Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: obir8+rVFWZoQFBplifLYGhufNF+AGRkpDg+OgUMbnk=
Subject key identifier: 85:4B:06:F8:2E:4C:A4:7A:00:C4:B0:94:17:E2:6D:FE:91:69:85:E2
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 019A096F5295343D18D341E38629D634B477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 01:01:21 +0000
Manifest this update: Wed 22 Oct 2025 01:01:21 +0000
Manifest next update: Thu 23 Oct 2025 01:01:21 +0000
Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: WjJK0fnEsbEmPaVkn9X8xnGtHP1zi+uLaKGs5OeQrk4=)
2: g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa (hash: J/8qgOiiWUFaiNrcnTWTtH2kw8HeWHNYJWQaiboNZV0=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
4: qokcHE99iTrXl6i5ZKbVWDs737c.roa (hash: i4+UG/3lSUIbQWMfcvfYr7tTK0L7q3cwt000JnF1onE=)
5: tsEpNfREWif2pmmZMW8i8IMX_NA.roa (hash: Z317i+maC8qfR96UM+ggVrhs1/7gBs3PFnoiv0k12gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6f:52:95:34:3d:18:d3:41:e3:86:29:d6:34:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Oct 22 01:01:21 2025 GMT
Not After : Oct 23 01:01:21 2025 GMT
Subject: CN=854b06f82e4ca47a00c4b09417e26dfe916985e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:2c:ac:e8:5c:e6:98:09:6e:c8:23:27:de:
fe:ab:79:7e:60:85:5b:8d:e8:cc:a3:0e:02:dc:0b:
e2:6e:ab:33:1d:36:f4:0d:6a:37:f9:17:a5:3d:8c:
b4:c4:e4:82:c1:6c:fd:b6:1f:bc:00:e7:1e:eb:b7:
cd:e8:8e:90:f7:04:da:4b:fd:34:c8:48:fa:88:aa:
f0:2c:e5:5c:c5:95:af:26:4f:8f:3c:39:f9:8e:b5:
95:ef:34:bc:28:93:0b:84:ea:2e:cb:58:e8:30:60:
31:d3:e9:89:01:86:0c:89:8f:3a:24:05:d7:3e:8a:
8a:e8:32:3c:4b:2e:70:df:64:59:95:e5:ed:a0:dd:
48:1d:66:c4:fa:13:11:bb:52:75:11:0d:c7:59:3c:
fc:79:01:ec:6a:ee:17:6a:96:57:fe:37:8f:d7:bd:
9d:f5:e6:59:2e:22:c9:d0:2d:3a:7c:53:49:e7:ea:
ad:ba:ec:2f:1f:be:6a:1d:9f:ff:09:bb:c2:5f:17:
3e:04:d4:f6:eb:0a:84:95:b1:c1:ae:70:da:4c:5c:
d8:a4:98:f4:d4:70:5d:ef:3b:8b:5d:d3:d5:9a:32:
a3:35:02:88:2b:fd:68:cb:d0:4e:ea:fa:c6:da:aa:
ee:19:79:80:41:22:57:5b:41:25:6b:5e:6a:f6:d4:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4B:06:F8:2E:4C:A4:7A:00:C4:B0:94:17:E2:6D:FE:91:69:85:E2
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9c:df:bb:07:91:5a:19:54:7a:38:7c:e3:17:4d:e3:1c:19:
90:15:04:e5:6e:e5:6e:31:62:29:f4:2f:c6:69:f4:17:c0:ba:
32:7d:fe:ac:b1:46:8d:74:b7:df:5b:ef:cb:ce:a4:8b:70:3b:
e6:e0:8f:fd:b0:8f:de:62:f3:63:dd:24:f2:77:d8:5b:cf:87:
59:4c:c3:f8:b4:c6:99:25:aa:06:0e:1c:a1:62:00:f9:01:f4:
fb:3d:08:63:63:35:cc:17:19:42:ff:7c:49:b1:7a:88:8d:3b:
aa:a4:0f:74:b3:2e:59:5e:e7:9f:5c:59:91:da:f9:c9:e3:17:
16:e1:3d:08:f6:2c:13:30:dc:2a:9e:8d:13:6c:47:53:a1:9d:
2e:b7:7d:ca:3e:37:7d:bb:ca:33:57:fd:55:bb:35:48:3e:6f:
4a:ac:75:24:aa:53:ed:6c:68:03:a3:54:bb:c9:a1:63:10:5d:
92:45:3d:34:81:e5:07:54:ad:e1:48:d5:f9:e9:84:52:6e:7e:
54:82:79:e9:f7:27:e1:a4:b9:19:d1:5d:8f:d1:14:07:cb:09:
68:bc:ee:f4:b3:6c:89:30:5e:0f:37:78:cb:fa:be:8f:54:8d:
f1:f8:df:1d:a9:1b:d5:f2:b1:d0:fc:ca:36:21:fa:ed:4b:32:
ff:57:4d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJb1KVND0Y00HjhinWNLR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk
MTBkZmYwHhcNMjUxMDIyMDEwMTIxWhcNMjUxMDIzMDEwMTIxWjAzMTEwLwYDVQQD
Eyg4NTRiMDZmODJlNGNhNDdhMDBjNGIwOTQxN2UyNmRmZTkxNjk4NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq48srOhc5pgJbsgjJ97+q3l+YIVb
jejMow4C3AvibqszHTb0DWo3+RelPYy0xOSCwWz9th+8AOce67fN6I6Q9wTaS/00
yEj6iKrwLOVcxZWvJk+PPDn5jrWV7zS8KJMLhOouy1joMGAx0+mJAYYMiY86JAXX
PoqK6DI8Sy5w32RZleXtoN1IHWbE+hMRu1J1EQ3HWTz8eQHsau4XapZX/jeP172d
9eZZLiLJ0C06fFNJ5+qtuuwvH75qHZ//CbvCXxc+BNT26wqElbHBrnDaTFzYpJj0
1HBd7zuLXdPVmjKjNQKIK/1oy9BO6vrG2qruGXmAQSJXW0Ela15q9tS6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVLBvguTKR6AMSwlBfibf6RaYXiMB8GA1UdIwQY
MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt
NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz
LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJzfuweR
WhlUejh84xdN4xwZkBUE5W7lbjFiKfQvxmn0F8C6Mn3+rLFGjXS331vvy86ki3A7
5uCP/bCP3mLzY90k8nfYW8+HWUzD+LTGmSWqBg4coWIA+QH0+z0IY2M1zBcZQv98
SbF6iI07qqQPdLMuWV7nn1xZkdr5yeMXFuE9CPYsEzDcKp6NE2xHU6GdLrd9yj43
fbvKM1f9Vbs1SD5vSqx1JKpT7WxoA6NUu8mhYxBdkkU9NIHlB1St4UjV+emEUm5+
VIJ56fcn4aS5GdFdj9EUB8sJaLzu9LNsiTBeDzd4y/q+j1SN8fjfHakb1fKx0PzK
NiH67Usy/1dNdA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:05:44 2025 by rpki-client