Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: 1BC4AbpnGiRiFuICDCijkpQrHFshEBq7rQXV9xBkqbw=
Subject key identifier: 41:9D:ED:E6:68:93:6C:AC:8B:88:3D:7F:93:79:19:56:FF:0B:EA:30
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 0199FC8F2BE4C247F148E60EE2D5FEF12680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 1658
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: zSGIFol8PzJmNN1B6xxadSCJ/nJVCzCEvmtRdKo1Lu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2b:e4:c2:47:f1:48:e6:0e:e2:d5:fe:f1:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=419dede668936cac8b883d7f93791956ff0bea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:66:40:71:01:9b:10:0a:9d:22:28:e9:85:
14:ca:1c:79:db:af:64:09:ee:d9:0b:b8:00:a8:b2:
f1:ca:28:80:13:f6:f2:19:8e:b2:2a:2b:23:5c:26:
4b:ef:d2:a9:12:31:ed:94:7f:47:3f:f4:59:88:b5:
0b:af:83:68:08:42:8a:cc:88:0e:d3:cc:3b:45:67:
84:84:87:fe:46:7f:ac:ae:cd:06:6a:ad:73:e5:65:
f6:d5:66:1d:96:e0:0d:bb:d2:7b:b5:fb:8c:32:00:
78:0a:ef:be:6b:32:94:73:d6:9f:59:b5:72:3a:cc:
e9:7d:04:66:c3:c7:40:16:32:5d:48:2c:71:82:d7:
4a:62:64:52:1c:63:48:e9:79:55:21:aa:63:12:9d:
a3:a6:be:71:59:44:53:57:2c:7d:8d:67:69:ef:38:
76:1d:23:ce:c1:5c:7e:ce:d0:5c:2e:4d:2a:25:19:
94:7d:90:45:c6:58:ba:fc:b1:b8:98:b0:39:0d:2a:
c3:89:a3:47:af:a2:94:3b:cc:20:d8:f5:e7:23:5e:
17:d7:d7:74:3d:dd:76:37:54:51:81:8b:e4:9d:2f:
9f:fb:bf:62:30:0e:39:10:8c:11:c8:99:5f:2e:81:
59:3e:ee:d0:bb:c8:b3:3c:d3:6e:fa:f5:af:37:8a:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:ED:E6:68:93:6C:AC:8B:88:3D:7F:93:79:19:56:FF:0B:EA:30
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:14:72:eb:9b:23:98:7c:90:d6:e4:e2:f7:9b:68:4c:01:
c1:ee:72:68:83:3c:9e:c6:1b:de:53:ef:b6:e2:37:d9:f5:a1:
1e:8d:1a:fd:5e:29:45:dc:8e:13:c1:ad:09:33:6e:70:01:85:
cd:e5:df:dc:8b:3c:d8:67:37:3c:d7:9a:a4:aa:a5:52:62:24:
c4:1c:ff:a4:75:f2:88:3d:ff:ef:c4:d9:df:9b:fe:55:9d:96:
ad:53:a9:22:4e:09:d8:05:5c:a4:05:3a:20:70:83:93:ea:c9:
4e:07:a9:27:79:df:20:92:3e:27:49:ec:a0:f8:4d:23:94:bc:
9d:aa:67:68:00:91:1f:65:86:4f:24:8d:9c:d3:a8:91:3d:66:
f3:61:f5:a0:26:8b:b6:0b:b5:9b:a9:f6:bf:6c:d6:f6:74:27:
fa:46:d4:24:21:12:95:03:78:93:38:17:de:65:16:17:bf:4d:
88:59:08:43:69:fe:f0:65:43:8f:af:d5:f3:0e:ef:b8:d3:49:
ae:35:97:3f:91:16:79:9d:08:8b:74:93:9d:36:cf:16:69:93:
0a:12:d7:17:5e:4a:59:5a:6e:b0:0f:aa:c0:e6:e5:42:bc:2d:
e6:27:0b:d5:bf:c9:4b:61:c5:a5:92:c7:02:a4:80:54:58:5a:
47:eb:b4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyvkwkfxSOYO4tX+8SaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWVmY2E4NmRlYTcwZDNlZTkwMTgxNjc4YzhlYjMwZTY5
MTZkMWQwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg0MTlkZWRlNjY4OTM2Y2FjOGI4ODNkN2Y5Mzc5MTk1NmZmMGJlYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxShmQHEBmxAKnSIo6YUUyhx5269k
Ce7ZC7gAqLLxyiiAE/byGY6yKisjXCZL79KpEjHtlH9HP/RZiLULr4NoCEKKzIgO
08w7RWeEhIf+Rn+srs0Gaq1z5WX21WYdluANu9J7tfuMMgB4Cu++azKUc9afWbVy
OszpfQRmw8dAFjJdSCxxgtdKYmRSHGNI6XlVIapjEp2jpr5xWURTVyx9jWdp7zh2
HSPOwVx+ztBcLk0qJRmUfZBFxli6/LG4mLA5DSrDiaNHr6KUO8wg2PXnI14X19d0
Pd12N1RRgYvknS+f+79iMA45EIwRyJlfLoFZPu7Qu8izPNNu+vWvN4rwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGd7eZok2ysi4g9f5N5GVb/C+owMB8GA1UdIwQY
MBaAFLqe/Kht6nDT7pAYFnjI6zDmkW0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgt
MTdkMzFkZWU4ZTEyLzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgtMTdkMzFkZWU4ZTEy
LzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy4Ucuub
I5h8kNbk4vebaEwBwe5yaIM8nsYb3lPvtuI32fWhHo0a/V4pRdyOE8GtCTNucAGF
zeXf3Is82Gc3PNeapKqlUmIkxBz/pHXyiD3/78TZ35v+VZ2WrVOpIk4J2AVcpAU6
IHCDk+rJTgepJ3nfIJI+J0nsoPhNI5S8napnaACRH2WGTySNnNOokT1m82H1oCaL
tgu1m6n2v2zW9nQn+kbUJCESlQN4kzgX3mUWF79NiFkIQ2n+8GVDj6/V8w7vuNNJ
rjWXP5EWeZ0Ii3STnTbPFmmTChLXF15KWVpusA+qwOblQrwt5icL1b/JS2HFpZLH
AqSAVFhaR+u0Hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:48 2025 by rpki-client