60:9f:c9:a7:41:e4:8c:cb:9c:f7:cd:94:3c:14:fe:87:63:d8:
35:ca:bb:b9:5e:50:18:3f:e1:25:74:db:aa:b4:be:0f:c1:ab:
56:99:e2:ff:68:db:0b:6f:f7:0d:90:34:17:04:32:62:c1:35:
44:ec:bb:e2:94:6f:34:50:12:ce:6f:ed:19:dd:c0:1b:f6:9e:
ce:78:c2:f3:4f:eb:cd:69:c0:33:49:81:74:c4:ed:5d:76:bc:
b8:f7:36:c5:43:68:28:9d:5f:f9:f6:ba:82:7f:31:fd:12:8a:
cd:4e:42:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9axlR3fV05KAsR/scSjU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4
YTFjYTkwHhcNMjUxMDE5MTcwMTE4WhcNMjUxMDIwMTcwMTE4WjAzMTEwLwYDVQQD
Eyg3NWJiZGJkMjM0MmYwMzVjZGIwOTIwYjNhOWE5NGIzYmQwZDRiY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjnHpd8DqiiJPL2Pm1DdS/bPeNS4
O2nLKpdsL3qxpO0bT8Wwmvxog1iXNLzlRsGC3A4Xx3kKlLP7IeBEz5BxMfpT2bMM
kmndzeLS6RotTEW5q0vCP+To50PXtPbCL640KNClQW2NrLfITkso59M9YNEk+8Ot
zRdqeuCDpVmK0xDcbz3PQB3e1UPBZf0ufXMH6JvBgZyvFeA2L4jQAobPExRPVquJ
mbeAYRIjKpnhJtddNrfDcvzk3/478hYaI9VrGj5oOJkszwMrb1MeYPrpiRIGkcCL
MDnod9n7lR7BE5KzPyFaCAq2S7iSx30Ei394Wx6fnOPjv8+G8Yx5TqkxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW729I0LwNc2wkgs6mpSzvQ1LzIMB8GA1UdIwQY
MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt
ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4
LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWdgo5rr
UWVlbV2g8ysSZ+2C8E9MZr48pztMWhoFMy2jDn45o7Z0jA888oVpy1OVXLQsGkZk
zKrXZc+VXWdVwdE958yw3Mid0XqVxD5SWc812cOcTUju8wQMZP0QNiDwAxHjBHRw
aR6a4TSi2kVwhAvrg1VW0DFsjvIvuWfUCZRo3IlropAx3jo23s5D0OhhYJ/Jp0Hk
jMuc982UPBT+h2PYNcq7uV5QGD/hJXTbqrS+D8GrVpni/2jbC2/3DZA0FwQyYsE1
ROy74pRvNFASzm/tGd3AG/aeznjC80/rzWnAM0mBdMTtXXa8uPc2xUNoKJ1f+fa6
gn8x/RKKzU5CPw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:24 2025 by rpki-client