Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: ksZtFCjUB4lsaCYtn9f4PqtVfRM6NQPW3+NbMgJ5Wko=
Subject key identifier: 88:F8:A1:57:0E:14:2F:17:AA:36:82:D0:A5:E1:E1:BD:23:DD:EA:A6
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 019A1CBF1BCD33B821BBA84219C476A80650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 19:01:17 +0000
Manifest this update: Sat 25 Oct 2025 19:01:17 +0000
Manifest next update: Sun 26 Oct 2025 19:01:17 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: 91rUnN1f7itOA3RWI4TWknUd4drwdBl4IiuiUOL2qnM=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:1b:cd:33:b8:21:bb:a8:42:19:c4:76:a8:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Oct 25 19:01:17 2025 GMT
Not After : Oct 26 19:01:17 2025 GMT
Subject: CN=88f8a1570e142f17aa3682d0a5e1e1bd23ddeaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:eb:c8:af:aa:45:70:89:fd:d1:84:4a:29:
ae:93:e5:b2:29:20:d8:7d:0c:a9:cc:95:0c:e4:e2:
6c:d4:19:49:cc:84:4a:93:f8:93:10:47:b2:51:cb:
89:b6:43:d5:2e:4b:40:17:13:33:a3:da:5c:05:45:
8f:09:40:16:9d:b4:72:98:05:6f:ef:8a:6f:7a:43:
ce:24:fb:e3:55:b3:94:f9:1d:8c:3a:4c:6f:9b:2a:
b3:c3:0b:e9:76:a9:d1:77:88:b6:6b:ed:a0:57:1d:
54:5c:ec:31:80:32:0a:c6:72:96:22:9c:eb:4e:5c:
16:1f:8c:7e:3b:4e:01:6c:54:71:fb:f0:f6:52:c9:
90:a0:8b:79:13:cf:8f:59:98:c3:57:ea:d6:67:2d:
ae:c3:34:ec:e7:eb:39:5b:2b:39:ac:ed:4f:70:2b:
9b:1a:63:a5:3f:59:69:1d:ab:fd:fb:a4:ad:5a:d2:
64:a0:99:a4:af:d6:4f:81:84:75:2d:1d:37:89:2a:
34:1c:c2:ed:e0:65:e4:83:52:1a:74:59:cd:a7:70:
f3:93:f9:74:9a:25:40:19:30:59:02:3b:c5:2e:be:
ca:fc:e5:31:99:f9:40:67:a7:a5:08:15:64:2e:2c:
8b:bd:89:0d:79:28:50:80:48:52:f0:39:95:dd:98:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:A1:57:0E:14:2F:17:AA:36:82:D0:A5:E1:E1:BD:23:DD:EA:A6
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:73:c5:fc:02:55:dd:1c:fa:02:c7:ae:85:43:03:b9:99:
5c:eb:85:f5:a2:4b:d4:9a:d4:bb:9d:36:ec:9b:16:82:d0:21:
87:3c:b0:f5:26:b0:ac:3d:61:d7:02:05:67:7d:c7:a2:91:09:
39:e6:1b:d8:4a:fb:59:d4:76:55:35:fe:65:65:4d:59:eb:0f:
b7:45:70:55:92:ce:16:e7:da:0f:95:7e:23:4b:7b:5e:e6:6f:
69:e9:b2:0a:ac:eb:ab:97:83:d1:8c:4d:2e:46:97:89:bd:9c:
06:ae:0f:a3:7e:5d:e0:e7:d4:99:6c:ff:cb:be:82:85:10:f2:
11:0f:c0:cc:0f:e9:f5:79:d1:e5:5e:a9:44:25:16:38:ea:3c:
a3:3a:05:12:01:72:bd:18:09:a1:a5:e7:b0:f1:e2:ec:f3:60:
05:77:d9:e2:74:f4:e2:36:d1:c0:0c:95:59:0b:99:da:8e:4a:
d3:2d:1e:14:30:dd:7b:38:6f:5c:53:86:31:ab:1f:0a:e4:76:
f8:94:8f:b8:29:81:2b:38:62:24:91:58:be:d5:c5:b0:57:b0:
17:43:8b:75:b9:02:ac:33:a2:8c:7f:f1:7b:8a:ae:a2:b9:19:
76:51:73:2f:0a:fc:26:99:9c:b1:cf:19:38:b1:c8:b3:cc:cf:
9f:15:c0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvxvNM7ghu6hCGcR2qAZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDZkNzU3NmNkMjgyNDVjNjc5ZjlhZjM1NzVjMDM1Yjhh
MjJjOWUwHhcNMjUxMDI1MTkwMTE3WhcNMjUxMDI2MTkwMTE3WjAzMTEwLwYDVQQD
Eyg4OGY4YTE1NzBlMTQyZjE3YWEzNjgyZDBhNWUxZTFiZDIzZGRlYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjryK+qRXCJ/dGESimuk+WyKSDY
fQypzJUM5OJs1BlJzIRKk/iTEEeyUcuJtkPVLktAFxMzo9pcBUWPCUAWnbRymAVv
74pvekPOJPvjVbOU+R2MOkxvmyqzwwvpdqnRd4i2a+2gVx1UXOwxgDIKxnKWIpzr
TlwWH4x+O04BbFRx+/D2UsmQoIt5E8+PWZjDV+rWZy2uwzTs5+s5Wys5rO1PcCub
GmOlP1lpHav9+6StWtJkoJmkr9ZPgYR1LR03iSo0HMLt4GXkg1IadFnNp3Dzk/l0
miVAGTBZAjvFLr7K/OUxmflAZ6elCBVkLiyLvYkNeShQgEhS8DmV3Zh+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj4oVcOFC8XqjaC0KXh4b0j3eqmMB8GA1UdIwQY
MBaAFK3W11ds0oJFxnn5rzV1wDW4oiyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDIt
ZGRiMDQ4NGE2ZGEyLzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDItZGRiMDQ4NGE2ZGEy
LzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMVzxfwC
Vd0c+gLHroVDA7mZXOuF9aJL1JrUu5027JsWgtAhhzyw9SawrD1h1wIFZ33HopEJ
OeYb2Er7WdR2VTX+ZWVNWesPt0VwVZLOFufaD5V+I0t7XuZvaemyCqzrq5eD0YxN
LkaXib2cBq4Po35d4OfUmWz/y76ChRDyEQ/AzA/p9XnR5V6pRCUWOOo8ozoFEgFy
vRgJoaXnsPHi7PNgBXfZ4nT04jbRwAyVWQuZ2o5K0y0eFDDdezhvXFOGMasfCuR2
+JSPuCmBKzhiJJFYvtXFsFewF0OLdbkCrDOijH/xe4quorkZdlFzLwr8Jpmcsc8Z
OLHIs8zPnxXALQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 01:29:08 2025 by rpki-client