Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: dlDDmXfPEmABynMRoGtjR5btM11Off+iVHrBDLCls1U=
Subject key identifier: D6:B5:98:96:20:DE:05:9A:8F:66:EA:4C:84:1B:D2:17:DC:C0:8A:01
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 0199FBEAD6BC11FF49720031D0CD57F39E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: jylClXNnUmMFAueqCfAPIEv3rFx2ulXHbZPrN4wowHM=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:bc:11:ff:49:72:00:31:d0:cd:57:f3:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=d6b5989620de059a8f66ea4c841bd217dcc08a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:5c:28:05:8c:16:5b:e2:a5:6a:9b:39:13:
27:52:44:f5:26:ff:fd:d3:14:58:8a:ae:fa:be:b0:
16:81:79:43:76:b2:85:4e:42:e8:5b:85:c1:d0:c0:
ea:7d:35:7b:cd:06:eb:a3:79:6b:e7:11:62:81:6d:
3e:a8:b9:8d:1a:70:5b:c0:a7:e3:a9:e7:11:42:90:
6f:19:5d:51:8f:61:57:1d:89:13:04:5b:0f:07:7f:
47:ea:69:a5:29:00:a1:c6:4d:ed:af:30:3f:33:ae:
d0:07:80:da:b8:f5:aa:a3:18:75:ef:35:27:df:70:
6c:f9:cd:fd:19:19:d9:8a:34:15:6e:61:bd:86:06:
eb:2a:d1:61:b9:06:dd:e7:4e:79:69:ef:b5:ed:26:
89:65:b8:d4:24:db:03:18:d3:e7:5a:e2:60:c0:2a:
32:e8:b2:4f:78:d7:b5:20:f0:11:56:c6:8d:67:89:
60:50:45:f2:24:ac:1b:89:54:fb:c5:db:3e:29:47:
1e:62:d2:52:97:56:73:7b:e7:4c:36:b1:8d:2a:64:
14:f1:8d:73:fc:72:ad:73:86:63:9e:93:c2:61:de:
6e:c2:b3:29:e4:e3:49:7f:60:d5:11:39:a9:87:45:
4c:23:77:b6:b6:d2:e6:54:2e:18:1b:ea:15:78:cf:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:98:96:20:DE:05:9A:8F:66:EA:4C:84:1B:D2:17:DC:C0:8A:01
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ec:8a:24:a8:67:97:a2:a9:df:c1:cd:0e:6b:d2:da:6b:a5:
9e:cb:09:63:22:bc:fc:50:5b:b5:6a:eb:90:30:cb:6d:8c:3e:
68:69:a5:ee:be:04:fd:6b:91:3f:d3:1b:81:2d:8f:11:f3:c4:
cf:52:64:8c:4b:a2:ab:48:c4:fb:f0:a1:fc:4c:4b:eb:08:d5:
ee:d7:7e:2d:4c:d0:ef:0d:1a:9b:8a:3a:21:d5:c7:fd:6a:d8:
bf:17:59:0b:40:7a:96:94:87:4d:8b:24:ea:24:8d:38:ea:23:
2d:9a:6b:eb:6d:a6:c0:7a:15:5b:ff:87:18:36:3a:cd:77:f0:
5a:d4:52:6d:a0:9d:3b:6c:7c:81:8f:7f:0a:25:88:c2:4a:cc:
0b:90:32:1e:e2:cf:d9:c4:92:da:6b:f6:c2:e1:a8:1d:8b:51:
cb:c4:22:1c:e5:e7:e0:cd:dc:9f:c0:c0:fa:39:9e:0a:bd:04:
b6:3d:e7:cf:d5:72:9b:df:7d:81:2b:17:bf:2e:ef:42:13:f1:
dd:ec:e4:3e:75:92:1e:30:dc:6f:37:7d:62:99:cb:8d:eb:21:
2c:bf:33:55:27:0b:c0:ff:19:21:ad:7f:8f:b4:a4:ed:f4:f7:
cb:18:49:65:b4:33:b1:b7:fa:79:62:b0:f8:c0:35:b9:59:9e:
4a:dc:14:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ta8Ef9JcgAx0M1X855gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0
NzNlNDYwHhcNMjUxMDE5MTAwMTM1WhcNMjUxMDIwMTAwMTM1WjAzMTEwLwYDVQQD
EyhkNmI1OTg5NjIwZGUwNTlhOGY2NmVhNGM4NDFiZDIxN2RjYzA4YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYZcKAWMFlvipWqbORMnUkT1Jv/9
0xRYiq76vrAWgXlDdrKFTkLoW4XB0MDqfTV7zQbro3lr5xFigW0+qLmNGnBbwKfj
qecRQpBvGV1Rj2FXHYkTBFsPB39H6mmlKQChxk3trzA/M67QB4DauPWqoxh17zUn
33Bs+c39GRnZijQVbmG9hgbrKtFhuQbd5055ae+17SaJZbjUJNsDGNPnWuJgwCoy
6LJPeNe1IPARVsaNZ4lgUEXyJKwbiVT7xds+KUceYtJSl1Zze+dMNrGNKmQU8Y1z
/HKtc4ZjnpPCYd5uwrMp5ONJf2DVETmph0VMI3e2ttLmVC4YG+oVeM9WWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa1mJYg3gWaj2bqTIQb0hfcwIoBMB8GA1UdIwQY
MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et
OWE3ZTE0NjQ4NjJhLzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh
LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeyKJKhn
l6Kp38HNDmvS2mulnssJYyK8/FBbtWrrkDDLbYw+aGml7r4E/WuRP9MbgS2PEfPE
z1JkjEuiq0jE+/Ch/ExL6wjV7td+LUzQ7w0am4o6IdXH/WrYvxdZC0B6lpSHTYsk
6iSNOOojLZpr622mwHoVW/+HGDY6zXfwWtRSbaCdO2x8gY9/CiWIwkrMC5AyHuLP
2cSS2mv2wuGoHYtRy8QiHOXn4M3cn8DA+jmeCr0Etj3nz9Vym999gSsXvy7vQhPx
3ezkPnWSHjDcbzd9YpnLjeshLL8zVScLwP8ZIa1/j7Sk7fT3yxhJZbQzsbf6eWKw
+MA1uVmeStwUIw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:47 2025 by rpki-client