Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: Hms2dnlOC2V79R2ckG+pN2jyPC6dfm/JB1DCI4+1CyY=
Subject key identifier: 48:B8:33:2C:ED:46:96:EC:5E:2A:98:55:92:47:58:32:20:60:48:46
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 0199FDD95FA418953773400A27216A818992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: t8n4nP9O3xab7dHfK1rMOR6SJ+KEd4NfpTK40Bw5THI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5f:a4:18:95:37:73:40:0a:27:21:6a:81:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=48b8332ced4696ec5e2a98559247583220604846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:01:c7:d4:71:78:76:ac:9e:0d:5a:45:4c:
2c:b3:2b:ae:63:dc:43:18:0e:90:aa:4c:b4:a6:04:
5c:28:b6:27:83:fc:e8:2f:e5:e8:0b:dd:91:c3:04:
a7:ee:a5:26:25:51:88:e3:fe:65:25:6f:b1:56:dd:
36:36:d1:65:ce:a5:a3:6f:2e:4a:de:62:04:bf:87:
1b:fb:af:d5:d3:23:76:6a:fc:19:3c:b5:b2:1a:54:
e4:3c:4b:a7:97:05:50:f2:d9:a9:18:c4:0e:57:38:
24:e2:16:0e:fa:11:75:07:d6:8f:9e:5e:0f:31:00:
60:a1:42:19:4d:7b:b7:e0:e5:30:2f:63:9e:af:0f:
49:4f:23:7d:b1:81:e6:9d:53:10:8b:e9:5c:e2:a5:
38:be:0b:8c:ab:4d:99:6d:ef:4e:fb:9b:66:6c:4a:
f7:55:0c:48:d7:40:13:85:28:d5:fc:34:4b:af:64:
a0:3c:fb:33:0e:f1:71:4f:5b:8c:b3:a4:b3:ad:e9:
2d:3f:d9:23:cc:9c:26:f0:68:4c:1f:29:87:cf:c9:
1d:ab:38:2f:77:7d:7e:7f:f2:2f:2f:d2:dd:0c:5f:
6c:51:f9:a2:b4:91:89:fb:3c:69:d0:20:e5:e4:6b:
bb:f3:d2:ee:95:57:86:28:38:38:0a:4f:93:00:56:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:33:2C:ED:46:96:EC:5E:2A:98:55:92:47:58:32:20:60:48:46
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:a1:b1:77:c7:cd:6f:e8:0b:02:42:5c:b6:10:f1:66:a3:
2d:b0:93:28:24:7e:ee:5f:5b:fd:41:f6:f8:76:72:69:76:4a:
b3:76:7e:39:97:5d:6f:d2:f5:3e:a0:a4:70:55:bd:70:af:2d:
35:ed:35:7b:0a:57:60:4b:9d:79:38:8a:97:ff:99:49:3d:80:
7f:d4:bc:dd:75:dd:d7:79:19:af:07:33:b0:fb:81:dc:ea:60:
32:c8:ce:43:15:e2:08:72:aa:0a:d3:1a:35:ec:d5:2c:74:6f:
83:ce:08:22:4a:0a:a7:3e:bc:6f:6b:20:45:90:96:3d:5d:9b:
b8:d3:db:b1:34:6a:36:93:43:4e:c1:34:28:29:4a:cf:1b:58:
a6:cb:a7:21:b2:5f:36:ec:f0:d6:67:fe:bf:d9:fc:d4:98:4f:
8c:07:ff:df:b1:63:a5:fe:84:d7:19:39:69:1e:3c:93:54:09:
bc:68:4e:a0:8d:a9:24:46:64:71:e1:35:49:d0:cb:0e:28:1d:
6a:85:ce:01:06:d6:8a:58:5d:9d:77:2a:10:58:5b:c3:60:93:
0e:d8:40:80:43:39:13:9a:90:cd:1d:71:4a:7e:40:92:3d:9d:
ed:ed:2c:43:fd:73:45:6b:60:d6:33:27:d0:b5:d9:d4:cf:13:
19:81:8f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92V+kGJU3c0AKJyFqgYmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy
MWEyMTAwHhcNMjUxMDE5MTkwMTQ1WhcNMjUxMDIwMTkwMTQ1WjAzMTEwLwYDVQQD
Eyg0OGI4MzMyY2VkNDY5NmVjNWUyYTk4NTU5MjQ3NTgzMjIwNjA0ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcABx9RxeHasng1aRUwssyuuY9xD
GA6Qqky0pgRcKLYng/zoL+XoC92RwwSn7qUmJVGI4/5lJW+xVt02NtFlzqWjby5K
3mIEv4cb+6/V0yN2avwZPLWyGlTkPEunlwVQ8tmpGMQOVzgk4hYO+hF1B9aPnl4P
MQBgoUIZTXu34OUwL2Oerw9JTyN9sYHmnVMQi+lc4qU4vguMq02Zbe9O+5tmbEr3
VQxI10AThSjV/DRLr2SgPPszDvFxT1uMs6SzrektP9kjzJwm8GhMHymHz8kdqzgv
d31+f/IvL9LdDF9sUfmitJGJ+zxp0CDl5Gu789LulVeGKDg4Ck+TAFYhQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi4MyztRpbsXiqYVZJHWDIgYEhGMB8GA1UdIwQY
MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt
ODViNjViYWNkNGZiLzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi
LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDChsXfH
zW/oCwJCXLYQ8WajLbCTKCR+7l9b/UH2+HZyaXZKs3Z+OZddb9L1PqCkcFW9cK8t
Ne01ewpXYEudeTiKl/+ZST2Af9S83XXd13kZrwczsPuB3OpgMsjOQxXiCHKqCtMa
NezVLHRvg84IIkoKpz68b2sgRZCWPV2buNPbsTRqNpNDTsE0KClKzxtYpsunIbJf
Nuzw1mf+v9n81JhPjAf/37Fjpf6E1xk5aR48k1QJvGhOoI2pJEZkceE1SdDLDigd
aoXOAQbWilhdnXcqEFhbw2CTDthAgEM5E5qQzR1xSn5Akj2d7e0sQ/1zRWtg1jMn
0LXZ1M8TGYGPrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:32 2025 by rpki-client