Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: pjW7/8mN2q1tQy7v/FkH942go2lFJ7dZRAvkIFDf9zg=
Subject key identifier: 71:16:ED:FB:94:B9:6B:BE:1A:5A:EA:CE:31:34:2E:EE:87:87:0A:A8
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019A1D2C60DD1C8B40D6DF557806AE24C030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 21:00:38 +0000
Manifest this update: Sat 25 Oct 2025 21:00:38 +0000
Manifest next update: Sun 26 Oct 2025 21:00:38 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 4lRph/ihckin5tFXoflERe4SLOih2P8LWWo91OTuEs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:60:dd:1c:8b:40:d6:df:55:78:06:ae:24:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Oct 25 21:00:38 2025 GMT
Not After : Oct 26 21:00:38 2025 GMT
Subject: CN=7116edfb94b96bbe1a5aeace31342eee87870aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:a3:d0:49:6b:f1:f4:97:be:1d:ac:1e:95:
22:de:f5:25:57:fe:d4:a8:00:72:94:7e:c2:25:fc:
be:41:f0:bc:17:05:ec:90:70:01:f1:60:46:ae:7c:
0a:cf:61:ac:47:a3:ea:de:48:cd:cd:f6:57:14:7f:
a7:2b:3a:d1:e6:0c:40:07:bf:7d:f3:e6:5a:8a:70:
26:2a:87:93:a9:57:03:9a:a8:db:50:f3:8a:76:c1:
ac:10:6e:10:a2:be:4e:8a:c0:2b:2d:3e:c8:9f:29:
00:89:5a:04:6f:70:da:c8:d7:84:77:3a:b1:63:a1:
19:22:9d:cd:c0:78:d1:6f:3b:6e:b0:56:85:fd:3c:
4e:3e:29:90:a2:41:5c:43:3b:83:e0:8e:96:ac:3e:
07:16:54:05:1a:e3:f5:e7:f5:3d:f1:ab:62:72:6c:
d4:fc:3a:89:55:df:67:1e:eb:b0:d8:33:29:f2:ae:
83:7d:ad:f1:10:d5:d9:37:6c:7e:02:09:9a:a6:f0:
cc:e3:7d:4c:e2:61:56:88:6f:1a:ad:62:5d:0a:0e:
ec:86:a7:0d:67:d2:29:6e:02:d9:5e:2c:e3:17:80:
2b:9e:41:fb:72:21:b9:f4:3d:6f:15:55:9a:82:7f:
87:92:4e:d0:61:0f:a2:7d:06:86:48:77:ae:36:41:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:ED:FB:94:B9:6B:BE:1A:5A:EA:CE:31:34:2E:EE:87:87:0A:A8
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:dd:49:4c:35:98:55:43:f4:4f:20:fc:78:70:8e:4b:50:
ec:68:0d:54:fe:c2:1b:95:e4:2d:23:c6:36:c2:32:d6:b8:9d:
36:df:c6:ef:23:34:47:f7:dc:a1:5d:69:e7:f4:28:e4:9a:6e:
d2:5a:84:80:5a:8d:23:c3:49:58:5d:67:43:a5:dc:80:cf:e2:
93:55:31:e9:57:0e:41:23:6c:62:08:ff:43:e6:b4:9f:20:b3:
b1:89:e6:8f:d8:47:8d:9e:f1:2d:21:cc:12:a1:58:64:72:50:
fe:69:48:f6:90:00:9f:c4:b3:a6:31:c0:a1:56:5f:55:05:25:
cc:ea:c6:13:14:8d:ee:7b:e0:66:01:a0:1f:ba:e4:3a:05:87:
be:93:cc:e2:d4:c8:7d:2e:3c:4f:da:c7:5c:34:34:6d:7b:d2:
72:06:88:74:34:a2:81:e4:e8:d3:dd:ee:e8:a7:b3:81:9e:dc:
8b:e6:5f:5d:69:09:1e:d8:cf:d9:72:95:cf:8f:ec:a5:74:ff:
81:df:11:7b:41:36:f7:fb:6a:b0:42:55:de:3c:9f:39:92:cb:
48:4d:11:db:5a:5d:3f:cf:17:1e:17:88:45:f4:ee:fe:f6:a0:
ce:de:81:ba:66:29:5e:fd:5a:2d:3d:aa:f5:ae:2b:8a:bd:13:
98:a5:02:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodLGDdHItA1t9VeAauJMAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjUxMDI1MjEwMDM4WhcNMjUxMDI2MjEwMDM4WjAzMTEwLwYDVQQD
Eyg3MTE2ZWRmYjk0Yjk2YmJlMWE1YWVhY2UzMTM0MmVlZTg3ODcwYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQOj0Elr8fSXvh2sHpUi3vUlV/7U
qABylH7CJfy+QfC8FwXskHAB8WBGrnwKz2GsR6Pq3kjNzfZXFH+nKzrR5gxAB799
8+ZainAmKoeTqVcDmqjbUPOKdsGsEG4Qor5OisArLT7InykAiVoEb3DayNeEdzqx
Y6EZIp3NwHjRbztusFaF/TxOPimQokFcQzuD4I6WrD4HFlQFGuP15/U98aticmzU
/DqJVd9nHuuw2DMp8q6Dfa3xENXZN2x+AgmapvDM431M4mFWiG8arWJdCg7shqcN
Z9IpbgLZXizjF4ArnkH7ciG59D1vFVWagn+Hkk7QYQ+ifQaGSHeuNkEW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEW7fuUuWu+GlrqzjE0Lu6HhwqoMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTLdSUw1
mFVD9E8g/HhwjktQ7GgNVP7CG5XkLSPGNsIy1ridNt/G7yM0R/fcoV1p5/Qo5Jpu
0lqEgFqNI8NJWF1nQ6XcgM/ik1Ux6VcOQSNsYgj/Q+a0nyCzsYnmj9hHjZ7xLSHM
EqFYZHJQ/mlI9pAAn8SzpjHAoVZfVQUlzOrGExSN7nvgZgGgH7rkOgWHvpPM4tTI
fS48T9rHXDQ0bXvScgaIdDSigeTo093u6KezgZ7ci+ZfXWkJHtjP2XKVz4/spXT/
gd8Re0E29/tqsEJV3jyfOZLLSE0R21pdP88XHheIRfTu/vagzt6BumYpXv1aLT2q
9a4rir0TmKUCig==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:36:35 2025 by rpki-client