Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: uN9xD6DD3+hCLLEm+NnFwVTLfkL6xFep9JWVEBUP+uI=
Subject key identifier: D6:CE:E4:96:26:4D:3B:9E:36:EA:F4:DB:54:F3:5D:3D:FE:0A:18:FF
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 019A0148051B4912BCDCA07E4D382CE25BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 11:01:28 +0000
Manifest this update: Mon 20 Oct 2025 11:01:28 +0000
Manifest next update: Tue 21 Oct 2025 11:01:28 +0000
Files and hashes: 1: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: /+Y6GfZPf5LxB9avs5DzQJ9DU5EnXDvvw91tpOvMyLE=)
2: haMdABaXVysRqHMnxwzwnxPmy3c.roa (hash: qOyf4cvYsbSBRT8OdzzVWfnIBaN7hD9KoD7F7avNbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:05:1b:49:12:bc:dc:a0:7e:4d:38:2c:e2:5b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Oct 20 11:01:28 2025 GMT
Not After : Oct 21 11:01:28 2025 GMT
Subject: CN=d6cee496264d3b9e36eaf4db54f35d3dfe0a18ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:56:f5:61:47:a9:2f:fd:2d:27:31:75:d6:
47:ec:48:29:7f:00:3f:a1:69:6c:33:25:3a:de:fe:
eb:57:20:88:11:e1:29:cc:59:6b:fb:dc:4f:a4:b3:
9a:4b:c2:5b:fb:58:27:9c:21:68:94:74:24:e3:91:
d0:f4:64:68:16:d4:ce:48:9f:d5:15:4c:04:9b:7b:
00:0b:3a:cd:3c:93:ab:0f:73:a9:1a:38:b5:f1:aa:
b0:ba:72:52:40:14:b7:94:d0:82:4c:d5:88:59:2f:
7f:9b:8a:df:69:ac:c7:ca:c6:44:6d:49:a8:6f:9d:
85:f9:c8:87:2c:c7:ec:82:57:e4:84:dd:80:02:8c:
4c:c1:95:01:f5:14:b7:d0:65:64:3c:89:22:82:0a:
45:91:5b:bf:64:de:d9:9d:d5:4a:4b:03:60:53:23:
9b:00:00:29:1a:80:02:42:24:a4:e4:1c:9e:1c:6b:
cf:32:3e:f9:0e:72:35:06:28:a8:96:63:3f:a8:39:
5d:6e:49:98:51:45:69:39:4b:c7:16:28:9b:3a:5e:
c8:32:8d:e8:28:03:27:31:a4:8b:24:42:c8:b7:75:
0a:2f:47:27:c0:68:e8:f3:13:fb:7c:e5:b8:91:e4:
4c:ee:a8:cb:fc:dd:8f:1b:d5:5d:73:2f:4a:20:2f:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:E4:96:26:4D:3B:9E:36:EA:F4:DB:54:F3:5D:3D:FE:0A:18:FF
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:b5:40:10:fd:22:11:ce:43:1f:e9:ba:4a:d3:aa:a6:5f:
21:b5:19:78:99:a0:08:30:a7:a4:0e:c6:6d:9c:5e:5f:f5:18:
7d:26:aa:2f:04:b7:95:37:55:3b:62:fc:9d:10:dd:dc:1c:b1:
73:62:e9:c7:f2:7f:68:91:3b:cf:c8:29:60:22:08:e2:37:3d:
bc:e7:c9:e4:95:65:60:b6:e3:35:4b:db:cb:4e:8d:d1:af:7a:
20:86:98:7f:b9:51:f8:3e:e0:3f:7c:a4:3e:35:27:98:d7:38:
e9:2b:a7:10:0f:66:d7:a6:24:f8:b9:13:7b:24:1a:6b:1b:d4:
34:b2:68:94:5e:1e:26:9b:d3:4f:4f:26:a9:b1:cd:f1:e7:7d:
ad:ad:5e:59:14:0c:88:e6:a5:60:da:84:d8:65:7f:f4:08:01:
9e:48:5d:1e:5e:fd:45:49:b6:40:7f:51:01:e8:b5:18:8c:79:
99:b4:8e:a1:20:6e:41:88:c7:fd:a5:61:52:10:40:9f:68:a6:
70:26:0d:54:c2:48:9b:a6:b1:b0:b2:df:be:29:91:6c:25:6e:
80:28:c0:3b:c4:39:76:c9:c4:1d:17:1f:dd:6d:d6:b1:c3:c7:
19:8d:ef:3d:51:05:09:23:54:26:de:5f:56:de:d6:63:e4:ff:
bb:53:4c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBSAUbSRK83KB+TTgs4lvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3
NTQ3MDQwHhcNMjUxMDIwMTEwMTI4WhcNMjUxMDIxMTEwMTI4WjAzMTEwLwYDVQQD
EyhkNmNlZTQ5NjI2NGQzYjllMzZlYWY0ZGI1NGYzNWQzZGZlMGExOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aFW9WFHqS/9LScxddZH7EgpfwA/
oWlsMyU63v7rVyCIEeEpzFlr+9xPpLOaS8Jb+1gnnCFolHQk45HQ9GRoFtTOSJ/V
FUwEm3sACzrNPJOrD3OpGji18aqwunJSQBS3lNCCTNWIWS9/m4rfaazHysZEbUmo
b52F+ciHLMfsglfkhN2AAoxMwZUB9RS30GVkPIkiggpFkVu/ZN7ZndVKSwNgUyOb
AAApGoACQiSk5ByeHGvPMj75DnI1BiiolmM/qDldbkmYUUVpOUvHFiibOl7IMo3o
KAMnMaSLJELIt3UKL0cnwGjo8xP7fOW4keRM7qjL/N2PG9Vdcy9KIC+w0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbO5JYmTTueNur021TzXT3+Chj/MB8GA1UdIwQY
MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt
YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz
LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpO1QBD9
IhHOQx/pukrTqqZfIbUZeJmgCDCnpA7GbZxeX/UYfSaqLwS3lTdVO2L8nRDd3Byx
c2Lpx/J/aJE7z8gpYCII4jc9vOfJ5JVlYLbjNUvby06N0a96IIaYf7lR+D7gP3yk
PjUnmNc46SunEA9m16Yk+LkTeyQaaxvUNLJolF4eJpvTT08mqbHN8ed9ra1eWRQM
iOalYNqE2GV/9AgBnkhdHl79RUm2QH9RAei1GIx5mbSOoSBuQYjH/aVhUhBAn2im
cCYNVMJIm6axsLLfvimRbCVugCjAO8Q5dsnEHRcf3W3WscPHGY3vPVEFCSNUJt5f
Vt7WY+T/u1NMbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:36 2025 by rpki-client