Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: N5J+qmIqhXB/nAjPGpC38zjvY5VRDhHdwns9gFkiYFY=
Subject key identifier: 91:32:C3:66:45:EC:BC:E2:82:07:AC:C8:AF:C1:67:54:B7:FD:D8:64
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0199FC8F6C5C98D47C1B92383D6962B22320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: 2763DSsKlddxciWJLe1or4a7GMe9D9geto5AqMSod4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6c:5c:98:d4:7c:1b:92:38:3d:69:62:b2:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=9132c36645ecbce28207acc8afc16754b7fdd864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:ce:84:cf:86:eb:1f:96:a7:49:33:db:da:
51:f3:b2:e4:74:a4:ff:b2:bd:f7:df:5f:a4:ef:e1:
25:e2:f6:c1:00:7a:d1:80:9f:aa:fc:8d:3a:9a:4f:
a3:65:9a:0d:e5:3a:e2:8b:1b:2f:95:28:8f:45:ba:
5b:8b:0a:9c:e2:f7:f9:d5:66:aa:a3:0a:1a:38:24:
4c:43:06:a9:26:15:58:2c:d7:ec:be:39:79:ff:05:
65:49:85:b6:b2:a6:e8:19:f0:87:1a:a3:27:82:b9:
74:fe:48:06:eb:f8:ba:b8:fc:67:bd:01:e7:db:c9:
ff:a0:1a:09:05:c1:da:e5:86:ad:9e:16:62:17:e2:
1c:f6:ce:95:9a:9c:3b:ff:74:67:b3:52:64:82:cc:
e7:95:20:41:3a:74:72:39:9d:e9:39:a7:90:70:bb:
28:2a:49:61:1a:cd:9c:a3:3e:8e:9f:5d:e9:2b:d8:
9c:f8:77:87:02:37:30:ca:8a:e5:93:0a:ff:53:eb:
a4:4f:b8:e2:e9:3e:ff:0b:0b:29:4a:01:a7:0f:95:
59:e1:7c:1f:3d:ea:ac:70:02:1a:a0:aa:72:14:ff:
5e:62:0f:cb:5b:a2:66:64:fb:02:f6:9c:81:04:42:
3e:72:cb:ef:a0:01:2a:c5:58:8f:9d:a9:63:ca:93:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:C3:66:45:EC:BC:E2:82:07:AC:C8:AF:C1:67:54:B7:FD:D8:64
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:9b:ca:78:f3:95:99:8f:36:71:3c:b7:35:09:6b:0b:46:
5d:de:49:a5:e2:14:c5:ef:fd:9e:2a:bb:74:75:0f:11:cc:38:
cd:66:3b:3d:fa:38:1b:5e:ca:39:47:55:6b:fd:de:5b:41:45:
fa:ed:5f:fb:92:2a:c6:b4:07:f7:c7:67:23:3c:1e:d1:4a:d1:
df:ab:53:b5:9b:a7:ae:3e:c4:26:0a:33:ed:b6:f1:12:1f:bb:
1b:08:e9:84:f8:d5:da:fc:8b:1c:94:ee:7c:cc:45:f9:bc:e8:
17:74:fd:b1:bd:98:0b:c9:4a:a3:25:f9:4c:fd:49:f1:a1:43:
19:83:f8:be:e1:34:27:a5:9f:10:04:ab:ce:d2:af:84:6d:6b:
7f:e2:7e:4b:31:69:63:9f:c7:bb:14:76:70:5d:de:94:e7:f3:
3b:7e:8c:f1:cc:60:d8:c6:90:ca:ed:de:78:1f:32:0a:09:2a:
ba:a1:e7:55:d2:60:ad:d3:68:fa:0d:f4:ba:16:46:f1:bd:a5:
8a:64:b5:a0:96:1a:76:ca:c1:47:16:1d:2e:00:cf:05:76:54:
c4:e4:0e:24:da:be:25:a9:99:74:d1:44:fb:29:1a:7a:cc:88:
94:2e:7e:0c:fc:65:22:20:83:0a:03:f3:ec:d8:50:20:92:f6:
53:33:9b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2xcmNR8G5I4PWlisiMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk
NzAxNDIwHhcNMjUxMDE5MTMwMTIxWhcNMjUxMDIwMTMwMTIxWjAzMTEwLwYDVQQD
Eyg5MTMyYzM2NjQ1ZWNiY2UyODIwN2FjYzhhZmMxNjc1NGI3ZmRkODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rOhM+G6x+Wp0kz29pR87LkdKT/
sr3331+k7+El4vbBAHrRgJ+q/I06mk+jZZoN5TriixsvlSiPRbpbiwqc4vf51Waq
owoaOCRMQwapJhVYLNfsvjl5/wVlSYW2sqboGfCHGqMngrl0/kgG6/i6uPxnvQHn
28n/oBoJBcHa5YatnhZiF+Ic9s6Vmpw7/3Rns1JkgsznlSBBOnRyOZ3pOaeQcLso
KklhGs2coz6On13pK9ic+HeHAjcwyorlkwr/U+ukT7ji6T7/CwspSgGnD5VZ4Xwf
PeqscAIaoKpyFP9eYg/LW6JmZPsC9pyBBEI+csvvoAEqxViPnaljypPIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEyw2ZF7LziggesyK/BZ1S3/dhkMB8GA1UdIwQY
MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt
OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy
LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh6bynjz
lZmPNnE8tzUJawtGXd5JpeIUxe/9niq7dHUPEcw4zWY7Pfo4G17KOUdVa/3eW0FF
+u1f+5IqxrQH98dnIzwe0UrR36tTtZunrj7EJgoz7bbxEh+7GwjphPjV2vyLHJTu
fMxF+bzoF3T9sb2YC8lKoyX5TP1J8aFDGYP4vuE0J6WfEASrztKvhG1rf+J+SzFp
Y5/HuxR2cF3elOfzO36M8cxg2MaQyu3eeB8yCgkquqHnVdJgrdNo+g30uhZG8b2l
imS1oJYadsrBRxYdLgDPBXZUxOQOJNq+JamZdNFE+ykaesyIlC5+DPxlIiCDCgPz
7NhQIJL2UzObkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:50 2025 by rpki-client