Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: 81OaoQdqrUj9sLMTlwEu2cU9CMD/ET4z0uUZ1z92xS0=
Subject key identifier: 10:82:BE:26:F9:FC:09:97:0D:1F:DC:69:5D:7A:7D:6F:AA:9A:8E:9B
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 0199FDA1D52A04EA58527F2346FD3B91955F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 18:01:05 +0000
Manifest this update: Sun 19 Oct 2025 18:01:05 +0000
Manifest next update: Mon 20 Oct 2025 18:01:05 +0000
Files and hashes: 1: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: V/TMRf9DHpsyumi87y4moAw/BYKWpfffwv2Ggt40jJ8=)
2: aoaJWVMr3LsKp6dIyxA_4pNUFaI.roa (hash: t+OBdb8RsaFvnnVMtpxSRATSZxEyzbE7ET03LsrS4po=)
3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d5:2a:04:ea:58:52:7f:23:46:fd:3b:91:95:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Oct 19 18:01:05 2025 GMT
Not After : Oct 20 18:01:05 2025 GMT
Subject: CN=1082be26f9fc09970d1fdc695d7a7d6faa9a8e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:2f:f8:03:87:5c:d1:e4:78:59:c7:23:35:
41:23:d2:86:25:dc:82:80:62:13:b6:04:0d:c8:66:
9c:40:0c:8d:59:28:ec:70:99:f5:ea:89:32:80:3e:
da:4c:a2:0a:9d:a3:34:f4:73:91:61:74:67:5c:5e:
52:95:da:61:4d:2e:a6:60:e8:39:46:51:55:5c:4e:
52:2c:9f:81:42:e6:04:b5:71:6b:aa:db:cf:bf:ca:
ae:74:2a:10:c4:6b:cd:d0:36:69:21:a2:96:55:c6:
77:75:59:3f:53:f0:7f:76:63:c7:61:47:b7:ab:4c:
7a:51:16:df:da:5d:15:af:71:fb:ca:79:ab:37:40:
00:eb:7a:8b:32:1f:df:4b:34:c0:61:c4:d9:ab:78:
ea:fd:30:27:79:f3:ed:ff:7b:7a:5e:68:43:9c:73:
7f:e4:ed:40:5e:49:ad:7d:17:ef:e1:ce:34:2c:91:
3f:11:8f:83:b2:c6:7f:51:58:96:19:d9:93:07:df:
eb:4f:c0:de:58:d0:e3:1d:c1:73:d7:93:46:81:af:
4a:ff:72:2c:c9:7a:74:6a:5d:29:a5:c4:e4:55:5d:
13:a1:db:40:b0:90:63:77:aa:8f:b7:99:a7:b5:03:
f2:0a:1f:44:a5:d4:f3:66:74:1d:b3:2e:94:0a:d4:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:BE:26:F9:FC:09:97:0D:1F:DC:69:5D:7A:7D:6F:AA:9A:8E:9B
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:6a:39:2a:a9:70:73:34:b7:a9:d9:6a:69:94:d3:1e:f4:
af:fc:76:28:52:34:12:0a:7e:78:3a:93:db:af:9d:dd:37:27:
bb:21:59:94:d2:60:3a:66:26:5c:7b:66:5c:5f:7d:b8:19:9c:
4b:40:ec:72:46:46:2d:39:1d:a9:5f:41:1f:39:09:17:42:0f:
35:c4:88:9e:b8:c9:90:e0:c6:6c:04:97:cd:2d:d0:c6:c1:44:
1b:83:63:58:5f:3a:ad:07:96:5a:21:c7:45:84:80:e0:7e:97:
53:19:3d:ce:90:ae:87:3c:bf:0e:18:3d:23:a8:50:f3:eb:04:
b8:91:5d:4a:a8:87:6b:79:15:e8:ae:a5:f7:22:0d:1f:9b:73:
91:77:64:c5:f8:f2:ef:d3:4f:0b:c4:5d:cb:87:7c:82:4f:24:
b8:32:5d:76:53:a2:4d:c7:e0:c4:ab:d9:e4:96:b7:99:f2:17:
a0:82:65:ee:ce:0f:f1:dd:eb:82:79:ac:32:4c:ea:48:e6:ce:
27:82:38:10:0e:a3:7e:48:51:09:1d:b2:e6:e0:3d:e6:b1:ed:
db:f5:83:82:ca:fb:b8:ff:53:93:6d:59:00:55:61:74:da:55:
84:e0:0c:33:cc:96:95:5d:28:54:30:a4:26:e5:09:3f:62:33:
03:de:e0:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9odUqBOpYUn8jRv07kZVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjUxMDE5MTgwMTA1WhcNMjUxMDIwMTgwMTA1WjAzMTEwLwYDVQQD
EygxMDgyYmUyNmY5ZmMwOTk3MGQxZmRjNjk1ZDdhN2Q2ZmFhOWE4ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGov+AOHXNHkeFnHIzVBI9KGJdyC
gGITtgQNyGacQAyNWSjscJn16okygD7aTKIKnaM09HORYXRnXF5SldphTS6mYOg5
RlFVXE5SLJ+BQuYEtXFrqtvPv8qudCoQxGvN0DZpIaKWVcZ3dVk/U/B/dmPHYUe3
q0x6URbf2l0Vr3H7ynmrN0AA63qLMh/fSzTAYcTZq3jq/TAnefPt/3t6XmhDnHN/
5O1AXkmtfRfv4c40LJE/EY+DssZ/UViWGdmTB9/rT8DeWNDjHcFz15NGga9K/3Is
yXp0al0ppcTkVV0TodtAsJBjd6qPt5mntQPyCh9EpdTzZnQdsy6UCtRG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCCvib5/AmXDR/caV16fW+qmo6bMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm9qOSqp
cHM0t6nZammU0x70r/x2KFI0Egp+eDqT26+d3TcnuyFZlNJgOmYmXHtmXF99uBmc
S0DsckZGLTkdqV9BHzkJF0IPNcSInrjJkODGbASXzS3QxsFEG4NjWF86rQeWWiHH
RYSA4H6XUxk9zpCuhzy/Dhg9I6hQ8+sEuJFdSqiHa3kV6K6l9yINH5tzkXdkxfjy
79NPC8Rdy4d8gk8kuDJddlOiTcfgxKvZ5Ja3mfIXoIJl7s4P8d3rgnmsMkzqSObO
J4I4EA6jfkhRCR2y5uA95rHt2/WDgsr7uP9Tk21ZAFVhdNpVhOAMM8yWlV0oVDCk
JuUJP2IzA97gRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:58 2025 by rpki-client