Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: WaAWrgkGVHVDjV3rxpYRFlXtX6vXmmuaculnaC2V+WI=
Subject key identifier: 21:3C:82:22:95:DB:7F:B5:E1:5E:22:82:AF:2E:26:78:58:51:6A:D4
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 0199FF22E3D7D518EC013D482C4EFC98A45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:40 +0000
Manifest this update: Mon 20 Oct 2025 01:01:40 +0000
Manifest next update: Tue 21 Oct 2025 01:01:40 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: fa0v8gaWLQ8AtCMVhbbT6EgXHFos/MYPXDWlg1zFjos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e3:d7:d5:18:ec:01:3d:48:2c:4e:fc:98:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Oct 20 01:01:40 2025 GMT
Not After : Oct 21 01:01:40 2025 GMT
Subject: CN=213c822295db7fb5e15e2282af2e267858516ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:2f:a8:95:e3:15:90:8d:7f:fd:5e:e5:b4:
97:6f:26:11:51:29:cc:41:94:26:5f:a7:85:97:02:
f3:0e:e9:86:9a:94:0b:28:a4:3c:17:ab:04:d0:61:
26:ca:7c:c5:11:fd:80:a8:04:f8:f0:8d:22:3d:da:
69:a2:b2:48:e6:ec:26:e0:01:52:b7:ce:d3:c2:bb:
b9:38:53:ce:c0:ef:29:b4:ab:65:5e:69:c0:20:f1:
3b:45:91:4e:cb:9b:96:dd:61:2d:a5:cb:de:68:d4:
42:28:a8:a0:37:a4:40:e1:ab:30:68:7a:1c:93:7a:
0e:8d:e7:c1:8d:78:96:91:17:46:a9:0f:cc:ad:46:
b3:5d:aa:ad:eb:6a:45:82:8d:c6:85:39:e8:6d:c0:
c9:6c:d7:36:16:6b:33:95:ef:65:b9:aa:23:bc:dc:
cb:ef:f0:84:57:22:79:da:1d:b6:7e:fe:f8:7c:e8:
40:f1:05:34:34:86:e1:6a:9e:dd:02:59:0e:8a:a6:
31:9d:34:92:e5:2e:98:22:58:5c:2e:c7:ed:68:0e:
0e:c0:53:18:6d:b5:93:39:d5:8f:8d:c5:76:3d:36:
38:da:e5:75:52:77:de:a6:b8:d8:c6:d2:a6:11:fa:
a5:d6:76:b3:0f:ae:6d:16:98:ce:9e:53:6b:5c:82:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:82:22:95:DB:7F:B5:E1:5E:22:82:AF:2E:26:78:58:51:6A:D4
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:47:8b:04:38:41:f4:db:b3:8f:53:b9:f3:8c:fa:26:96:
2e:9e:d7:d8:51:60:6b:26:ce:e4:a1:7e:ed:42:1c:76:03:96:
a2:0f:ca:23:b4:3c:71:89:1c:5b:5c:d1:ab:99:14:d6:2c:9e:
44:ad:38:3b:7e:94:f8:6a:61:4c:71:a9:55:dd:cf:77:04:84:
84:c2:6e:99:11:40:98:25:ae:fa:06:86:35:02:42:39:ab:57:
94:43:31:0b:88:a2:da:b8:40:cc:3c:9c:9a:4c:9b:24:84:65:
36:16:fb:60:45:66:f2:98:e6:93:b2:d4:ae:d1:df:5a:f6:8c:
f3:6e:ab:99:1e:cc:d2:4e:4c:43:ef:1b:30:f4:cf:ea:71:cc:
8d:75:26:34:25:a5:f2:e3:96:90:89:41:6e:fe:24:52:dc:9e:
e2:d4:ed:15:f7:77:fe:07:93:48:42:28:73:ba:75:1c:39:8f:
db:5f:41:e5:b7:13:3f:97:53:c7:ef:97:66:2e:3a:f3:9b:7d:
ce:06:2d:26:15:d8:f5:cf:88:e7:49:b2:99:53:86:7b:3e:77:
97:c5:bf:dc:77:89:4b:b4:02:ff:03:b1:9d:2f:1f:66:c5:68:
9c:9a:8a:80:39:12:6c:67:86:d7:ca:fa:7a:e2:0c:03:1f:c5:
c8:e2:34:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IuPX1RjsAT1ILE78mKRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk
ZjBkMDQwHhcNMjUxMDIwMDEwMTQwWhcNMjUxMDIxMDEwMTQwWjAzMTEwLwYDVQQD
EygyMTNjODIyMjk1ZGI3ZmI1ZTE1ZTIyODJhZjJlMjY3ODU4NTE2YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdkvqJXjFZCNf/1e5bSXbyYRUSnM
QZQmX6eFlwLzDumGmpQLKKQ8F6sE0GEmynzFEf2AqAT48I0iPdpporJI5uwm4AFS
t87Twru5OFPOwO8ptKtlXmnAIPE7RZFOy5uW3WEtpcveaNRCKKigN6RA4aswaHoc
k3oOjefBjXiWkRdGqQ/MrUazXaqt62pFgo3GhTnobcDJbNc2Fmszle9luaojvNzL
7/CEVyJ52h22fv74fOhA8QU0NIbhap7dAlkOiqYxnTSS5S6YIlhcLsftaA4OwFMY
bbWTOdWPjcV2PTY42uV1UnfeprjYxtKmEfql1nazD65tFpjOnlNrXIKsmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE8giKV23+14V4igq8uJnhYUWrUMB8GA1UdIwQY
MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt
MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz
LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfFHiwQ4
QfTbs49TufOM+iaWLp7X2FFgaybO5KF+7UIcdgOWog/KI7Q8cYkcW1zRq5kU1iye
RK04O36U+GphTHGpVd3PdwSEhMJumRFAmCWu+gaGNQJCOatXlEMxC4ii2rhAzDyc
mkybJIRlNhb7YEVm8pjmk7LUrtHfWvaM826rmR7M0k5MQ+8bMPTP6nHMjXUmNCWl
8uOWkIlBbv4kUtye4tTtFfd3/geTSEIoc7p1HDmP219B5bcTP5dTx++XZi4685t9
zgYtJhXY9c+I50mymVOGez53l8W/3HeJS7QC/wOxnS8fZsVonJqKgDkSbGeG18r6
euIMAx/FyOI0ig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:03 2025 by rpki-client