Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: 4UyPvc9CN9Rbg6S90mj5NrZUzZqaLyw+et5XNNv0Gg0=
Subject key identifier: 63:60:44:35:F1:D5:18:47:AA:74:B1:AC:FD:FC:16:D3:69:63:4E:AA
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 0199FAD7E2C859976632515555A4110AB868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:16 +0000
Manifest this update: Sun 19 Oct 2025 05:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:01:16 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: g5A1TBDht1dRrY7ZRy5oUQofmVsE93RuMd22Y6DxUPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e2:c8:59:97:66:32:51:55:55:a4:11:0a:b8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Oct 19 05:01:16 2025 GMT
Not After : Oct 20 05:01:16 2025 GMT
Subject: CN=63604435f1d51847aa74b1acfdfc16d369634eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9d:cb:ee:07:9a:bf:22:e6:28:ab:63:07:94:
f9:84:9f:45:45:81:50:9d:52:3f:82:85:9f:eb:37:
be:13:67:cb:f5:51:ef:3f:22:fc:b9:5f:f5:db:99:
69:93:fe:bb:2f:ea:04:ae:d1:e5:fc:c1:1f:e8:5a:
0c:48:c1:59:47:7a:23:32:2e:3a:35:b9:b0:ca:c1:
7f:f2:36:05:4c:90:d3:bf:4b:17:0b:5c:9c:61:81:
9c:56:b1:67:a7:4d:49:3c:fc:35:b2:d9:eb:e4:5e:
1f:07:f5:fa:86:6f:96:4d:9d:d5:77:e2:ce:38:ad:
df:66:1f:ca:9d:16:85:fa:d1:14:04:8d:7a:b7:62:
7e:c1:3b:95:66:86:5a:a0:9f:c9:da:82:01:29:df:
b2:c1:6b:c0:f4:3b:54:2c:f1:1e:55:39:99:7c:0b:
4e:39:67:15:df:20:0e:70:dd:b3:8d:ad:b0:db:e0:
74:3d:6f:d1:11:1c:46:df:92:8b:99:9a:8a:6f:09:
6d:49:41:cc:37:63:00:11:43:7f:87:3a:ff:44:91:
a7:aa:a1:1a:16:3c:89:99:0e:98:b2:9f:79:48:ac:
e0:1b:d7:9b:f9:95:7b:0d:13:bd:56:98:b9:24:9d:
d2:cb:0b:25:7a:c3:91:7a:a5:52:79:02:c6:e4:de:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:44:35:F1:D5:18:47:AA:74:B1:AC:FD:FC:16:D3:69:63:4E:AA
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:1f:4f:ee:c0:5c:f1:9a:a9:8c:6a:2a:f6:cc:37:27:41:
8c:67:37:c4:27:36:34:ce:ee:6e:28:8c:3f:ec:93:46:fd:a9:
32:d8:85:a2:88:f1:15:bf:a0:b8:e2:14:4c:f2:77:da:16:f2:
c2:d9:a3:a7:51:64:b6:5c:00:a7:9f:a9:05:69:9b:89:29:7a:
00:0e:bf:d9:4a:bb:76:31:08:28:36:a8:78:ce:49:4c:de:ec:
64:83:48:51:b3:c9:09:0a:57:8b:0c:e6:d3:bf:d7:e7:70:dc:
34:08:87:96:07:ad:0d:b7:e5:94:15:28:62:90:b5:e8:b4:f5:
ed:a8:84:e4:da:85:d9:14:ce:49:31:51:8b:6e:93:54:5e:4b:
8f:6a:19:c4:5e:ce:5b:31:f8:30:d4:b4:0a:00:70:ec:0b:2f:
6d:d3:35:f7:b0:30:7d:95:d8:db:7b:5e:94:76:ce:89:b9:70:
6e:c8:27:25:b4:a1:4d:93:df:8f:b2:67:dd:30:00:0c:ac:c2:
42:2c:c2:49:d6:a5:f9:10:03:39:a5:aa:cc:e2:6d:f1:60:ae:
93:02:18:23:f1:19:8d:73:9e:61:5d:87:b9:61:2a:03:6f:c0:
e4:0c:ba:15:fa:65:6a:c8:8a:2c:9b:a3:5c:55:21:a7:55:ca:
fb:21:b2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61+LIWZdmMlFVVaQRCrhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2
ODYzYjcwHhcNMjUxMDE5MDUwMTE2WhcNMjUxMDIwMDUwMTE2WjAzMTEwLwYDVQQD
Eyg2MzYwNDQzNWYxZDUxODQ3YWE3NGIxYWNmZGZjMTZkMzY5NjM0ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+53L7geavyLmKKtjB5T5hJ9FRYFQ
nVI/goWf6ze+E2fL9VHvPyL8uV/125lpk/67L+oErtHl/MEf6FoMSMFZR3ojMi46
NbmwysF/8jYFTJDTv0sXC1ycYYGcVrFnp01JPPw1stnr5F4fB/X6hm+WTZ3Vd+LO
OK3fZh/KnRaF+tEUBI16t2J+wTuVZoZaoJ/J2oIBKd+ywWvA9DtULPEeVTmZfAtO
OWcV3yAOcN2zja2w2+B0PW/RERxG35KLmZqKbwltSUHMN2MAEUN/hzr/RJGnqqEa
FjyJmQ6Ysp95SKzgG9eb+ZV7DRO9Vpi5JJ3SywslesOReqVSeQLG5N5UywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNgRDXx1RhHqnSxrP38FtNpY06qMB8GA1UdIwQY
MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt
OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi
LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOkfT+7A
XPGaqYxqKvbMNydBjGc3xCc2NM7ubiiMP+yTRv2pMtiFoojxFb+guOIUTPJ32hby
wtmjp1FktlwAp5+pBWmbiSl6AA6/2Uq7djEIKDaoeM5JTN7sZINIUbPJCQpXiwzm
07/X53DcNAiHlgetDbfllBUoYpC16LT17aiE5NqF2RTOSTFRi26TVF5Lj2oZxF7O
WzH4MNS0CgBw7AsvbdM197AwfZXY23telHbOiblwbsgnJbShTZPfj7Jn3TAADKzC
QizCSdal+RADOaWqzOJt8WCukwIYI/EZjXOeYV2HuWEqA2/A5Ay6FfplasiKLJuj
XFUhp1XK+yGy1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:14 2025 by rpki-client