Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: EQOG5rfr/e9d3chDS7MBAgv7llNcuaqRpgiw13Ch/g4=
Subject key identifier: 90:AA:F0:EE:9C:16:4C:26:DD:9C:5B:DB:C9:D1:85:4B:F2:CD:DE:06
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019A1A2B5B08D6F7C2EDB710FD97B15C4822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 07:00:40 +0000
Manifest this update: Sat 25 Oct 2025 07:00:40 +0000
Manifest next update: Sun 26 Oct 2025 07:00:40 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: zpqUa4UWJvGqqp5smVAMJeo8zjoHwsxMhvVpJ4sTwdI=)
2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:5b:08:d6:f7:c2:ed:b7:10:fd:97:b1:5c:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Oct 25 07:00:40 2025 GMT
Not After : Oct 26 07:00:40 2025 GMT
Subject: CN=90aaf0ee9c164c26dd9c5bdbc9d1854bf2cdde06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:4f:01:25:23:b3:b4:06:14:f6:d8:db:1b:
37:31:6e:7f:7c:5e:67:d9:dc:fa:86:74:45:d3:f4:
41:de:4a:07:c3:17:b5:5a:17:6e:25:09:2b:97:e1:
0d:e3:6e:df:99:2f:ce:c8:0b:cf:42:00:c8:ab:ea:
48:2a:e3:08:e9:f3:1d:c7:c7:2f:9b:ca:4d:7e:94:
82:b4:87:a4:f0:a0:0b:04:f1:3a:d6:2f:fe:b5:37:
61:26:0f:45:a5:c9:95:51:58:87:d0:51:9b:a0:a7:
de:29:48:8c:9a:2f:e5:55:ee:ea:bd:ec:a7:37:d6:
c1:3b:05:bd:c3:7d:6b:ee:34:2b:36:68:b1:f9:17:
f4:2d:b6:89:c4:b4:24:1a:25:90:6e:d4:24:d7:a1:
92:86:b8:67:42:c2:96:1a:14:d0:1c:da:f6:36:26:
b5:36:d1:bd:25:bc:ee:db:72:fd:3b:b2:15:b3:45:
a8:87:3c:67:df:12:d8:63:d3:89:51:d5:b1:33:e2:
03:d5:f0:eb:4f:50:af:3b:de:5e:a8:c8:c6:5b:a8:
13:74:44:e9:b7:69:29:de:95:e6:b5:66:00:21:ac:
e8:43:e6:34:27:0b:43:cd:3d:b8:f4:9d:9c:f8:0f:
21:9a:db:c1:33:14:5a:95:0e:f5:dc:1b:30:56:cd:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:F0:EE:9C:16:4C:26:DD:9C:5B:DB:C9:D1:85:4B:F2:CD:DE:06
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:d7:b5:a3:73:79:97:72:a0:23:1f:9a:48:3c:b5:7b:32:
3b:13:2f:e9:c4:f9:9a:fa:42:b7:e1:32:53:4f:b7:f9:09:c0:
d0:ee:56:45:be:85:c3:db:6d:74:62:aa:44:c0:0e:c1:df:6e:
15:c5:50:84:f6:dd:c0:55:dc:be:f2:d8:2c:14:97:be:12:dd:
20:12:01:2b:b9:01:86:26:85:84:95:6d:4a:9d:6a:83:a3:37:
09:2a:d7:c7:8e:79:3a:80:74:79:b6:37:85:83:96:49:ee:7a:
96:d8:b6:2a:21:88:7f:37:db:8d:93:1e:7c:ca:55:a4:bd:c9:
dc:50:15:91:5a:fa:86:5f:0a:92:f6:9f:4c:a0:b4:a8:f7:4b:
4a:2c:bf:26:59:8d:37:06:0e:47:3d:5c:34:15:b0:fd:9c:d8:
23:7d:24:0d:f0:d7:06:3e:c9:39:d4:07:d5:b7:e7:ab:50:65:
93:d4:6f:10:b5:6b:0c:d8:af:8a:4f:a4:b1:88:6d:e7:34:fa:
82:f7:74:fa:5e:d5:56:a7:e7:7a:23:62:59:59:80:4a:89:a7:
95:ba:8c:ad:1e:05:99:26:28:7a:c3:40:5a:1f:af:8a:3d:3e:
03:f3:00:83:68:02:2a:88:95:5f:1d:f0:7e:0b:f9:89:8a:d1:
e1:3e:e4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaK1sI1vfC7bcQ/ZexXEgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjUxMDI1MDcwMDQwWhcNMjUxMDI2MDcwMDQwWjAzMTEwLwYDVQQD
Eyg5MGFhZjBlZTljMTY0YzI2ZGQ5YzViZGJjOWQxODU0YmYyY2RkZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkolPASUjs7QGFPbY2xs3MW5/fF5n
2dz6hnRF0/RB3koHwxe1WhduJQkrl+EN427fmS/OyAvPQgDIq+pIKuMI6fMdx8cv
m8pNfpSCtIek8KALBPE61i/+tTdhJg9FpcmVUViH0FGboKfeKUiMmi/lVe7qveyn
N9bBOwW9w31r7jQrNmix+Rf0LbaJxLQkGiWQbtQk16GShrhnQsKWGhTQHNr2Nia1
NtG9Jbzu23L9O7IVs0Wohzxn3xLYY9OJUdWxM+ID1fDrT1CvO95eqMjGW6gTdETp
t2kp3pXmtWYAIazoQ+Y0JwtDzT249J2c+A8hmtvBMxRalQ713BswVs1SjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCq8O6cFkwm3Zxb28nRhUvyzd4GMB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreDXtaNz
eZdyoCMfmkg8tXsyOxMv6cT5mvpCt+EyU0+3+QnA0O5WRb6Fw9ttdGKqRMAOwd9u
FcVQhPbdwFXcvvLYLBSXvhLdIBIBK7kBhiaFhJVtSp1qg6M3CSrXx455OoB0ebY3
hYOWSe56lti2KiGIfzfbjZMefMpVpL3J3FAVkVr6hl8KkvafTKC0qPdLSiy/JlmN
NwYORz1cNBWw/ZzYI30kDfDXBj7JOdQH1bfnq1Blk9RvELVrDNivik+ksYht5zT6
gvd0+l7VVqfneiNiWVmASomnlbqMrR4FmSYoesNAWh+vij0+A/MAg2gCKoiVXx3w
fgv5iYrR4T7kzA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:06:06 2025 by rpki-client