Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: M0T/qQYFIi1++Tx+UMwOjzW9w3o9OCpI7kEq+xm4Hs0=
Subject key identifier: 23:FB:2B:5B:46:0F:D5:5E:EA:8B:97:CA:46:43:50:2F:E9:38:49:5C
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 019A239C67F0CDB26C642A928EB7B0126AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 03:00:44 +0000
Manifest this update: Mon 27 Oct 2025 03:00:44 +0000
Manifest next update: Tue 28 Oct 2025 03:00:44 +0000
Files and hashes: 1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: HrYRL4iooXpSQi87LA2p5OWtp3qi1meHdCnEMjKQ9KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:67:f0:cd:b2:6c:64:2a:92:8e:b7:b0:12:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Oct 27 03:00:44 2025 GMT
Not After : Oct 28 03:00:44 2025 GMT
Subject: CN=23fb2b5b460fd55eea8b97ca4643502fe938495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:82:5b:ba:90:b0:2d:9b:66:67:e7:0e:92:
d4:8a:39:b8:b9:b8:bf:41:5f:52:e3:fc:5e:71:29:
0f:ad:4f:de:51:e9:55:7e:0a:23:b6:b2:d4:78:2c:
79:e9:8a:71:ab:02:60:b6:06:03:81:c1:53:e8:fd:
91:b7:f8:3c:fd:b9:94:4f:0e:17:85:38:03:1d:95:
ab:0a:bc:e3:8c:2c:df:0f:4f:f7:80:f6:ce:e6:1d:
18:87:f8:07:4b:51:43:31:66:60:3b:15:17:76:47:
74:cc:1a:f3:ce:ec:79:ed:77:f4:ec:5b:79:c5:51:
c8:21:a8:0c:48:51:be:1e:ae:15:0c:84:5e:a9:22:
34:b8:23:ae:1d:01:5d:ea:04:42:2b:e0:04:8b:10:
4a:eb:c9:70:e4:35:56:ad:dc:0d:93:69:4d:78:55:
30:b9:7f:3a:ea:b4:d0:6b:1b:6a:f6:8d:6f:f8:08:
0a:4d:22:29:34:e2:2a:9d:44:10:02:72:5e:62:24:
4d:61:39:ff:27:fb:53:26:44:2c:94:e9:13:9b:1c:
ac:10:db:ea:8a:7a:9b:d5:4d:3a:68:5e:d4:61:80:
3f:c2:58:09:55:e7:eb:d6:0b:50:bd:64:75:48:d0:
65:06:05:58:89:a3:55:c1:61:00:eb:8c:11:d0:7e:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:2B:5B:46:0F:D5:5E:EA:8B:97:CA:46:43:50:2F:E9:38:49:5C
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:54:d2:7c:f2:df:e2:f3:89:7d:4c:a0:83:b7:42:36:2e:88:
67:5b:60:29:48:ac:ef:42:8b:d2:19:2a:de:bc:e8:92:f3:fd:
ee:a1:44:3d:74:86:38:cb:5f:66:a3:95:13:37:62:24:2c:90:
63:f4:f5:d1:1c:cb:c3:0d:30:da:fc:12:e1:69:e4:21:cb:da:
7b:e3:5d:05:13:9d:ec:f6:9b:27:3d:13:ee:ed:4a:02:0e:df:
cb:da:9f:3e:c6:b2:6a:77:54:a7:d8:31:aa:a5:11:d0:c7:17:
77:08:9f:47:65:77:ee:f3:9e:94:48:80:44:8c:8d:5b:38:7b:
c4:08:a0:45:b0:07:78:4d:65:32:3f:8e:0f:30:48:cb:b6:81:
e8:ca:30:86:3a:4e:58:84:6e:d2:b7:a6:ab:1d:95:9b:e9:21:
d8:bc:22:30:8d:65:bb:04:68:68:0f:c4:6d:e9:ce:c4:14:9d:
fa:95:98:07:90:f0:fc:e1:96:1b:88:02:83:28:b1:8d:a6:67:
05:00:63:4c:9d:5b:1d:11:1e:28:e2:ef:75:61:b8:ae:db:13:
67:1f:0f:57:bf:9a:c1:14:63:7f:b4:cf:6f:49:1b:03:96:2a:
9f:ae:4e:e2:d1:ef:6e:3e:c0:5e:6a:84:65:bb:37:3e:9c:cb:
8d:6a:3b:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojnGfwzbJsZCqSjrewEmrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1
ZDFmODkwHhcNMjUxMDI3MDMwMDQ0WhcNMjUxMDI4MDMwMDQ0WjAzMTEwLwYDVQQD
EygyM2ZiMmI1YjQ2MGZkNTVlZWE4Yjk3Y2E0NjQzNTAyZmU5Mzg0OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVCCW7qQsC2bZmfnDpLUijm4ubi/
QV9S4/xecSkPrU/eUelVfgojtrLUeCx56YpxqwJgtgYDgcFT6P2Rt/g8/bmUTw4X
hTgDHZWrCrzjjCzfD0/3gPbO5h0Yh/gHS1FDMWZgOxUXdkd0zBrzzux57Xf07Ft5
xVHIIagMSFG+Hq4VDIReqSI0uCOuHQFd6gRCK+AEixBK68lw5DVWrdwNk2lNeFUw
uX866rTQaxtq9o1v+AgKTSIpNOIqnUQQAnJeYiRNYTn/J/tTJkQslOkTmxysENvq
inqb1U06aF7UYYA/wlgJVefr1gtQvWR1SNBlBgVYiaNVwWEA64wR0H54uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP7K1tGD9Ve6ouXykZDUC/pOElcMB8GA1UdIwQY
MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt
MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw
LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVTSfPLf
4vOJfUygg7dCNi6IZ1tgKUis70KL0hkq3rzokvP97qFEPXSGOMtfZqOVEzdiJCyQ
Y/T10RzLww0w2vwS4WnkIcvae+NdBROd7PabJz0T7u1KAg7fy9qfPsayandUp9gx
qqUR0McXdwifR2V37vOelEiARIyNWzh7xAigRbAHeE1lMj+ODzBIy7aB6MowhjpO
WIRu0remqx2Vm+kh2LwiMI1luwRoaA/EbenOxBSd+pWYB5Dw/OGWG4gCgyixjaZn
BQBjTJ1bHREeKOLvdWG4rtsTZx8PV7+awRRjf7TPb0kbA5Yqn65O4tHvbj7AXmqE
Zbs3PpzLjWo7oA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:55:22 2025 by rpki-client