Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 0ZCktVJHJgTsQvIusq093tFAipss9Wlo1CK+uqmp1zE=
Subject key identifier: FC:40:AC:F7:75:FB:3B:51:71:EA:18:D9:3C:2E:3C:75:CF:57:2D:F3
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019A232E07F11F7C3F9190F3628889DA8F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 01:00:10 +0000
Manifest this update: Mon 27 Oct 2025 01:00:10 +0000
Manifest next update: Tue 28 Oct 2025 01:00:10 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: O1PcHqRYYuxYtfjxtpDSFpskl3pk187jeMZZpDwFozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:07:f1:1f:7c:3f:91:90:f3:62:88:89:da:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Oct 27 01:00:10 2025 GMT
Not After : Oct 28 01:00:10 2025 GMT
Subject: CN=fc40acf775fb3b5171ea18d93c2e3c75cf572df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:ff:37:c1:84:b9:fa:a5:24:94:9c:d4:8b:
1f:61:84:10:b5:03:2f:59:27:57:53:4f:d7:0a:6b:
fc:a3:c1:f5:89:8c:bd:a2:eb:5a:04:5a:89:04:68:
78:dd:b7:4b:d3:21:ca:5b:72:6b:dd:57:f3:df:1c:
77:ff:e6:31:1f:26:23:d9:b6:5e:8e:90:7d:06:09:
a4:f8:d5:b3:23:27:19:33:68:a6:d1:22:d0:12:65:
ab:bd:41:0d:3e:13:44:23:31:b3:ca:65:08:d8:b7:
16:51:94:86:a7:c8:1f:46:58:a0:85:ac:e2:8e:ed:
ed:d0:42:3f:16:c0:92:60:f8:20:91:b1:83:7b:a0:
c1:02:1e:fe:2b:27:30:83:8b:49:fb:1c:e0:98:ff:
f5:ee:b5:17:4b:09:71:a9:44:22:ed:34:77:73:40:
aa:92:5f:4a:fa:5b:bc:63:60:26:78:11:ae:52:79:
ea:19:63:02:c0:67:7b:8a:b9:20:12:b7:d6:05:06:
fd:26:50:86:b0:7f:a9:0e:38:50:11:b6:6a:f8:41:
e5:34:16:23:1b:58:c2:0a:ec:9d:8e:9c:03:70:b9:
ef:77:2d:43:51:02:f2:dc:3f:9f:04:e5:c7:3e:0b:
9e:d2:e8:07:8e:1d:af:ed:1a:d6:20:74:d5:d5:af:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:AC:F7:75:FB:3B:51:71:EA:18:D9:3C:2E:3C:75:CF:57:2D:F3
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:fe:b1:d7:91:c7:90:f7:23:2c:b6:8f:d9:72:7f:65:90:
fa:64:42:43:3d:cd:d4:79:c3:70:8c:8b:e4:f0:3c:47:b2:1b:
91:df:f3:4b:11:33:a6:4e:02:c2:d1:ef:cc:9a:ff:ba:2d:3f:
bd:0b:0e:48:6a:4d:c4:e2:44:0c:a4:ed:26:50:72:c7:19:44:
ea:5b:3c:bc:bc:6f:87:30:60:ab:ce:77:7c:95:5c:ee:99:e1:
fd:24:c7:35:e9:37:13:d7:39:eb:81:cb:12:8a:aa:f8:6a:4f:
fe:74:eb:c6:e1:54:b4:63:8c:b7:96:01:bf:b9:0d:2a:c1:ec:
2a:04:2e:2b:03:17:36:9f:77:18:94:5f:81:65:56:b3:49:8b:
43:ed:36:98:09:75:ca:89:a3:40:b2:8e:04:c1:dc:c3:df:09:
fc:4f:5e:e0:3c:05:ff:91:48:b6:ea:dd:1e:e4:f4:62:78:4a:
98:5b:3b:46:ec:97:e3:d2:00:8d:2b:47:4c:d5:d2:34:76:6f:
84:8c:b5:7e:09:f9:16:57:d2:ec:64:c2:1a:bb:f9:87:87:88:
fd:b9:00:a8:8a:c2:7a:e9:41:5d:8b:e0:8c:53:ec:8d:06:95:
b7:59:15:b3:74:51:d4:da:40:66:d0:eb:b9:f7:01:e5:b0:ff:
5c:d0:fe:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLgfxH3w/kZDzYoiJ2o8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjUxMDI3MDEwMDEwWhcNMjUxMDI4MDEwMDEwWjAzMTEwLwYDVQQD
EyhmYzQwYWNmNzc1ZmIzYjUxNzFlYTE4ZDkzYzJlM2M3NWNmNTcyZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5v/N8GEufqlJJSc1IsfYYQQtQMv
WSdXU0/XCmv8o8H1iYy9outaBFqJBGh43bdL0yHKW3Jr3Vfz3xx3/+YxHyYj2bZe
jpB9Bgmk+NWzIycZM2im0SLQEmWrvUENPhNEIzGzymUI2LcWUZSGp8gfRlighazi
ju3t0EI/FsCSYPggkbGDe6DBAh7+Kycwg4tJ+xzgmP/17rUXSwlxqUQi7TR3c0Cq
kl9K+lu8Y2AmeBGuUnnqGWMCwGd7irkgErfWBQb9JlCGsH+pDjhQEbZq+EHlNBYj
G1jCCuydjpwDcLnvdy1DUQLy3D+fBOXHPgue0ugHjh2v7RrWIHTV1a/MjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxArPd1+ztRceoY2TwuPHXPVy3zMB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbT+sdeR
x5D3Iyy2j9lyf2WQ+mRCQz3N1HnDcIyL5PA8R7Ibkd/zSxEzpk4CwtHvzJr/ui0/
vQsOSGpNxOJEDKTtJlByxxlE6ls8vLxvhzBgq853fJVc7pnh/STHNek3E9c564HL
Eoqq+GpP/nTrxuFUtGOMt5YBv7kNKsHsKgQuKwMXNp93GJRfgWVWs0mLQ+02mAl1
yomjQLKOBMHcw98J/E9e4DwF/5FIturdHuT0YnhKmFs7RuyX49IAjStHTNXSNHZv
hIy1fgn5FlfS7GTCGrv5h4eI/bkAqIrCeulBXYvgjFPsjQaVt1kVs3RR1NpAZtDr
ufcB5bD/XND+HQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:03 2025 by rpki-client