Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: rncMvf5hqDja0T5u4NfVU6Yl1/LhjIgiG3jdeb9LAu0=
Subject key identifier: CE:84:08:1D:69:39:72:73:8A:79:B0:91:63:A0:B0:FC:B3:D6:71:2F
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019A1D2BFEF0AD4FA76A95DE0757C6DA6363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 21:00:13 +0000
Manifest this update: Sat 25 Oct 2025 21:00:13 +0000
Manifest next update: Sun 26 Oct 2025 21:00:13 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: vEavZWCjB1/Bp5JjpOgzb6LhQQnXvqnNBLv+vfWg2H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2b:fe:f0:ad:4f:a7:6a:95:de:07:57:c6:da:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Oct 25 21:00:13 2025 GMT
Not After : Oct 26 21:00:13 2025 GMT
Subject: CN=ce84081d693972738a79b09163a0b0fcb3d6712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:d1:1b:9e:b1:e7:5e:9e:cc:26:9c:31:af:
59:9b:dc:02:33:e2:89:3d:8f:f4:05:fe:1b:8e:1d:
24:d0:70:23:61:58:45:e7:8d:8b:e4:60:a4:27:ac:
20:08:b8:0a:7e:a6:93:da:47:bf:94:bd:60:05:4b:
ad:66:c1:d6:96:60:46:66:88:fa:f2:4c:de:70:a4:
d0:b8:1f:d0:49:01:a8:16:24:86:d5:9d:07:c5:be:
b2:d1:6a:81:2a:2e:08:1c:8c:c9:b7:f3:24:4c:15:
36:dd:3b:7b:fa:2d:cd:c8:2a:95:c1:7a:2e:eb:43:
bd:c0:cd:6b:b5:c4:4c:5c:13:b5:ca:0b:35:f8:b0:
7c:7c:b1:25:f0:7c:d4:70:62:d8:f1:0c:70:9f:b0:
6d:64:67:e9:73:7b:45:a3:b6:fc:31:a2:16:e8:95:
4e:c1:ef:2d:ae:c9:bf:c7:13:79:01:2a:66:5f:ee:
e4:30:b1:dc:d8:ba:16:16:ca:c9:fa:38:0b:91:46:
25:b1:a1:ee:21:9c:31:3e:61:7b:32:16:06:d2:03:
f5:cc:65:af:8d:37:4c:7a:6c:a6:9c:89:a1:71:4f:
99:62:aa:f1:80:eb:17:07:2b:2d:26:8d:7e:dc:e8:
e7:f4:69:9a:7c:70:aa:00:f8:e1:0e:cd:85:ed:11:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:08:1D:69:39:72:73:8A:79:B0:91:63:A0:B0:FC:B3:D6:71:2F
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a4:40:2d:b8:26:42:b0:99:71:7a:41:4c:29:c0:9b:a5:f4:
bc:02:a3:e3:af:14:52:af:d5:0a:6a:b4:14:1c:20:57:ad:b1:
0d:b8:d6:00:0e:44:e9:35:2b:0d:d2:e7:a1:21:a1:08:11:29:
2f:94:c2:aa:b6:d8:c2:bd:90:ef:78:3a:36:58:d6:94:64:cb:
df:bd:81:d5:1a:07:be:b4:b2:09:f8:db:a5:93:e3:85:75:78:
82:1e:aa:84:f6:9f:f3:22:54:46:a9:47:09:01:64:b6:8f:52:
b2:76:38:79:87:e3:95:12:8f:c7:f5:f4:68:e8:ff:de:7d:5c:
73:ae:8e:8c:a2:3c:c0:55:62:98:ab:57:c7:b1:43:25:64:06:
66:0e:aa:ba:f6:48:09:3d:79:bc:7d:5b:6a:20:73:f9:72:e4:
ab:88:3f:52:72:cb:de:99:06:ab:fc:3f:4d:cc:23:df:90:2e:
18:5c:d1:02:72:d7:b2:7d:b7:02:90:f5:28:0a:d0:c3:af:72:
e1:65:7c:05:c6:33:cb:08:22:3f:70:21:00:9d:30:cb:26:d3:
8e:97:7b:3c:8e:3b:53:96:73:bf:b2:f4:7f:3d:f8:77:e9:64:
aa:cb:01:6b:5b:4d:4b:22:6c:2f:d2:5c:45:d7:a0:39:84:d0:
59:a0:0d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodK/7wrU+napXeB1fG2mNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5
ZmU1YjAwHhcNMjUxMDI1MjEwMDEzWhcNMjUxMDI2MjEwMDEzWjAzMTEwLwYDVQQD
EyhjZTg0MDgxZDY5Mzk3MjczOGE3OWIwOTE2M2EwYjBmY2IzZDY3MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfjRG56x516ezCacMa9Zm9wCM+KJ
PY/0Bf4bjh0k0HAjYVhF542L5GCkJ6wgCLgKfqaT2ke/lL1gBUutZsHWlmBGZoj6
8kzecKTQuB/QSQGoFiSG1Z0Hxb6y0WqBKi4IHIzJt/MkTBU23Tt7+i3NyCqVwXou
60O9wM1rtcRMXBO1ygs1+LB8fLEl8HzUcGLY8Qxwn7BtZGfpc3tFo7b8MaIW6JVO
we8trsm/xxN5ASpmX+7kMLHc2LoWFsrJ+jgLkUYlsaHuIZwxPmF7MhYG0gP1zGWv
jTdMemymnImhcU+ZYqrxgOsXBystJo1+3Ojn9GmafHCqAPjhDs2F7REliwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ECB1pOXJzinmwkWOgsPyz1nEvMB8GA1UdIwQY
MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt
OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4
LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqRALbgm
QrCZcXpBTCnAm6X0vAKj468UUq/VCmq0FBwgV62xDbjWAA5E6TUrDdLnoSGhCBEp
L5TCqrbYwr2Q73g6NljWlGTL372B1RoHvrSyCfjbpZPjhXV4gh6qhPaf8yJURqlH
CQFkto9SsnY4eYfjlRKPx/X0aOj/3n1cc66OjKI8wFVimKtXx7FDJWQGZg6quvZI
CT15vH1baiBz+XLkq4g/UnLL3pkGq/w/Tcwj35AuGFzRAnLXsn23ApD1KArQw69y
4WV8BcYzywgiP3AhAJ0wyybTjpd7PI47U5Zzv7L0fz34d+lkqssBa1tNSyJsL9Jc
RdegOYTQWaANeg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:43:37 2025 by rpki-client