Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: hgYeEXAMz6Ari8L7Oo5S7xIdn/6Djmen5fTqfj7c7JQ=
Subject key identifier: 30:D7:E7:D5:69:1A:2F:8A:EC:60:2E:E3:6F:9E:59:A4:0D:09:B0:28
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 019A1D9A6DC6272084A9AD7B6E428B3D1F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 23:00:51 +0000
Manifest this update: Sat 25 Oct 2025 23:00:51 +0000
Manifest next update: Sun 26 Oct 2025 23:00:51 +0000
Files and hashes: 1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: wvphmcueoLr0Y1EphilSMiAeorAy1xYLcqpdFN3qV4g=)
3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:6d:c6:27:20:84:a9:ad:7b:6e:42:8b:3d:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Oct 25 23:00:51 2025 GMT
Not After : Oct 26 23:00:51 2025 GMT
Subject: CN=30d7e7d5691a2f8aec602ee36f9e59a40d09b028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:29:50:66:b4:db:cf:5a:ad:ee:e5:c5:da:
03:6e:3a:da:ef:c9:91:d9:99:8a:55:81:97:7d:2b:
87:12:c7:1c:ce:90:8f:43:dc:a0:75:06:13:f8:f7:
a9:bc:d3:eb:31:52:5b:5a:02:dc:39:f1:20:91:b6:
bd:ce:e3:f5:41:1e:91:68:b0:86:63:ee:c4:72:b3:
79:38:72:ca:a8:24:7c:d7:09:6e:41:17:94:eb:01:
6f:fd:bb:05:a4:dc:10:b3:9d:8c:52:0c:99:c2:41:
94:88:a0:fd:ac:2d:45:42:a9:86:da:6d:3a:66:f1:
91:90:17:29:89:69:14:b8:db:6d:d2:86:7b:b4:52:
31:98:16:9b:35:91:41:89:28:28:48:c7:49:0c:4f:
b5:aa:11:e9:4c:07:ae:25:58:87:7c:7c:e5:be:10:
d0:df:5f:91:1e:44:89:b8:c8:20:f9:2d:27:bf:4f:
db:fe:9f:0f:a2:33:68:c6:ce:82:da:e4:35:ee:d7:
5e:bf:4b:93:7d:74:10:3a:fd:43:ec:97:df:19:7f:
71:b4:7b:61:aa:ab:d4:51:c0:89:94:de:22:a5:d0:
22:60:83:ac:f5:9e:cd:6c:ca:d0:5e:be:12:e3:f9:
8b:a0:84:26:5d:b0:9c:ba:63:47:88:f1:b9:91:5e:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:E7:D5:69:1A:2F:8A:EC:60:2E:E3:6F:9E:59:A4:0D:09:B0:28
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a7:23:7f:c1:82:02:2c:7c:a7:a6:5f:69:6e:71:d4:c4:27:
97:41:1b:f4:a5:42:9d:e1:16:c3:fc:e1:63:1e:44:f5:a1:5f:
fb:7a:47:3e:ba:42:c9:10:b5:e9:e0:43:f9:79:0d:b3:00:a2:
15:58:6f:62:ab:3d:64:20:de:10:5b:04:5e:18:55:93:e8:52:
f5:2f:2c:ff:0d:51:7f:2e:c4:b9:51:0b:34:e9:4a:d6:22:36:
6e:ce:b8:65:b0:3c:c5:60:c4:3c:fa:b3:6c:3c:fc:d8:20:ca:
e9:a1:57:32:f4:7f:82:4a:b8:4e:3a:64:13:63:80:e3:b0:7e:
ee:2b:7c:bf:f9:32:ef:d4:5f:ce:c2:64:ee:6a:75:02:a7:50:
e2:97:b5:65:7d:03:2a:60:99:27:7f:6b:2e:04:e1:4e:88:ed:
2e:84:29:4c:e2:69:78:11:7c:d7:80:a4:a8:b9:d7:4a:04:4f:
37:38:29:38:7b:49:e2:44:95:cb:0d:22:3e:6f:01:2c:0c:27:
7f:8c:25:f2:73:3a:66:0e:f3:4d:bc:62:99:b3:58:13:80:5b:
7c:8d:fa:92:0f:9c:f4:24:55:b2:3c:8d:77:63:1a:57:06:76:
e3:99:76:b3:34:49:73:9a:8f:d3:b7:f4:34:ec:60:08:e3:af:
fb:66:6c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmm3GJyCEqa17bkKLPR9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDc4NTc5MWUwNzY0NmY1Y2M1OGIxNWU4NjQzNGNiOWMy
NDE0OWQwHhcNMjUxMDI1MjMwMDUxWhcNMjUxMDI2MjMwMDUxWjAzMTEwLwYDVQQD
EygzMGQ3ZTdkNTY5MWEyZjhhZWM2MDJlZTM2ZjllNTlhNDBkMDliMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYpUGa0289are7lxdoDbjra78mR
2ZmKVYGXfSuHEscczpCPQ9ygdQYT+PepvNPrMVJbWgLcOfEgkba9zuP1QR6RaLCG
Y+7EcrN5OHLKqCR81wluQReU6wFv/bsFpNwQs52MUgyZwkGUiKD9rC1FQqmG2m06
ZvGRkBcpiWkUuNtt0oZ7tFIxmBabNZFBiSgoSMdJDE+1qhHpTAeuJViHfHzlvhDQ
31+RHkSJuMgg+S0nv0/b/p8PojNoxs6C2uQ17tdev0uTfXQQOv1D7JffGX9xtHth
qqvUUcCJlN4ipdAiYIOs9Z7NbMrQXr4S4/mLoIQmXbCcumNHiPG5kV75dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDX59VpGi+K7GAu42+eWaQNCbAoMB8GA1UdIwQY
MBaAFLhHhXkeB2RvXMWLFehkNMucJBSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmIt
MGRjMzNhY2MxZGJhLzEvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmItMGRjMzNhY2MxZGJh
LzEvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKcjf8GC
Aix8p6ZfaW5x1MQnl0Eb9KVCneEWw/zhYx5E9aFf+3pHPrpCyRC16eBD+XkNswCi
FVhvYqs9ZCDeEFsEXhhVk+hS9S8s/w1Rfy7EuVELNOlK1iI2bs64ZbA8xWDEPPqz
bDz82CDK6aFXMvR/gkq4TjpkE2OA47B+7it8v/ky79RfzsJk7mp1AqdQ4pe1ZX0D
KmCZJ39rLgThTojtLoQpTOJpeBF814CkqLnXSgRPNzgpOHtJ4kSVyw0iPm8BLAwn
f4wl8nM6Zg7zTbximbNYE4BbfI36kg+c9CRVsjyNd2MaVwZ245l2szRJc5qP07f0
NOxgCOOv+2ZsKA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:15:04 2025 by rpki-client