Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: OsHiqplt5746y0dGhzEzbIYOV5rgZOoZrelssP/eYDs=
Subject key identifier: 3B:00:E6:76:97:E6:7A:AA:B6:52:F3:3B:6F:74:F9:3A:1D:E1:BB:31
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019A0B25A8A66CE4F7D443DC64E56156C532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 16F1
Signing time: Wed 22 Oct 2025 09:00:08 +0000
Manifest this update: Wed 22 Oct 2025 09:00:08 +0000
Manifest next update: Thu 23 Oct 2025 09:00:08 +0000
Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=)
2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: FN/nsI3iK25PcSrFAL6dpahQx3e2crILLaHS84MLiEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 09:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:25:a8:a6:6c:e4:f7:d4:43:dc:64:e5:61:56:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Oct 22 09:00:08 2025 GMT
Not After : Oct 23 09:00:08 2025 GMT
Subject: CN=3b00e67697e67aaab652f33b6f74f93a1de1bb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:dc:03:33:35:d0:be:ca:e5:81:e2:82:50:
2c:a7:16:d7:65:28:65:b9:04:ea:b9:b3:16:41:d4:
b4:f9:4c:f4:e6:ee:6b:ba:d2:e9:78:d7:05:e7:a1:
1e:db:8f:51:56:4e:bf:af:81:93:4c:83:32:db:e2:
c6:86:3e:f7:8c:7e:7c:e0:0b:b3:5d:4e:79:0f:cf:
53:0d:03:b0:e7:e6:76:f8:80:36:24:fd:6a:7b:f4:
e0:d7:52:8e:39:62:d2:98:73:97:7a:26:c1:e9:b9:
0c:aa:cf:e5:9c:f1:1f:4b:41:d9:d3:98:52:82:90:
b1:2a:cc:df:af:1d:3f:09:d3:31:16:0e:4c:f0:0c:
e8:f9:ab:8c:7d:f4:7b:8e:50:14:21:07:42:79:92:
eb:fe:15:70:5b:71:df:80:94:3c:83:a7:96:3c:2e:
64:b2:28:d8:74:46:26:09:41:96:78:00:d0:70:b7:
1a:21:92:fb:4e:7f:3c:4d:e1:30:79:d1:33:33:5b:
0b:58:a6:37:91:60:07:7a:72:bc:09:04:e8:36:d6:
59:62:a7:a3:c7:64:05:50:fb:0f:b3:4f:54:36:f8:
f4:bc:cb:8a:1c:50:45:36:e3:62:73:c5:1d:97:98:
19:c7:29:fe:3e:28:1f:fa:88:d6:cf:08:06:ab:5a:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:E6:76:97:E6:7A:AA:B6:52:F3:3B:6F:74:F9:3A:1D:E1:BB:31
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:bc:30:cc:7b:35:ef:a5:76:4a:cb:dc:a4:96:31:9b:32:
7b:d6:c6:b5:10:70:5d:4d:c8:96:67:9e:46:3f:5d:33:f1:b4:
3b:f7:30:d1:7d:7b:75:cb:8e:29:d5:8c:d6:c1:42:e3:50:65:
db:0f:82:78:c0:3b:ce:d6:17:23:6c:07:b1:e7:e9:a8:d7:bf:
c3:84:7d:bc:29:8a:44:00:6d:73:a8:ac:76:3c:0a:69:1f:eb:
ba:b6:0a:25:a1:94:3d:64:e6:52:54:25:03:c4:98:c1:51:03:
62:bd:0f:bd:c6:52:1f:f8:6d:ea:19:3d:09:17:c4:f2:82:04:
26:0c:d4:db:22:ea:bf:ae:d0:2c:73:79:5f:db:ac:62:62:ab:
77:c1:a0:f2:58:c1:a4:3c:9b:87:a1:f8:0b:54:20:67:d2:b2:
26:56:6b:8f:5b:d1:e1:c4:8e:5d:7d:d1:20:1d:f5:a2:37:c8:
bf:c8:7c:88:60:ea:ca:89:05:7d:a2:cf:0b:3a:02:f7:ea:a2:
cb:6f:64:69:7f:79:eb:d8:f1:ba:06:aa:13:09:08:b9:8a:fa:
e4:cc:6a:f5:c2:5f:63:1e:9f:c7:84:bb:8c:be:a0:95:a0:f4:
34:0c:a2:05:87:a3:97:92:0f:cf:c6:98:06:81:55:bd:ca:d8:
e1:14:79:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLJaimbOT31EPcZOVhVsUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5
NGVlYzMwHhcNMjUxMDIyMDkwMDA4WhcNMjUxMDIzMDkwMDA4WjAzMTEwLwYDVQQD
EygzYjAwZTY3Njk3ZTY3YWFhYjY1MmYzM2I2Zjc0ZjkzYTFkZTFiYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu3cAzM10L7K5YHiglAspxbXZShl
uQTqubMWQdS0+Uz05u5rutLpeNcF56Ee249RVk6/r4GTTIMy2+LGhj73jH584Auz
XU55D89TDQOw5+Z2+IA2JP1qe/Tg11KOOWLSmHOXeibB6bkMqs/lnPEfS0HZ05hS
gpCxKszfrx0/CdMxFg5M8Azo+auMffR7jlAUIQdCeZLr/hVwW3HfgJQ8g6eWPC5k
sijYdEYmCUGWeADQcLcaIZL7Tn88TeEwedEzM1sLWKY3kWAHenK8CQToNtZZYqej
x2QFUPsPs09UNvj0vMuKHFBFNuNic8Udl5gZxyn+Pigf+ojWzwgGq1qekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsA5naX5nqqtlLzO290+Tod4bsxMB8GA1UdIwQY
MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt
MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm
LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuu8MMx7
Ne+ldkrL3KSWMZsye9bGtRBwXU3IlmeeRj9dM/G0O/cw0X17dcuOKdWM1sFC41Bl
2w+CeMA7ztYXI2wHsefpqNe/w4R9vCmKRABtc6isdjwKaR/rurYKJaGUPWTmUlQl
A8SYwVEDYr0PvcZSH/ht6hk9CRfE8oIEJgzU2yLqv67QLHN5X9usYmKrd8Gg8ljB
pDybh6H4C1QgZ9KyJlZrj1vR4cSOXX3RIB31ojfIv8h8iGDqyokFfaLPCzoC9+qi
y29kaX9569jxugaqEwkIuYr65Mxq9cJfYx6fx4S7jL6glaD0NAyiBYejl5IPz8aY
BoFVvcrY4RR5KQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:55:28 2025 by rpki-client