Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier: p79CaU8vlaVJSvE1Qn8bcCICr4+fz+plVD3xjsRhivE=
Subject key identifier: BD:27:1D:A2:DA:C3:B0:96:2D:21:9F:42:11:68:BA:3D:7F:54:0E:9B
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019A269CD7A523051D7A87C6F279532EBB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 17:00:04 +0000
Manifest this update: Mon 27 Oct 2025 17:00:04 +0000
Manifest next update: Tue 28 Oct 2025 17:00:04 +0000
Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: MpO93VYowc/CYVf3Zj2ANpE343jS4Z0cDe+BHeg0mlc=)
4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9c:d7:a5:23:05:1d:7a:87:c6:f2:79:53:2e:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Oct 27 17:00:04 2025 GMT
Not After : Oct 28 17:00:04 2025 GMT
Subject: CN=bd271da2dac3b0962d219f421168ba3d7f540e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:25:15:cb:e4:0b:47:65:0d:a7:f5:c9:d9:a3:
b5:48:92:27:2b:3b:8a:5a:d1:71:da:cb:a3:9b:c1:
d9:cf:60:80:88:0a:22:e3:78:7f:61:a1:f0:45:4b:
b1:7d:aa:bd:06:09:72:5c:92:24:8d:f5:6a:b2:e2:
9c:45:b4:82:75:8f:57:be:51:4d:49:50:03:6a:d9:
23:54:45:72:58:35:b2:e4:77:7e:0d:21:2a:48:ca:
b1:a0:36:3d:b4:43:2e:9f:fa:8a:7a:44:b0:58:c9:
b8:0f:cf:d2:e7:56:c2:ff:e5:1e:60:95:51:5a:8c:
98:b8:3f:e6:73:ec:45:79:c7:b0:73:a2:07:84:5e:
09:09:a5:e3:c4:da:e4:f0:ab:99:65:e5:58:2f:19:
e8:4b:f1:90:25:0d:83:0a:bd:08:66:bb:a4:0b:25:
06:f2:ce:46:ca:64:37:55:c4:8d:32:56:f3:76:c2:
00:80:22:ba:dd:63:1c:40:02:24:f8:7c:e0:86:4d:
50:54:7a:3a:4e:b3:67:59:4b:8d:d8:4a:cd:15:ff:
31:53:de:4c:a0:25:8b:bb:07:09:78:0b:81:19:3a:
c5:93:db:b9:53:a7:f9:53:79:db:0d:ff:68:66:a3:
09:5e:36:e9:03:2d:b2:29:ec:c8:f1:84:25:01:31:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:1D:A2:DA:C3:B0:96:2D:21:9F:42:11:68:BA:3D:7F:54:0E:9B
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:7e:3e:31:a5:be:85:c7:f7:31:14:5c:df:41:4b:44:a4:
a9:91:e7:77:40:38:1c:49:29:c1:f8:3b:07:7f:53:7d:1e:bc:
ff:26:95:2a:1b:84:07:a2:cf:45:ac:bb:88:b4:46:33:db:46:
5e:1d:d6:6d:08:05:1c:4c:7b:82:11:36:fc:25:09:2a:a2:1d:
79:28:bb:91:90:79:20:fc:fa:26:ad:2a:95:7b:76:09:ab:11:
b6:69:eb:9d:c0:06:00:3e:f0:63:92:84:e4:eb:43:ce:67:41:
3f:53:cd:8a:ab:3c:ec:46:f9:0b:2b:6c:ef:36:7e:bf:b0:69:
b9:f0:2e:a1:4a:7c:b5:12:9f:36:a3:0a:4a:9e:df:0c:9b:76:
27:0b:94:53:13:b3:18:cb:71:38:d1:a3:91:64:c3:10:3c:f0:
7b:16:03:53:56:33:87:3a:ba:2e:69:5a:3b:8a:78:49:58:e8:
80:23:08:6c:df:04:2a:d1:da:53:80:0f:fa:d7:2e:e2:d8:2c:
5e:f0:c3:94:f5:06:4a:c5:85:29:61:01:ea:ac:15:f9:be:ef:
4e:f2:ca:18:8f:0c:e5:8d:5c:ab:39:0a:96:83:8d:62:6d:83:
ef:ce:04:af:79:80:40:be:5a:83:07:bf:cc:d5:7b:1b:7d:31:
bc:85:ec:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomnNelIwUdeofG8nlTLrtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk
ZWQ3ZmMwHhcNMjUxMDI3MTcwMDA0WhcNMjUxMDI4MTcwMDA0WjAzMTEwLwYDVQQD
EyhiZDI3MWRhMmRhYzNiMDk2MmQyMTlmNDIxMTY4YmEzZDdmNTQwZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CUVy+QLR2UNp/XJ2aO1SJInKzuK
WtFx2sujm8HZz2CAiAoi43h/YaHwRUuxfaq9BglyXJIkjfVqsuKcRbSCdY9XvlFN
SVADatkjVEVyWDWy5Hd+DSEqSMqxoDY9tEMun/qKekSwWMm4D8/S51bC/+UeYJVR
WoyYuD/mc+xFecewc6IHhF4JCaXjxNrk8KuZZeVYLxnoS/GQJQ2DCr0IZrukCyUG
8s5GymQ3VcSNMlbzdsIAgCK63WMcQAIk+Hzghk1QVHo6TrNnWUuN2ErNFf8xU95M
oCWLuwcJeAuBGTrFk9u5U6f5U3nbDf9oZqMJXjbpAy2yKezI8YQlATH16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0nHaLaw7CWLSGfQhFouj1/VA6bMB8GA1UdIwQY
MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt
NmNhNTJlMDI5Y2JlLzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl
LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO59+PjGl
voXH9zEUXN9BS0SkqZHnd0A4HEkpwfg7B39TfR68/yaVKhuEB6LPRay7iLRGM9tG
Xh3WbQgFHEx7ghE2/CUJKqIdeSi7kZB5IPz6Jq0qlXt2CasRtmnrncAGAD7wY5KE
5OtDzmdBP1PNiqs87Eb5Cyts7zZ+v7BpufAuoUp8tRKfNqMKSp7fDJt2JwuUUxOz
GMtxONGjkWTDEDzwexYDU1Yzhzq6LmlaO4p4SVjogCMIbN8EKtHaU4AP+tcu4tgs
XvDDlPUGSsWFKWEB6qwV+b7vTvLKGI8M5Y1cqzkKloONYm2D784Er3mAQL5agwe/
zNV7G30xvIXsxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 23:27:46 2025 by rpki-client