Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: GpuKEZBWdvm+orOrR1obMaimeIdQHYgXZBpJ0l9FKlM=
Subject key identifier: 08:A8:69:3F:1A:3D:5B:8F:35:66:5B:85:ED:2C:AB:07:EA:67:58:51
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019A006C5D37443F4DC0A015F8A54FDD199E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 07:01:33 +0000
Manifest this update: Mon 20 Oct 2025 07:01:33 +0000
Manifest next update: Tue 21 Oct 2025 07:01:33 +0000
Files and hashes: 1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: lLZWpGVuVYtYUs9kF5GrwNB5DBffWYCKf+Pi5H17epo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5d:37:44:3f:4d:c0:a0:15:f8:a5:4f:dd:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Oct 20 07:01:33 2025 GMT
Not After : Oct 21 07:01:33 2025 GMT
Subject: CN=08a8693f1a3d5b8f35665b85ed2cab07ea675851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:b0:41:fd:61:37:33:75:f8:a9:f6:7d:43:
9f:e7:bf:ba:c3:9c:ff:a8:d2:9c:0c:44:30:92:58:
f3:78:aa:ec:6d:3e:d2:f1:38:24:6a:43:48:48:b1:
5c:53:89:36:68:e8:3b:20:99:7e:71:61:aa:28:83:
e1:0b:9a:54:ed:6b:25:ea:0d:c2:7a:93:88:d9:4e:
f0:c1:56:87:0f:d1:34:a2:02:2d:f1:f8:9f:21:61:
87:04:fb:78:05:6b:34:ed:b3:77:ad:b1:a4:3b:7b:
de:c6:91:9a:4a:22:34:11:26:38:a5:24:37:8d:26:
fa:73:12:bf:cf:95:54:f0:4d:4e:07:9c:48:25:c7:
85:c3:a3:a9:2e:fa:18:55:90:1b:98:aa:fd:16:bc:
14:ea:0b:73:d7:8e:25:f4:80:0c:08:0a:8b:8d:3e:
a0:74:40:6e:2b:ea:d8:52:27:f2:b1:b4:f3:6d:2e:
f1:8d:9c:c8:cb:05:25:31:1c:3b:66:a8:fa:62:57:
1f:ac:c2:9e:b4:ab:ff:16:02:f3:18:c2:8d:ff:b7:
85:39:3d:d1:a5:94:4a:5a:cc:79:de:42:5e:38:71:
e0:c7:c2:89:aa:f6:3e:66:f6:11:83:f2:3f:cd:21:
2d:41:27:5d:8c:5d:3a:8a:84:fa:22:00:7a:fa:0f:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:69:3F:1A:3D:5B:8F:35:66:5B:85:ED:2C:AB:07:EA:67:58:51
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:0f:74:54:7c:a0:33:7e:05:85:c8:53:68:20:26:88:d4:
3d:1b:99:b7:0f:f3:d7:d1:f9:e5:11:9b:fa:98:25:88:a2:9b:
92:b6:bb:af:7b:28:45:e6:29:e9:cf:06:89:f0:7a:6f:8b:5f:
a3:8e:51:c8:dd:7f:db:3f:38:04:a1:df:90:cd:40:18:6b:f9:
dd:7b:e1:8e:0f:ef:23:49:f5:cd:c1:14:00:3c:46:c2:a2:59:
d6:77:05:2b:c5:30:10:7e:93:7a:9a:c4:3b:8e:0d:0f:48:b7:
62:55:5b:11:4e:2e:66:af:9b:c7:1e:ee:4a:45:59:e6:80:38:
3f:9c:f3:ac:d3:03:ff:99:1e:31:da:13:96:48:4d:04:03:69:
68:66:2c:2d:bb:04:8d:7c:28:a9:b3:7d:5d:8c:45:1e:4b:9a:
99:76:43:24:a2:f3:de:c4:26:73:24:e7:54:f3:fc:8f:bc:da:
d4:11:d9:e5:3a:0c:23:6d:22:23:45:29:cb:52:c3:87:55:f5:
ee:22:68:a7:ac:c3:80:93:ac:c9:29:a0:68:71:76:45:cc:27:
8b:09:f3:37:7d:f1:c5:96:fa:bf:75:f8:83:86:ad:d0:60:00:
0f:85:93:8d:db:09:5f:20:c9:b9:3f:80:3f:a2:29:b2:4d:87:
ea:05:48:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbF03RD9NwKAV+KVP3RmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh
YThjN2IwHhcNMjUxMDIwMDcwMTMzWhcNMjUxMDIxMDcwMTMzWjAzMTEwLwYDVQQD
EygwOGE4NjkzZjFhM2Q1YjhmMzU2NjViODVlZDJjYWIwN2VhNjc1ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm46wQf1hNzN1+Kn2fUOf57+6w5z/
qNKcDEQwkljzeKrsbT7S8TgkakNISLFcU4k2aOg7IJl+cWGqKIPhC5pU7Wsl6g3C
epOI2U7wwVaHD9E0ogIt8fifIWGHBPt4BWs07bN3rbGkO3vexpGaSiI0ESY4pSQ3
jSb6cxK/z5VU8E1OB5xIJceFw6OpLvoYVZAbmKr9FrwU6gtz144l9IAMCAqLjT6g
dEBuK+rYUifysbTzbS7xjZzIywUlMRw7Zqj6YlcfrMKetKv/FgLzGMKN/7eFOT3R
pZRKWsx53kJeOHHgx8KJqvY+ZvYRg/I/zSEtQSddjF06ioT6IgB6+g/NtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAioaT8aPVuPNWZbhe0sqwfqZ1hRMB8GA1UdIwQY
MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt
MWQ0ZGZiNGY0ODAwLzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw
LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKwPdFR8
oDN+BYXIU2ggJojUPRuZtw/z19H55RGb+pgliKKbkra7r3soReYp6c8GifB6b4tf
o45RyN1/2z84BKHfkM1AGGv53Xvhjg/vI0n1zcEUADxGwqJZ1ncFK8UwEH6TeprE
O44ND0i3YlVbEU4uZq+bxx7uSkVZ5oA4P5zzrNMD/5keMdoTlkhNBANpaGYsLbsE
jXwoqbN9XYxFHkuamXZDJKLz3sQmcyTnVPP8j7za1BHZ5ToMI20iI0Upy1LDh1X1
7iJop6zDgJOsySmgaHF2RcwniwnzN33xxZb6v3X4g4at0GAAD4WTjdsJXyDJuT+A
P6Ipsk2H6gVIeg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:34 2025 by rpki-client