Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: mXiL8r2YhUxw5N8tfCjc3AKmlpOwYXWKCy3zdOe9dsE=
Subject key identifier: 8F:01:FA:57:13:9B:97:EA:D0:7F:BC:2D:3D:47:19:E5:6A:A0:68:0F
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019A16173B6B29DFE8366591C9DFA00235DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 12:00:12 +0000
Manifest this update: Fri 24 Oct 2025 12:00:12 +0000
Manifest next update: Sat 25 Oct 2025 12:00:12 +0000
Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: hg0bOSHWXT0EH3KCmYqBcDegQnUC9TpckST+mRjNKpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:17:3b:6b:29:df:e8:36:65:91:c9:df:a0:02:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Oct 24 12:00:12 2025 GMT
Not After : Oct 25 12:00:12 2025 GMT
Subject: CN=8f01fa57139b97ead07fbc2d3d4719e56aa0680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:4f:12:53:7a:16:70:fd:0b:d8:be:8b:bb:
a4:ad:6d:b6:ec:c9:95:34:67:d4:6c:28:51:b9:5a:
97:42:e4:5e:39:7a:41:0d:e4:9d:22:d2:ed:ae:3b:
b9:b5:fd:91:7b:45:e9:8f:2b:67:c7:c7:33:3e:f7:
c2:dc:27:46:1e:2c:90:0a:68:a0:65:9c:fe:1f:13:
d7:03:f3:42:88:e3:7d:a9:d9:17:0e:13:1d:dd:c8:
ae:7d:9b:a7:6d:f7:dd:13:ba:4c:f1:7b:81:9a:97:
f4:c6:5f:2d:78:05:8e:fe:58:92:a3:68:3a:1e:b0:
5b:b4:ae:7c:83:cb:bb:d6:17:cf:90:93:55:e1:b0:
0f:d3:cf:0a:0c:7d:f9:68:06:f2:c4:25:bc:37:2d:
a4:ae:b7:db:bd:a2:0e:cd:7d:4b:cb:d7:5f:b3:9a:
65:ac:61:4b:93:39:71:af:29:cf:4c:b6:0e:07:d3:
f6:f8:c8:32:31:fd:81:c8:cd:32:c8:bb:9e:39:c1:
eb:96:40:76:7a:55:a3:f7:b7:83:81:6b:7d:1f:65:
58:60:ad:b0:9a:5f:df:40:b2:a3:89:76:13:97:c8:
37:97:21:c4:19:64:17:4f:dd:e1:a4:67:b8:9f:86:
d6:a9:3a:55:4f:8f:8d:4c:31:12:35:a6:1e:d7:6c:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:FA:57:13:9B:97:EA:D0:7F:BC:2D:3D:47:19:E5:6A:A0:68:0F
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:24:5e:71:ef:25:4f:5a:f3:cb:30:e7:2a:34:fe:94:6b:
ab:d8:71:12:8e:28:23:b4:62:97:8a:3b:b1:ba:08:96:6a:0c:
81:4f:ae:5b:b1:6a:1b:16:6b:2d:f7:be:46:ea:2c:7f:68:4d:
19:9f:6f:b3:01:a7:d5:8a:81:e7:d4:b1:34:d4:6e:62:42:f6:
17:f8:9d:f0:e9:02:c5:4e:5d:88:0e:90:66:1b:5c:28:e7:bb:
4b:59:c4:b7:77:6d:22:c2:05:82:f9:e3:31:cb:9e:ce:a1:fa:
94:83:0d:d9:7d:96:92:2e:61:72:5c:5c:01:e4:f2:bc:ff:dc:
aa:7e:8c:13:ee:8d:c3:74:45:e8:8f:61:56:2b:38:de:bd:f1:
da:03:64:a0:8a:c3:89:fb:ca:e5:71:0b:dd:b2:e5:37:17:12:
4b:ad:af:90:04:ec:7d:03:e1:bc:e3:4a:08:f8:fb:0f:5a:4a:
c7:1c:2e:b7:83:19:4b:07:66:88:89:8c:1d:89:29:2c:68:5b:
e3:6d:db:30:40:7e:65:9c:3b:cd:0e:f4:91:94:45:09:85:0b:
fd:f7:ea:e9:98:9b:b3:d1:0f:41:9f:66:23:8d:e3:23:03:5e:
42:b6:bb:89:88:00:3a:3c:84:d0:e5:19:52:8b:2f:e0:38:a8:
f4:40:c7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWFztrKd/oNmWRyd+gAjXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz
ZDc4ODgwHhcNMjUxMDI0MTIwMDEyWhcNMjUxMDI1MTIwMDEyWjAzMTEwLwYDVQQD
Eyg4ZjAxZmE1NzEzOWI5N2VhZDA3ZmJjMmQzZDQ3MTllNTZhYTA2ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1xPElN6FnD9C9i+i7ukrW227MmV
NGfUbChRuVqXQuReOXpBDeSdItLtrju5tf2Re0Xpjytnx8czPvfC3CdGHiyQCmig
ZZz+HxPXA/NCiON9qdkXDhMd3ciufZunbffdE7pM8XuBmpf0xl8teAWO/liSo2g6
HrBbtK58g8u71hfPkJNV4bAP088KDH35aAbyxCW8Ny2krrfbvaIOzX1Ly9dfs5pl
rGFLkzlxrynPTLYOB9P2+MgyMf2ByM0yyLueOcHrlkB2elWj97eDgWt9H2VYYK2w
ml/fQLKjiXYTl8g3lyHEGWQXT93hpGe4n4bWqTpVT4+NTDESNaYe12xvVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8B+lcTm5fq0H+8LT1HGeVqoGgPMB8GA1UdIwQY
MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt
MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk
LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMEkXnHv
JU9a88sw5yo0/pRrq9hxEo4oI7Ril4o7sboIlmoMgU+uW7FqGxZrLfe+Ruosf2hN
GZ9vswGn1YqB59SxNNRuYkL2F/id8OkCxU5diA6QZhtcKOe7S1nEt3dtIsIFgvnj
McuezqH6lIMN2X2Wki5hclxcAeTyvP/cqn6ME+6Nw3RF6I9hVis43r3x2gNkoIrD
ifvK5XEL3bLlNxcSS62vkATsfQPhvONKCPj7D1pKxxwut4MZSwdmiImMHYkpLGhb
423bMEB+ZZw7zQ70kZRFCYUL/ffq6Zibs9EPQZ9mI43jIwNeQra7iYgAOjyE0OUZ
Uosv4Dio9EDHSg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 19:00:43 2025 by rpki-client