Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: mvZiiewijmmt9Y3la+B87uQQlbrt8EZmvIutwCfEhnM=
Subject key identifier: 78:25:4C:1A:DF:C6:CF:3B:0F:16:24:25:65:D1:88:F7:A3:E3:1A:27
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019A23D33211E3C7D1306F7ABB0F50BBCFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 04:00:34 +0000
Manifest this update: Mon 27 Oct 2025 04:00:34 +0000
Manifest next update: Tue 28 Oct 2025 04:00:34 +0000
Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: X23xlPo9dOARqPhxF2wofwHXB7n2PEHkgfnZfv1MqRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:32:11:e3:c7:d1:30:6f:7a:bb:0f:50:bb:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Oct 27 04:00:34 2025 GMT
Not After : Oct 28 04:00:34 2025 GMT
Subject: CN=78254c1adfc6cf3b0f16242565d188f7a3e31a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:1e:8e:f7:31:61:31:45:5e:97:1d:5e:5b:
9d:cd:8a:5b:f8:82:8f:6e:93:be:f5:f5:57:83:66:
10:0c:88:29:a3:cf:f0:03:18:ef:5f:88:c4:28:8d:
0a:da:1a:37:9b:0d:fa:74:fc:6c:a5:50:8c:a5:6d:
db:b7:a6:22:3b:43:7d:e8:b1:92:c9:b8:db:99:52:
13:f6:5b:fd:4b:64:48:79:95:2e:d3:b8:07:41:9a:
40:87:5b:9a:f0:14:30:a9:15:af:40:f6:7b:c3:2f:
22:fd:a0:64:d8:8a:5e:81:d4:66:9e:fb:80:c2:a7:
94:05:98:9e:2b:49:06:e8:96:0c:99:c0:a3:c7:b6:
fe:3a:35:9a:56:52:aa:1c:ca:28:8a:55:67:41:8d:
f1:ce:2d:7e:50:5e:35:b7:bb:c2:7b:c6:15:a7:8d:
c8:b5:82:40:d0:11:32:51:f8:c3:68:45:88:1e:c0:
70:ff:19:23:c8:87:88:87:1e:5c:b3:0e:06:fd:b3:
6d:c7:8f:b7:fb:ba:21:52:2b:88:fd:b5:a0:d1:d4:
eb:0f:6c:77:a3:ae:72:9c:a4:e9:c8:40:55:5d:4f:
25:24:ed:15:6c:b7:0b:51:11:02:70:53:88:46:5d:
21:24:7a:2e:de:e3:91:0e:f7:91:8d:29:78:ac:1f:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:4C:1A:DF:C6:CF:3B:0F:16:24:25:65:D1:88:F7:A3:E3:1A:27
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:44:99:8b:02:19:31:65:19:60:b1:97:bc:db:22:b9:bf:
bd:78:ba:90:2b:71:38:d4:d9:f9:61:36:aa:94:92:5a:a4:21:
7f:a0:93:02:d7:5c:f8:c7:e2:47:78:f1:da:45:84:4d:2c:6f:
cf:f0:ea:0e:41:1b:b7:b1:f2:fe:d3:d9:d4:5e:fc:ea:de:99:
01:93:d3:53:13:37:7d:41:65:0b:11:46:fb:ff:e1:07:f3:d3:
9a:77:81:0a:20:53:9b:30:99:93:b1:2a:12:8b:28:45:db:ef:
55:24:6b:b2:f6:83:b8:63:ab:ce:57:9a:c2:bf:f5:44:63:df:
0a:61:ee:a3:9a:b9:2a:34:37:54:bf:3a:c5:42:ec:67:74:ce:
4d:68:ec:fb:21:e6:f4:89:02:ec:2d:d3:1c:d2:15:ff:1f:98:
ab:7f:13:13:ae:d7:c2:a3:77:1f:29:46:3b:85:a9:15:a9:27:
11:33:e5:87:5e:80:21:84:5d:95:02:81:80:7f:29:6e:27:da:
7a:b9:63:46:69:c8:2b:6c:96:7d:2a:c2:9a:25:56:d0:73:77:
22:42:f6:68:4a:6b:dd:2e:ba:ba:d9:f7:94:f3:f7:39:03:8b:
c0:11:cc:3b:c0:30:24:e5:7f:1c:20:7c:e8:de:34:51:d9:dd:
a6:f6:8f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj0zIR48fRMG96uw9Qu8+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjUxMDI3MDQwMDM0WhcNMjUxMDI4MDQwMDM0WjAzMTEwLwYDVQQD
Eyg3ODI1NGMxYWRmYzZjZjNiMGYxNjI0MjU2NWQxODhmN2EzZTMxYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKAejvcxYTFFXpcdXludzYpb+IKP
bpO+9fVXg2YQDIgpo8/wAxjvX4jEKI0K2ho3mw36dPxspVCMpW3bt6YiO0N96LGS
ybjbmVIT9lv9S2RIeZUu07gHQZpAh1ua8BQwqRWvQPZ7wy8i/aBk2IpegdRmnvuA
wqeUBZieK0kG6JYMmcCjx7b+OjWaVlKqHMooilVnQY3xzi1+UF41t7vCe8YVp43I
tYJA0BEyUfjDaEWIHsBw/xkjyIeIhx5csw4G/bNtx4+3+7ohUiuI/bWg0dTrD2x3
o65ynKTpyEBVXU8lJO0VbLcLURECcFOIRl0hJHou3uORDveRjSl4rB8UzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHglTBrfxs87DxYkJWXRiPej4xonMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn1EmYsC
GTFlGWCxl7zbIrm/vXi6kCtxONTZ+WE2qpSSWqQhf6CTAtdc+MfiR3jx2kWETSxv
z/DqDkEbt7Hy/tPZ1F786t6ZAZPTUxM3fUFlCxFG+//hB/PTmneBCiBTmzCZk7Eq
EosoRdvvVSRrsvaDuGOrzleawr/1RGPfCmHuo5q5KjQ3VL86xULsZ3TOTWjs+yHm
9IkC7C3THNIV/x+Yq38TE67XwqN3HylGO4WpFaknETPlh16AIYRdlQKBgH8pbifa
erljRmnIK2yWfSrCmiVW0HN3IkL2aEpr3S66utn3lPP3OQOLwBHMO8AwJOV/HCB8
6N40UdndpvaPHw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 10:58:41 2025 by rpki-client