Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: kbxKn2cTp3D963GrlRx8USU6yAy6yt0aPdPC/Qkf94Y=
Subject key identifier: 7C:7D:34:79:FA:09:3E:41:33:C8:26:A9:D5:02:8C:C1:BE:43:EB:2C
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 0199FE474864898959AE9DCFCA9D1CD3E223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:48 +0000
Manifest this update: Sun 19 Oct 2025 21:01:48 +0000
Manifest next update: Mon 20 Oct 2025 21:01:48 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: fUCp38H8gnjw5dCUvABJgbVvDDXU4jRULSFEiVEi/wk=)
2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:48:64:89:89:59:ae:9d:cf:ca:9d:1c:d3:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Oct 19 21:01:48 2025 GMT
Not After : Oct 20 21:01:48 2025 GMT
Subject: CN=7c7d3479fa093e4133c826a9d5028cc1be43eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:12:bb:6b:a7:a9:bd:e3:67:03:12:61:47:
0b:70:2a:da:74:69:91:9a:bc:cf:e6:e8:63:5e:02:
f9:a6:5b:79:d4:e8:89:20:29:8c:ff:a4:c9:71:df:
a7:92:01:7b:e9:60:22:e5:0b:c6:e0:f1:04:4b:af:
6e:c0:fb:cc:ed:13:ab:a9:d8:c2:74:cc:36:12:0a:
d4:c7:cd:68:bc:fe:17:ea:ae:bd:eb:e7:19:0d:77:
4a:18:91:97:1f:fb:8f:93:01:95:5d:57:a5:6c:b8:
d7:a1:6e:b9:13:b2:2c:c6:6c:4e:95:d9:1c:c6:30:
8a:ea:9b:04:af:a4:1f:2a:59:7f:0e:f6:ee:cc:bc:
c4:82:12:35:82:9c:dd:a1:15:81:30:4b:03:78:e4:
2e:aa:7d:0c:b9:fb:65:de:bc:fe:f6:2a:fb:bb:b0:
38:d3:fe:8f:82:fb:69:83:84:b5:a0:3e:63:8a:4a:
98:ab:bf:08:2c:19:0a:54:6e:b2:ac:0d:c8:b9:7a:
20:79:2a:2b:09:fe:f5:c4:93:99:97:e0:70:d1:a1:
fc:b8:f9:b2:d9:83:ac:b4:ea:42:fe:fb:74:b0:68:
85:d2:13:49:39:74:6a:51:29:38:14:6f:32:6a:77:
81:c9:e2:de:86:65:a7:02:8c:75:b0:68:1e:f9:36:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:34:79:FA:09:3E:41:33:C8:26:A9:D5:02:8C:C1:BE:43:EB:2C
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:89:a2:76:f7:76:87:ea:e4:4d:35:fd:f0:48:ee:cf:3c:
38:f5:a0:fb:9a:ed:be:ad:88:0b:c0:92:57:99:a8:6e:11:a1:
e4:cd:83:65:da:fd:df:04:58:33:43:bb:1a:55:a7:a2:6c:b4:
a1:fe:31:10:e7:54:e8:3e:2e:79:69:5e:a8:76:4a:35:09:43:
38:60:7e:b4:05:5a:9a:5c:e3:40:d4:c2:f2:b6:c4:d8:dc:09:
d9:e4:c3:c6:54:0e:96:17:3c:56:e7:be:90:f9:4a:ee:23:54:
55:f5:b2:3f:50:71:59:82:d4:f0:09:84:71:2f:12:dd:73:20:
55:a1:43:57:7f:a5:09:c3:62:75:e7:4d:87:83:55:bb:13:a0:
4f:43:21:52:ef:75:7a:2e:dc:4b:47:98:2a:6e:ac:4b:62:a7:
aa:a8:37:06:87:bd:7d:47:80:22:5f:8a:38:78:bc:b5:bf:3d:
cd:86:42:64:27:7c:78:19:39:80:ec:6b:db:3e:f5:8b:e9:92:
29:16:e0:bf:00:bb:6e:9f:1d:de:e6:97:0b:50:6f:c3:0f:e3:
71:c3:2e:5c:a3:be:de:47:a0:7e:60:6c:58:ec:83:a2:b7:af:
15:df:72:f7:ae:2e:90:29:74:e0:e8:bd:bb:30:48:19:29:47:
04:ad:ca:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R0hkiYlZrp3Pyp0c0+IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjUxMDE5MjEwMTQ4WhcNMjUxMDIwMjEwMTQ4WjAzMTEwLwYDVQQD
Eyg3YzdkMzQ3OWZhMDkzZTQxMzNjODI2YTlkNTAyOGNjMWJlNDNlYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCoSu2unqb3jZwMSYUcLcCradGmR
mrzP5uhjXgL5plt51OiJICmM/6TJcd+nkgF76WAi5QvG4PEES69uwPvM7ROrqdjC
dMw2EgrUx81ovP4X6q696+cZDXdKGJGXH/uPkwGVXVelbLjXoW65E7IsxmxOldkc
xjCK6psEr6QfKll/DvbuzLzEghI1gpzdoRWBMEsDeOQuqn0Muftl3rz+9ir7u7A4
0/6Pgvtpg4S1oD5jikqYq78ILBkKVG6yrA3IuXogeSorCf71xJOZl+Bw0aH8uPmy
2YOstOpC/vt0sGiF0hNJOXRqUSk4FG8yaneByeLehmWnAox1sGge+TalcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx9NHn6CT5BM8gmqdUCjMG+Q+ssMB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJKJonb3
dofq5E01/fBI7s88OPWg+5rtvq2IC8CSV5mobhGh5M2DZdr93wRYM0O7GlWnomy0
of4xEOdU6D4ueWleqHZKNQlDOGB+tAVamlzjQNTC8rbE2NwJ2eTDxlQOlhc8Vue+
kPlK7iNUVfWyP1BxWYLU8AmEcS8S3XMgVaFDV3+lCcNidedNh4NVuxOgT0MhUu91
ei7cS0eYKm6sS2Knqqg3Boe9fUeAIl+KOHi8tb89zYZCZCd8eBk5gOxr2z71i+mS
KRbgvwC7bp8d3uaXC1Bvww/jccMuXKO+3kegfmBsWOyDorevFd9y964ukCl04Oi9
uzBIGSlHBK3Ktw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:45 2025 by rpki-client