Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: cGdtxlVGMiCKMOgPiSkR8jK5ryXbL4nDbeG7ZGoZRgo=
Subject key identifier: 98:5D:A1:BA:A3:55:A4:ED:E1:83:22:96:1C:47:D5:95:E2:20:B8:39
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019A21E4DECE28036097F1FC97EF99D366F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 19:00:38 +0000
Manifest this update: Sun 26 Oct 2025 19:00:38 +0000
Manifest next update: Mon 27 Oct 2025 19:00:38 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: aGPOpaSkLY7CKltkCD6C1j8rpx3agi8XG9o3+6dpDCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:de:ce:28:03:60:97:f1:fc:97:ef:99:d3:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Oct 26 19:00:38 2025 GMT
Not After : Oct 27 19:00:38 2025 GMT
Subject: CN=985da1baa355a4ede18322961c47d595e220b839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:c0:c9:2f:07:26:46:93:6d:76:c8:31:47:
aa:de:eb:ff:a3:57:d8:f7:73:b1:ac:9e:90:48:f9:
27:ea:97:1f:23:0d:b5:1c:ae:79:8c:6b:6d:8a:d6:
60:e2:e9:72:40:d4:d9:42:ca:7b:35:a1:a6:a7:49:
cd:eb:3f:a1:5e:89:44:f8:95:0e:c7:08:16:c3:d6:
d1:d1:a5:0a:6f:4b:4b:d4:cf:b0:ab:44:18:3a:5c:
a8:34:4e:9e:5e:5d:6c:61:47:bc:74:b6:49:91:03:
8a:7e:ce:58:f3:37:09:d7:46:24:da:8d:8d:0e:db:
07:9c:36:e4:32:e2:b0:78:97:27:2b:00:47:5f:8a:
46:43:6b:36:ea:e0:c0:db:5b:12:66:79:59:df:dc:
46:97:0a:ff:27:a8:20:e7:90:a5:99:66:26:c8:a8:
de:44:24:29:4b:9c:69:fd:ed:e5:18:74:01:95:cc:
e7:0b:ae:8e:43:af:02:dd:dd:97:53:bd:b9:53:0d:
fb:2d:18:f8:90:9e:ed:ac:7b:3e:4f:93:55:3c:24:
df:0e:0c:32:66:23:d6:99:f0:72:e5:65:e9:66:49:
61:33:6e:b4:a5:1a:73:a6:98:28:4f:d7:71:67:de:
31:14:62:56:05:47:b0:c4:0a:f0:76:90:0f:73:5b:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:A1:BA:A3:55:A4:ED:E1:83:22:96:1C:47:D5:95:E2:20:B8:39
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:95:48:d2:be:87:8e:7c:e7:9a:70:87:00:de:60:ec:ca:
7b:27:66:b4:e5:4d:3a:10:3a:c5:d3:41:5b:73:dc:dd:a3:08:
98:c0:d5:3f:e7:6b:8a:4f:61:0b:37:2f:bd:da:28:15:bd:2b:
70:46:ce:79:82:f3:c4:b2:31:1c:49:b0:af:4b:31:f6:35:59:
55:ea:58:34:4d:9e:50:76:23:e8:68:77:e9:f1:02:8d:ab:a9:
89:74:f5:27:63:06:bb:ce:57:0a:ab:e2:ba:f8:8c:e9:62:e3:
b9:f9:16:b0:ae:55:d2:bc:8f:1b:2c:54:ad:3b:8a:b5:83:b2:
4e:42:84:3e:a8:81:d5:bf:60:39:fe:8b:47:17:99:1e:84:13:
c4:f4:1f:8d:b7:17:b6:62:ff:a3:a2:63:73:58:16:02:c0:bb:
f3:a8:18:ed:e9:f3:8b:b1:02:15:c0:3a:50:06:26:d5:93:a2:
47:ad:7c:8d:87:9e:43:4d:65:4b:dd:b9:91:dd:9b:9b:c2:7a:
2f:5c:b4:9e:f5:f1:b0:42:7a:11:0e:10:47:b6:2a:b5:67:90:
81:8d:c0:99:59:b6:e2:51:62:86:4f:8c:df:1d:3d:e1:43:32:
cc:15:82:ef:03:06:81:f8:33:32:c1:55:75:0e:e8:34:a6:13:
55:f3:a0:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5N7OKANgl/H8l++Z02b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz
M2I3OGIwHhcNMjUxMDI2MTkwMDM4WhcNMjUxMDI3MTkwMDM4WjAzMTEwLwYDVQQD
Eyg5ODVkYTFiYWEzNTVhNGVkZTE4MzIyOTYxYzQ3ZDU5NWUyMjBiODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoObAyS8HJkaTbXbIMUeq3uv/o1fY
93OxrJ6QSPkn6pcfIw21HK55jGttitZg4ulyQNTZQsp7NaGmp0nN6z+hXolE+JUO
xwgWw9bR0aUKb0tL1M+wq0QYOlyoNE6eXl1sYUe8dLZJkQOKfs5Y8zcJ10Yk2o2N
DtsHnDbkMuKweJcnKwBHX4pGQ2s26uDA21sSZnlZ39xGlwr/J6gg55ClmWYmyKje
RCQpS5xp/e3lGHQBlcznC66OQ68C3d2XU725Uw37LRj4kJ7trHs+T5NVPCTfDgwy
ZiPWmfBy5WXpZklhM260pRpzppgoT9dxZ94xFGJWBUewxArwdpAPc1s9owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhdobqjVaTt4YMilhxH1ZXiILg5MB8GA1UdIwQY
MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt
YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5
LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+uVSNK+
h45855pwhwDeYOzKeydmtOVNOhA6xdNBW3Pc3aMImMDVP+drik9hCzcvvdooFb0r
cEbOeYLzxLIxHEmwr0sx9jVZVepYNE2eUHYj6Gh36fECjaupiXT1J2MGu85XCqvi
uviM6WLjufkWsK5V0ryPGyxUrTuKtYOyTkKEPqiB1b9gOf6LRxeZHoQTxPQfjbcX
tmL/o6Jjc1gWAsC786gY7enzi7ECFcA6UAYm1ZOiR618jYeeQ01lS925kd2bm8J6
L1y0nvXxsEJ6EQ4QR7YqtWeQgY3AmVm24lFihk+M3x094UMyzBWC7wMGgfgzMsFV
dQ7oNKYTVfOgvA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:34 2025 by rpki-client