Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: DlaDwO1UlqLRd+odk69paxEphwRnOx9Pt5GjmF45ch8=
Subject key identifier: EC:EC:F2:A3:C5:16:83:72:76:78:C5:7B:B5:DA:3A:45:3B:D5:7A:F5
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 019A01115CBDC9154CAEB092054CDF178A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:46 +0000
Manifest this update: Mon 20 Oct 2025 10:01:46 +0000
Manifest next update: Tue 21 Oct 2025 10:01:46 +0000
Files and hashes: 1: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (hash: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=)
2: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: wemt1ECVZ9Bj+aUm+cY2LbwT+4vJ8cMhvsSyfDghrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:5c:bd:c9:15:4c:ae:b0:92:05:4c:df:17:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Oct 20 10:01:46 2025 GMT
Not After : Oct 21 10:01:46 2025 GMT
Subject: CN=ececf2a3c51683727678c57bb5da3a453bd57af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:11:ce:5d:0c:9a:b9:68:7d:67:ff:03:c8:
73:6d:e0:0a:d9:33:42:1d:ec:36:ec:0d:46:4b:77:
41:d0:af:ec:a6:a5:a9:d2:9e:26:64:3d:2b:5f:ac:
18:02:e6:0c:72:cc:69:3a:40:28:4c:9c:03:fe:9c:
b4:60:14:01:fa:38:ca:d1:c3:07:08:05:22:6d:95:
9f:f6:36:73:48:cd:d4:55:07:7a:d5:60:93:68:ea:
47:1d:33:bb:3b:8a:5c:c8:82:77:b8:50:d7:f6:07:
57:e4:26:35:8a:b4:1e:6d:ee:d4:28:82:13:41:b8:
9b:9c:09:81:9c:0f:ea:d6:aa:e2:cd:fb:cf:14:06:
25:bb:42:c0:69:32:36:10:84:e2:b6:72:64:7b:64:
60:65:e8:d6:bb:e3:4f:b2:fb:49:e5:18:62:6a:15:
0d:33:e7:d7:68:c6:77:d3:82:e9:45:bb:6a:e1:11:
e9:bf:6e:9a:e8:0b:84:f8:dc:9c:00:5e:0c:08:89:
d9:51:7d:69:6b:7e:6f:03:e1:64:01:12:42:cb:a5:
0d:37:db:1a:d8:fa:bc:fc:f4:b1:f1:75:28:fe:c1:
28:ef:d5:21:c2:3f:70:57:82:61:a6:64:3b:16:46:
8c:37:70:11:e5:89:11:77:c0:90:1c:7c:06:bd:22:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EC:F2:A3:C5:16:83:72:76:78:C5:7B:B5:DA:3A:45:3B:D5:7A:F5
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:23:2c:d1:74:d8:da:e3:cf:0f:a4:b7:4f:92:b1:c1:b8:c4:
fe:94:88:42:c3:98:1b:72:a7:01:f2:50:d4:67:34:44:15:0f:
bd:fe:9d:64:78:c3:7b:91:19:0f:08:26:fa:fa:67:57:8f:d5:
f9:d9:e0:fb:3f:1a:61:55:ca:4c:4a:03:22:d6:0d:59:2b:e0:
72:c5:b2:43:92:e9:b3:22:10:81:8c:e1:56:34:a3:b6:0d:0f:
d8:2b:3a:61:38:9b:e3:a1:ee:c7:6b:ad:0c:b3:bb:ef:92:b0:
1a:f9:1e:0c:fc:29:8f:cc:5c:bd:0d:8e:9a:df:d4:99:58:d9:
23:b2:ec:51:02:09:ff:96:49:a4:30:3b:b1:80:d1:74:e0:33:
36:1b:86:51:24:78:c6:96:fd:9f:1e:b0:a4:30:25:fe:5f:ff:
65:cc:2a:33:46:7b:2a:c6:9e:51:96:a6:46:6a:93:1b:ea:d6:
5a:14:0e:11:fd:cd:28:39:a6:d2:b6:16:cf:31:f7:dd:be:da:
85:89:ce:31:c3:92:88:6e:93:66:00:30:f3:a0:cd:ad:05:e3:
82:6d:29:32:c4:e9:e2:98:bb:57:d4:1c:4e:ee:1f:3c:70:c4:
0b:64:86:3a:5b:ee:31:ed:5b:49:17:94:27:db:f6:5e:4b:17:
27:69:4d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEVy9yRVMrrCSBUzfF4pAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl
NjhkNDMwHhcNMjUxMDIwMTAwMTQ2WhcNMjUxMDIxMTAwMTQ2WjAzMTEwLwYDVQQD
EyhlY2VjZjJhM2M1MTY4MzcyNzY3OGM1N2JiNWRhM2E0NTNiZDU3YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgsRzl0MmrlofWf/A8hzbeAK2TNC
Hew27A1GS3dB0K/spqWp0p4mZD0rX6wYAuYMcsxpOkAoTJwD/py0YBQB+jjK0cMH
CAUibZWf9jZzSM3UVQd61WCTaOpHHTO7O4pcyIJ3uFDX9gdX5CY1irQebe7UKIIT
QbibnAmBnA/q1qrizfvPFAYlu0LAaTI2EITitnJke2RgZejWu+NPsvtJ5RhiahUN
M+fXaMZ304LpRbtq4RHpv26a6AuE+NycAF4MCInZUX1pa35vA+FkARJCy6UNN9sa
2Pq8/PSx8XUo/sEo79Uhwj9wV4JhpmQ7FkaMN3AR5YkRd8CQHHwGvSITPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzs8qPFFoNydnjFe7XaOkU71Xr1MB8GA1UdIwQY
MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct
YTczNWNhMTA4NGI3LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3
LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCMs0XTY
2uPPD6S3T5KxwbjE/pSIQsOYG3KnAfJQ1Gc0RBUPvf6dZHjDe5EZDwgm+vpnV4/V
+dng+z8aYVXKTEoDItYNWSvgcsWyQ5LpsyIQgYzhVjSjtg0P2Cs6YTib46Hux2ut
DLO775KwGvkeDPwpj8xcvQ2Omt/UmVjZI7LsUQIJ/5ZJpDA7sYDRdOAzNhuGUSR4
xpb9nx6wpDAl/l//ZcwqM0Z7KsaeUZamRmqTG+rWWhQOEf3NKDmm0rYWzzH33b7a
hYnOMcOSiG6TZgAw86DNrQXjgm0pMsTp4pi7V9QcTu4fPHDEC2SGOlvuMe1bSReU
J9v2XksXJ2lNqw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:45 2025 by rpki-client