Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: vUV7COuqPp6eAezlufp3jqhCPcqC27ASNSiguX4Lafo=
Subject key identifier: 67:17:81:63:7F:30:8F:FF:1F:1D:44:52:06:75:3D:B5:FF:77:C5:59
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 0199FD344B353E96DD27F5A3598ED88FFBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: CfJAdPS5hFXmGbSWFypWhzNPFls7kwBInyQaJlbdAhA=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4b:35:3e:96:dd:27:f5:a3:59:8e:d8:8f:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=671781637f308fff1f1d445206753db5ff77c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:24:b6:f3:e6:61:0b:0c:b7:2e:92:9e:dc:
b4:2a:6b:dd:16:88:9d:66:12:a6:1a:81:4e:8c:53:
73:65:4d:d0:4e:d5:7a:f7:26:8e:95:c1:f0:94:de:
8e:da:47:45:21:d9:7a:af:e5:e2:46:8e:3c:2e:d7:
a3:8e:66:35:7b:66:b8:62:65:b4:79:d4:1e:54:9d:
ee:71:94:c2:6e:f2:63:d0:51:53:6c:83:5e:9c:99:
6e:b1:55:bb:fb:c0:25:e5:95:35:b7:65:42:d7:9c:
4b:cd:c9:64:7e:e5:23:96:67:ea:a6:15:7e:37:f2:
b9:26:07:93:26:67:40:20:cc:b2:6c:fe:d9:01:5b:
7d:46:a5:e7:2f:cc:03:bd:02:a4:60:d7:ff:8e:7e:
9b:7b:8d:61:3c:05:fc:f6:e7:16:32:82:45:ee:c7:
cb:f4:f8:22:fb:0c:f4:44:12:8d:62:ef:7f:e3:f0:
c3:20:31:e3:84:35:de:69:8a:89:3b:24:b7:e0:c8:
8f:ad:f1:a8:44:ea:09:47:3e:25:1d:d5:b3:f1:c3:
01:73:1a:1d:37:1c:01:a4:47:85:ad:6d:9a:d4:30:
78:53:87:f0:4c:fb:f4:ce:05:e9:ff:5e:22:7d:57:
ff:cc:5c:06:05:90:9a:0a:7b:3c:9a:37:a4:fe:18:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:81:63:7F:30:8F:FF:1F:1D:44:52:06:75:3D:B5:FF:77:C5:59
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:a1:44:fc:47:25:ba:29:64:9d:8b:8d:6c:79:e9:e6:55:
2d:f1:54:b8:13:7b:85:e1:f0:b3:34:d5:2a:c5:20:41:ee:95:
02:35:d2:45:4d:7d:e6:bc:70:03:77:10:b7:7e:36:0c:6b:a8:
e7:16:3b:e5:c6:4c:f5:8b:64:5d:f3:23:47:13:61:0d:24:a0:
91:60:f3:18:14:ba:b2:80:04:b8:3e:34:de:2e:b5:73:db:56:
f2:37:85:19:31:3d:c3:50:be:18:b1:97:ea:f9:06:fe:5c:9f:
3a:e0:c3:02:d9:2a:2c:81:2f:cb:07:63:40:a0:32:f4:94:92:
6c:23:b3:07:f1:76:0c:0e:3f:c4:14:8b:e5:c1:82:f9:b1:76:
3d:24:c6:9a:22:e1:47:a5:55:7a:6b:73:e4:67:01:68:c4:2b:
04:b5:a5:28:8e:b6:13:82:e0:59:8b:78:44:82:ef:f7:55:ee:
69:32:a1:90:bf:8f:b8:b0:15:93:f0:48:a1:5a:db:cf:8a:11:
99:d1:d7:40:d6:5a:c3:98:4b:63:4f:d2:12:e9:1d:38:eb:2e:
36:43:75:1b:66:c1:c7:57:47:60:87:8b:3c:3d:12:6a:7c:a3:
4a:9e:bc:1c:d9:b3:1a:64:dd:ed:71:bb:38:5b:4a:5b:c9:cc:
ee:24:25:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn9NEs1PpbdJ/WjWY7Yj/vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjUxMDE5MTYwMTI2WhcNMjUxMDIwMTYwMTI2WjAzMTEwLwYDVQQD
Eyg2NzE3ODE2MzdmMzA4ZmZmMWYxZDQ0NTIwNjc1M2RiNWZmNzdjNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1UktvPmYQsMty6Snty0KmvdFoid
ZhKmGoFOjFNzZU3QTtV69yaOlcHwlN6O2kdFIdl6r+XiRo48LtejjmY1e2a4YmW0
edQeVJ3ucZTCbvJj0FFTbINenJlusVW7+8Al5ZU1t2VC15xLzclkfuUjlmfqphV+
N/K5JgeTJmdAIMyybP7ZAVt9RqXnL8wDvQKkYNf/jn6be41hPAX89ucWMoJF7sfL
9Pgi+wz0RBKNYu9/4/DDIDHjhDXeaYqJOyS34MiPrfGoROoJRz4lHdWz8cMBcxod
NxwBpEeFrW2a1DB4U4fwTPv0zgXp/14ifVf/zFwGBZCaCns8mjek/hi5OwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGcXgWN/MI//Hx1EUgZ1PbX/d8VZMB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzI5M2QzNi05ZGEyLTQ0MDUtOGRlMy00YWZkODI1NGFl
NDMvMS8xLXVGclNUMHFFb2w4cjBkWHV4aWdMdXdzM2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntGh
RPxHJbopZJ2LjWx56eZVLfFUuBN7heHwszTVKsUgQe6VAjXSRU195rxwA3cQt342
DGuo5xY75cZM9YtkXfMjRxNhDSSgkWDzGBS6soAEuD403i61c9tW8jeFGTE9w1C+
GLGX6vkG/lyfOuDDAtkqLIEvywdjQKAy9JSSbCOzB/F2DA4/xBSL5cGC+bF2PSTG
miLhR6VVemtz5GcBaMQrBLWlKI62E4LgWYt4RILv91XuaTKhkL+PuLAVk/BIoVrb
z4oRmdHXQNZaw5hLY0/SEukdOOsuNkN1G2bBx1dHYIeLPD0SanyjSp68HNmzGmTd
7XG7OFtKW8nM7iQlcw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:47 2025 by rpki-client