Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: ZQ2LRXoqRN+gFb9fddY2Bcq8lhtUVAizFGpmjnhQ0LA=
Subject key identifier: DD:85:41:0D:A1:5D:BD:5B:EB:46:B2:B9:D3:67:27:9B:81:BD:92:17
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019A2365946C30173E88824BAD99021CDE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 02:00:50 +0000
Manifest this update: Mon 27 Oct 2025 02:00:50 +0000
Manifest next update: Tue 28 Oct 2025 02:00:50 +0000
Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=)
2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=)
3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: QBLEBXBgWz8o65Lpjuotk4or6CaGWuJt/qGvcCrQRxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:94:6c:30:17:3e:88:82:4b:ad:99:02:1c:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Oct 27 02:00:50 2025 GMT
Not After : Oct 28 02:00:50 2025 GMT
Subject: CN=dd85410da15dbd5beb46b2b9d367279b81bd9217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:ab:76:d1:6b:8f:bc:2a:74:4a:3b:98:26:
c7:64:43:c6:25:ff:2e:24:48:4b:a2:08:48:47:34:
67:ae:f4:24:20:25:2a:20:4c:f3:64:25:2f:3c:ac:
1c:30:af:81:ab:ab:50:ed:cb:31:ab:a2:f7:c8:2a:
27:c2:ec:ac:de:51:2b:a2:05:9f:5b:d5:80:54:44:
64:f5:b2:4c:8d:cd:1c:f0:0d:98:61:c2:cf:31:c6:
45:3c:fa:05:3a:b9:d4:aa:e0:ab:f3:0b:e0:73:d4:
6d:57:67:fe:13:ae:cf:20:90:4b:dd:ba:29:7c:14:
bd:7a:5a:a8:80:b2:c8:c9:97:37:06:50:0e:8f:18:
26:f5:54:5b:01:fe:f3:9e:4d:f5:db:16:b9:c0:bb:
1f:50:dd:b3:9c:38:06:1a:ba:85:32:4d:11:ea:67:
e5:13:9f:72:61:42:5a:27:ce:04:0a:d5:98:a2:b8:
84:8e:f9:90:ad:a8:df:1e:71:d5:de:06:70:1e:d0:
42:4d:43:3e:f0:22:e7:23:96:cd:95:77:fd:63:df:
b3:3a:8a:c8:6a:79:c2:ea:15:8f:63:74:54:e8:8a:
59:ac:78:e4:5e:0c:18:5d:ce:6a:20:47:ad:e5:dd:
57:1e:5f:41:84:e3:dc:33:ee:68:40:3d:34:7b:fd:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:41:0D:A1:5D:BD:5B:EB:46:B2:B9:D3:67:27:9B:81:BD:92:17
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:75:fd:11:ee:67:6a:d5:a9:f3:0f:bf:d8:b6:ed:66:d6:
74:c9:7b:2e:84:42:82:f7:62:01:26:11:48:9e:bb:af:a9:5e:
e9:e1:0a:1a:2d:68:97:91:25:77:96:48:91:54:49:d4:68:88:
b0:f3:ef:f4:0e:66:2f:69:61:78:f6:7f:c0:45:73:1e:84:ad:
c3:09:17:73:2a:33:5e:9c:2e:43:66:39:98:77:f0:5d:ce:70:
0e:da:c2:d8:4e:10:0c:b2:f2:da:c3:6a:b8:39:f7:d6:47:a6:
b0:ae:04:24:c0:1f:67:5b:6c:0c:88:77:4d:f4:ab:54:19:f5:
38:72:a7:c5:fe:21:2d:83:a7:74:99:93:69:f7:94:5f:3d:d7:
15:1b:dd:95:8b:4e:fd:29:c1:87:f2:4d:78:2c:5e:fc:ae:73:
32:66:a1:b6:46:6a:b9:39:19:55:99:c1:d4:db:17:ec:fe:d8:
2f:0f:24:17:6a:8d:a8:5d:02:2d:9a:2c:d5:75:39:17:c2:98:
2f:83:b8:b2:75:0e:d0:15:03:53:97:da:ef:96:cc:9a:09:2a:
a1:b8:15:d2:a9:c1:a9:29:88:64:92:d0:57:e8:56:4b:33:64:
73:de:c3:42:a1:5b:0f:bc:71:4f:9e:0a:f9:5b:b0:59:96:c8:
7a:3a:78:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZZRsMBc+iIJLrZkCHN5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0
YjUyNDgwHhcNMjUxMDI3MDIwMDUwWhcNMjUxMDI4MDIwMDUwWjAzMTEwLwYDVQQD
EyhkZDg1NDEwZGExNWRiZDViZWI0NmIyYjlkMzY3Mjc5YjgxYmQ5MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PmrdtFrj7wqdEo7mCbHZEPGJf8u
JEhLoghIRzRnrvQkICUqIEzzZCUvPKwcMK+Bq6tQ7csxq6L3yConwuys3lErogWf
W9WAVERk9bJMjc0c8A2YYcLPMcZFPPoFOrnUquCr8wvgc9RtV2f+E67PIJBL3bop
fBS9elqogLLIyZc3BlAOjxgm9VRbAf7znk312xa5wLsfUN2znDgGGrqFMk0R6mfl
E59yYUJaJ84ECtWYoriEjvmQrajfHnHV3gZwHtBCTUM+8CLnI5bNlXf9Y9+zOorI
annC6hWPY3RU6IpZrHjkXgwYXc5qIEet5d1XHl9BhOPcM+5oQD00e/1QHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2FQQ2hXb1b60ayudNnJ5uBvZIXMB8GA1UdIwQY
MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et
N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5
LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3d1/RHu
Z2rVqfMPv9i27WbWdMl7LoRCgvdiASYRSJ67r6le6eEKGi1ol5Eld5ZIkVRJ1GiI
sPPv9A5mL2lhePZ/wEVzHoStwwkXcyozXpwuQ2Y5mHfwXc5wDtrC2E4QDLLy2sNq
uDn31kemsK4EJMAfZ1tsDIh3TfSrVBn1OHKnxf4hLYOndJmTafeUXz3XFRvdlYtO
/SnBh/JNeCxe/K5zMmahtkZquTkZVZnB1NsX7P7YLw8kF2qNqF0CLZos1XU5F8KY
L4O4snUO0BUDU5fa75bMmgkqobgV0qnBqSmIZJLQV+hWSzNkc97DQqFbD7xxT54K
+VuwWZbIejp41g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:46:35 2025 by rpki-client