Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: RutBDlO9zGGEmgwhQXU4/6LoFbK1SNjhumC6CVp1UQc=
Subject key identifier: E7:70:B8:5E:61:21:61:18:13:F9:0F:CB:69:E9:F2:F3:95:71:34:59
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019A270ADA6EBD0AAA9CEE4DE22230979358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 19:00:13 +0000
Manifest this update: Mon 27 Oct 2025 19:00:13 +0000
Manifest next update: Tue 28 Oct 2025 19:00:13 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: 668lISNEcsS+D72daP1OZZdrmJj1YLvbj0h/GtYobuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:da:6e:bd:0a:aa:9c:ee:4d:e2:22:30:97:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Oct 27 19:00:13 2025 GMT
Not After : Oct 28 19:00:13 2025 GMT
Subject: CN=e770b85e6121611813f90fcb69e9f2f395713459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:95:70:a9:7a:e9:5d:2b:e5:8d:49:8c:6a:
b8:bd:73:81:d9:45:6c:85:79:b9:fe:eb:d4:95:9b:
32:06:07:a2:2c:5e:cc:7a:1b:d2:a5:ed:3c:e5:56:
9e:d1:9a:8d:d5:3a:78:70:d0:b0:99:00:d5:ec:1f:
ac:77:64:75:d7:e9:01:af:61:87:39:b8:71:d1:2d:
51:d9:6b:f1:29:1e:7c:cf:92:29:b0:12:48:eb:8f:
45:18:49:85:89:ef:79:b1:85:f8:3d:46:37:29:26:
36:53:60:3c:ab:f1:95:d1:3c:da:53:5f:95:24:06:
24:28:bb:5a:69:4e:a2:a8:79:3a:9c:5f:bb:98:72:
94:da:5b:ee:bc:94:05:74:d1:e4:8d:99:f3:8b:96:
3f:85:0c:2a:46:32:85:54:1b:38:eb:cd:ce:51:42:
73:90:01:60:9b:29:6b:33:a7:c4:a0:0c:be:dc:26:
dd:ad:ba:f2:c6:aa:02:f2:8e:ae:be:45:ee:75:15:
45:34:5e:ad:91:92:f5:39:0d:d3:3f:07:48:5a:95:
bc:7b:d8:ef:83:9c:fc:0a:87:aa:af:34:90:ab:35:
48:cc:86:14:8f:2a:ca:dd:64:7d:74:f5:5c:40:46:
8f:7d:7f:18:69:62:dc:b5:7c:61:52:73:21:59:b1:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:B8:5E:61:21:61:18:13:F9:0F:CB:69:E9:F2:F3:95:71:34:59
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fe:76:6a:b4:6d:82:70:7c:8f:c6:f0:75:f7:99:31:7f:b9:
1d:e8:a3:00:88:89:eb:86:bc:49:05:a0:d4:c0:a2:7b:84:96:
ed:39:56:0b:58:1e:f6:95:e2:50:0b:67:ca:ae:4a:ee:db:30:
ca:15:d5:5e:7a:5c:4e:9b:61:a3:e7:68:86:d6:26:da:1d:4f:
7f:48:fd:02:79:cd:ba:25:d2:8e:21:ea:3b:5a:30:f6:39:cc:
5e:5a:39:8a:0f:86:e9:fc:77:22:11:f5:38:4a:8e:05:9c:42:
e4:72:e2:52:82:cb:7c:9a:a5:e4:db:d0:59:9e:ed:ce:79:63:
be:8e:dd:64:f7:f1:e7:47:9e:37:5c:f3:7e:22:c9:57:5c:ee:
68:3f:5b:1f:f3:09:3f:6e:34:d0:91:e1:5c:14:fb:cd:40:c1:
17:7a:3d:fa:0a:74:13:20:a7:5f:fe:f0:5e:33:57:22:70:77:
c6:84:17:c2:7b:62:f0:ab:c0:37:c8:fd:46:ad:c1:7b:b6:55:
95:48:bd:96:12:72:21:9c:e6:a5:b1:f2:9f:19:1b:26:e7:86:
f2:6e:bc:aa:5d:1a:81:d0:95:44:d5:f1:c2:fa:74:41:9d:ed:
3b:c6:e7:04:02:83:f7:4a:83:b8:53:01:1a:0d:97:d0:11:2b:
c7:b5:8b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonCtpuvQqqnO5N4iIwl5NYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjUxMDI3MTkwMDEzWhcNMjUxMDI4MTkwMDEzWjAzMTEwLwYDVQQD
EyhlNzcwYjg1ZTYxMjE2MTE4MTNmOTBmY2I2OWU5ZjJmMzk1NzEzNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GyVcKl66V0r5Y1JjGq4vXOB2UVs
hXm5/uvUlZsyBgeiLF7MehvSpe085Vae0ZqN1Tp4cNCwmQDV7B+sd2R11+kBr2GH
Obhx0S1R2WvxKR58z5IpsBJI649FGEmFie95sYX4PUY3KSY2U2A8q/GV0TzaU1+V
JAYkKLtaaU6iqHk6nF+7mHKU2lvuvJQFdNHkjZnzi5Y/hQwqRjKFVBs4683OUUJz
kAFgmylrM6fEoAy+3CbdrbryxqoC8o6uvkXudRVFNF6tkZL1OQ3TPwdIWpW8e9jv
g5z8CoeqrzSQqzVIzIYUjyrK3WR9dPVcQEaPfX8YaWLctXxhUnMhWbFiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdwuF5hIWEYE/kPy2np8vOVcTRZMB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/52arRt
gnB8j8bwdfeZMX+5HeijAIiJ64a8SQWg1MCie4SW7TlWC1ge9pXiUAtnyq5K7tsw
yhXVXnpcTptho+dohtYm2h1Pf0j9AnnNuiXSjiHqO1ow9jnMXlo5ig+G6fx3IhH1
OEqOBZxC5HLiUoLLfJql5NvQWZ7tznljvo7dZPfx50eeN1zzfiLJV1zuaD9bH/MJ
P2400JHhXBT7zUDBF3o9+gp0EyCnX/7wXjNXInB3xoQXwnti8KvAN8j9Rq3Be7ZV
lUi9lhJyIZzmpbHynxkbJueG8m68ql0agdCVRNXxwvp0QZ3tO8bnBAKD90qDuFMB
Gg2X0BErx7WL+A==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:01:31 2025 by rpki-client