
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: aec/LKKbOvjaMMqhTrndBRpBOcI7ZTdqW8rK6bC/wRQ=
Subject key identifier: 16:EE:CC:EF:5A:F8:A4:B8:EF:55:D6:DB:45:0B:47:55:6C:2B:7B:97
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 0199FD346155157DF0529512070BBB0090A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: fEWpuusgNc9ACrejU9VFI7wqYtsYPbqtU63dra53BpQ=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:61:55:15:7d:f0:52:95:12:07:0b:bb:00:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=16eeccef5af8a4b8ef55d6db450b47556c2b7b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:d7:fb:87:b0:a3:22:1e:0a:ea:c6:52:80:
58:5b:0a:55:43:2b:43:70:d8:f8:4b:bf:8c:71:e6:
37:a0:0f:b2:8c:a5:92:2d:bc:0a:d2:a8:1f:fc:95:
04:f8:7a:fd:e9:23:03:c5:9f:d2:80:f2:1b:e5:15:
99:2b:b8:d6:6c:d2:69:e2:54:f9:87:55:c8:35:f4:
ef:28:f4:ee:62:ac:2f:80:f6:e4:6b:9e:b1:8e:41:
a1:32:bd:cc:79:22:99:3b:cb:05:5f:0f:d3:b3:9d:
13:06:07:b4:93:70:f6:89:b0:c9:b5:de:f6:30:23:
df:44:3c:07:f6:84:93:a3:24:4a:8f:3f:d8:64:6e:
2d:ea:ad:d4:d6:d2:8f:34:fa:61:26:87:1d:c0:52:
64:ed:c8:0a:3e:23:e9:71:1e:89:f1:52:18:d4:84:
17:8d:e5:c7:3d:2d:61:70:6b:0b:96:9f:c0:9e:c1:
b3:b9:6e:2b:4f:f0:14:a8:96:7a:6b:ea:fa:de:73:
81:42:c7:81:5b:72:a5:79:76:58:17:dc:b7:8f:69:
fa:75:f9:e5:b2:39:17:ae:93:1d:73:21:3a:21:3a:
1c:e8:be:06:1f:c4:b7:b7:dc:ac:b4:95:30:7a:8f:
a2:5c:53:30:4a:0e:6a:32:12:1e:b7:51:a3:ca:fb:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:CC:EF:5A:F8:A4:B8:EF:55:D6:DB:45:0B:47:55:6C:2B:7B:97
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:bb:2c:2b:07:33:5a:e9:47:46:75:a4:94:59:b4:35:e3:
43:c7:c2:98:22:96:ed:b4:e9:4b:ca:65:3c:38:67:cf:04:37:
05:10:46:9a:08:4a:53:fa:c3:a9:be:1b:a9:34:04:a4:ac:55:
13:0b:30:43:1e:3f:12:24:f8:00:ba:0f:09:b5:9e:6e:5c:26:
e6:83:3c:16:e8:2e:c3:07:14:bb:97:32:5e:f1:db:27:e1:f8:
a8:f4:27:53:1e:ac:ae:42:6d:8a:39:df:91:d7:94:35:09:6b:
3c:8c:eb:af:70:4a:76:79:9f:49:69:f0:66:74:6e:8b:1a:4d:
40:ce:2f:16:a9:3f:20:3c:85:6b:fe:7b:55:ac:fe:13:83:3c:
cb:59:09:a0:9f:b2:3f:36:04:ea:36:13:12:a1:ab:5f:55:7e:
f7:2e:19:1c:fd:64:28:0f:44:6f:c8:57:00:ff:79:8e:84:a0:
b1:57:c4:74:1b:57:65:ec:8d:32:b0:e9:eb:5a:58:04:c5:b2:
3f:d6:3f:03:13:2b:46:69:64:3d:62:b5:d6:bf:7a:e9:d2:fa:
81:ff:3b:e2:26:f8:d2:8a:27:29:a9:ae:40:93:3e:f7:91:aa:
ab:e5:87:79:d2:74:ca:18:ba:ab:66:1d:89:6d:01:a7:a4:8f:
1d:c8:b4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGFVFX3wUpUSBwu7AJCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD
EygxNmVlY2NlZjVhZjhhNGI4ZWY1NWQ2ZGI0NTBiNDc1NTZjMmI3Yjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tzX+4ewoyIeCurGUoBYWwpVQytD
cNj4S7+MceY3oA+yjKWSLbwK0qgf/JUE+Hr96SMDxZ/SgPIb5RWZK7jWbNJp4lT5
h1XINfTvKPTuYqwvgPbka56xjkGhMr3MeSKZO8sFXw/Ts50TBge0k3D2ibDJtd72
MCPfRDwH9oSToyRKjz/YZG4t6q3U1tKPNPphJocdwFJk7cgKPiPpcR6J8VIY1IQX
jeXHPS1hcGsLlp/AnsGzuW4rT/AUqJZ6a+r63nOBQseBW3KleXZYF9y3j2n6dfnl
sjkXrpMdcyE6IToc6L4GH8S3t9ystJUweo+iXFMwSg5qMhIet1Gjyvtx7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbuzO9a+KS471XW20ULR1VsK3uXMB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2q7LCsH
M1rpR0Z1pJRZtDXjQ8fCmCKW7bTpS8plPDhnzwQ3BRBGmghKU/rDqb4bqTQEpKxV
EwswQx4/EiT4ALoPCbWeblwm5oM8FuguwwcUu5cyXvHbJ+H4qPQnUx6srkJtijnf
kdeUNQlrPIzrr3BKdnmfSWnwZnRuixpNQM4vFqk/IDyFa/57Vaz+E4M8y1kJoJ+y
PzYE6jYTEqGrX1V+9y4ZHP1kKA9Eb8hXAP95joSgsVfEdBtXZeyNMrDp61pYBMWy
P9Y/AxMrRmlkPWK11r966dL6gf874ib40oonKamuQJM+95Gqq+WHedJ0yhi6q2Yd
iW0Bp6SPHci0mQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:04 2025 by rpki-client