Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: a16xTS8r9w4eXgdo7n3ezivsY0TBETjcZ24+n3Q52lg=
Subject key identifier: 86:5A:37:BD:CC:7A:A8:60:A5:71:46:A5:44:EA:40:8C:20:17:A7:76
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0199FFC7E6DE38EA6E10AF1BE993D216CE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 16F7
Signing time: Mon 20 Oct 2025 04:01:54 +0000
Manifest this update: Mon 20 Oct 2025 04:01:54 +0000
Manifest next update: Tue 21 Oct 2025 04:01:54 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: yxbPl+CtorpGZLVzJiReyVS6yJ0fkPtzOkThPOY160Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e6:de:38:ea:6e:10:af:1b:e9:93:d2:16:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Oct 20 04:01:54 2025 GMT
Not After : Oct 21 04:01:54 2025 GMT
Subject: CN=865a37bdcc7aa860a57146a544ea408c2017a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:ce:3c:45:82:70:e2:91:fd:a0:cc:c9:f9:
b3:59:cf:a2:58:05:d4:c0:f1:36:49:a4:f6:d9:87:
49:ca:73:5e:37:15:30:b4:5d:c9:c1:42:65:6d:6c:
3d:a1:f9:b1:b2:32:67:46:42:a6:9e:17:d5:fb:72:
c1:3a:9e:34:aa:37:a2:47:4e:3e:3a:70:05:64:a2:
44:5e:1d:b9:fc:4f:3a:37:20:55:5a:a9:0e:e6:c0:
66:cd:6e:bc:fa:08:35:72:97:dd:af:33:b6:a2:cb:
0c:99:48:6f:0f:01:e0:95:10:20:c8:16:38:0f:bf:
6c:f9:52:6d:f0:b7:f0:7f:52:8b:d9:1d:a9:4d:64:
f4:3a:29:9b:dd:79:d6:d1:27:5f:1f:31:a2:48:67:
84:a6:82:a0:1d:01:b3:a6:d3:d1:ae:3e:8d:15:21:
16:b6:c5:3a:f4:2a:4c:b9:86:b4:85:a5:59:7a:e1:
5a:9d:cf:23:cc:9d:f9:0c:cc:02:3e:de:35:ad:b4:
52:4b:ee:ae:a9:ec:9a:ba:77:98:a9:dc:34:b6:71:
c4:c0:fe:46:72:cc:05:04:aa:8c:6d:49:f7:7d:e4:
46:ca:0b:5c:6c:a9:f7:f1:d1:46:5c:ae:24:eb:0b:
ed:61:13:f4:5d:14:0b:98:88:53:2a:1e:10:9b:84:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:37:BD:CC:7A:A8:60:A5:71:46:A5:44:EA:40:8C:20:17:A7:76
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7e:83:6c:1f:0b:a1:8e:13:4e:cc:fd:c8:ff:86:e6:2f:17:
f7:fa:04:fc:ee:a4:43:f9:75:77:d7:69:7d:9e:28:e2:60:bd:
93:ab:ba:12:bf:bd:43:61:f6:99:6e:d9:b9:14:47:96:b6:ae:
03:96:97:aa:fb:95:a3:29:79:de:e0:d5:07:8b:d4:dd:05:97:
b5:12:76:0e:33:db:47:9b:35:0c:79:14:23:20:a9:fa:a7:8d:
a5:d7:32:ce:21:3e:aa:64:33:b5:9d:6f:dc:5f:be:44:a0:0b:
10:82:6c:8c:55:02:2c:bc:27:db:a7:6f:84:43:12:3e:ce:eb:
cd:cd:4a:bd:f8:5d:6a:84:6d:36:19:58:39:d8:d8:d1:72:f6:
31:c2:43:36:2e:84:c7:39:d4:22:8c:d1:2c:b1:c3:b9:77:d9:
c1:ae:85:e5:88:44:14:e1:46:ee:91:58:54:da:cb:e6:73:f5:
f7:fd:59:8c:33:cc:ca:c2:4c:3b:32:00:37:e0:f0:8c:93:c2:
a4:62:f8:f3:2f:6a:be:ce:45:4f:eb:04:e3:30:1a:01:51:72:
6b:0c:8c:c3:97:f4:01:bd:93:2e:fc:c1:da:54:3a:4e:e3:16:
86:d8:31:b5:c3:29:0d:77:7e:77:69:03:0d:1e:d3:c8:c9:dd:
cf:ee:70:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x+beOOpuEK8b6ZPSFs6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjUxMDIwMDQwMTU0WhcNMjUxMDIxMDQwMTU0WjAzMTEwLwYDVQQD
Eyg4NjVhMzdiZGNjN2FhODYwYTU3MTQ2YTU0NGVhNDA4YzIwMTdhNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEDOPEWCcOKR/aDMyfmzWc+iWAXU
wPE2SaT22YdJynNeNxUwtF3JwUJlbWw9ofmxsjJnRkKmnhfV+3LBOp40qjeiR04+
OnAFZKJEXh25/E86NyBVWqkO5sBmzW68+gg1cpfdrzO2ossMmUhvDwHglRAgyBY4
D79s+VJt8Lfwf1KL2R2pTWT0Oimb3XnW0SdfHzGiSGeEpoKgHQGzptPRrj6NFSEW
tsU69CpMuYa0haVZeuFanc8jzJ35DMwCPt41rbRSS+6uqeyauneYqdw0tnHEwP5G
cswFBKqMbUn3feRGygtcbKn38dFGXK4k6wvtYRP0XRQLmIhTKh4Qm4REBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZaN73MeqhgpXFGpUTqQIwgF6d2MB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOn6DbB8L
oY4TTsz9yP+G5i8X9/oE/O6kQ/l1d9dpfZ4o4mC9k6u6Er+9Q2H2mW7ZuRRHlrau
A5aXqvuVoyl53uDVB4vU3QWXtRJ2DjPbR5s1DHkUIyCp+qeNpdcyziE+qmQztZ1v
3F++RKALEIJsjFUCLLwn26dvhEMSPs7rzc1KvfhdaoRtNhlYOdjY0XL2McJDNi6E
xznUIozRLLHDuXfZwa6F5YhEFOFG7pFYVNrL5nP19/1ZjDPMysJMOzIAN+DwjJPC
pGL48y9qvs5FT+sE4zAaAVFyawyMw5f0Ab2TLvzB2lQ6TuMWhtgxtcMpDXd+d2kD
DR7TyMndz+5w4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:51:08 2025 by rpki-client