Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: epl8WgAohZpTIrOywm7yGYpWUZgtY6zU5BGfvtFFPgQ=
Subject key identifier: 1C:9E:F1:58:C0:59:26:FE:19:B5:C4:53:5C:08:EB:DD:C6:67:5F:88
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019A25F849B5F6E97167A1D7D2AE02753BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 14:00:20 +0000
Manifest this update: Mon 27 Oct 2025 14:00:20 +0000
Manifest next update: Tue 28 Oct 2025 14:00:20 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: Wn937dMEatdE/UACfHs1xoh5kqLLO7vnZcC6AEvLvmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:49:b5:f6:e9:71:67:a1:d7:d2:ae:02:75:3b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Oct 27 14:00:20 2025 GMT
Not After : Oct 28 14:00:20 2025 GMT
Subject: CN=1c9ef158c05926fe19b5c4535c08ebddc6675f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:0a:9d:1c:61:98:35:1c:a4:39:50:c3:8f:
52:31:a0:00:ef:f8:d8:a0:3c:57:07:00:96:2b:54:
70:3b:30:59:eb:0c:1e:40:db:fa:3f:31:38:34:62:
8e:8a:48:48:77:45:ac:52:fa:3d:c8:90:62:c3:95:
a9:a5:90:a5:f1:24:03:57:40:df:ff:5c:56:51:7c:
05:15:32:c5:4b:52:f1:4d:be:6b:b3:ec:c7:aa:d1:
62:4f:06:f9:bc:c6:ed:7e:59:58:e6:28:3a:da:ce:
d6:07:73:20:47:a4:7b:e5:9a:23:7c:0f:20:72:74:
18:ab:dd:1e:15:53:61:5f:c2:5c:b8:bd:24:80:bb:
7f:ee:a2:6a:c9:e9:f4:08:42:df:90:50:5d:21:bc:
20:89:48:d0:de:5c:43:29:70:2f:c6:e3:7d:ee:a0:
bf:51:75:d9:6f:e3:bf:57:84:22:1e:f3:47:e5:42:
29:43:9e:48:63:64:c0:15:bf:2a:fb:e1:92:43:4b:
b8:54:11:18:a3:b1:44:a5:93:ae:76:c8:28:19:ff:
61:ed:33:e8:1c:32:28:3f:6c:86:e1:48:fe:56:ba:
21:c9:a2:98:b1:48:12:d1:8c:48:3a:ff:d7:7d:13:
f7:a1:95:63:ad:0b:c8:25:e8:96:8b:4e:0b:0e:3c:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9E:F1:58:C0:59:26:FE:19:B5:C4:53:5C:08:EB:DD:C6:67:5F:88
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:02:89:11:84:79:ff:71:b3:1d:15:29:64:67:4a:f3:1c:
dd:59:18:58:67:a3:ad:ef:d6:92:b8:c6:e5:bf:2a:e9:94:6f:
27:b0:f6:bd:46:e9:1c:90:d4:3e:24:68:c4:7c:95:1e:c4:73:
b5:42:dc:25:1d:ae:56:8e:12:bd:22:9a:12:4a:8c:eb:53:4f:
a9:f2:36:4b:59:20:18:ff:11:0d:98:8f:07:0b:28:33:1a:8d:
1b:94:64:f7:fd:c7:b9:47:a8:40:03:1e:3f:81:a4:39:62:89:
bc:12:2b:c2:01:9d:32:53:a7:c9:1e:38:7a:ce:88:de:6b:99:
0a:54:20:43:ab:f2:4f:4f:e7:79:f6:eb:b0:bd:0b:7a:85:70:
bb:63:b4:05:ba:b6:ae:68:8b:2e:1f:0d:72:a7:66:5d:d2:be:
3f:dc:27:a7:65:b7:f1:aa:88:20:43:e2:53:90:0f:a7:97:4d:
0b:1f:8a:8c:c4:8f:c8:23:7e:7f:e7:62:d2:4a:49:5a:63:de:
b4:92:11:07:ea:22:79:8d:95:41:bc:7f:86:f6:0b:8c:f0:f7:
a4:93:5e:83:17:22:17:c0:0c:b8:0d:1b:f5:8e:1d:e4:ad:85:
c9:fc:1c:ef:25:5a:64:5d:f3:fc:08:92:59:8b:8c:30:95:62:
8f:19:4c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+Em19ulxZ6HX0q4CdTu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjUxMDI3MTQwMDIwWhcNMjUxMDI4MTQwMDIwWjAzMTEwLwYDVQQD
EygxYzllZjE1OGMwNTkyNmZlMTliNWM0NTM1YzA4ZWJkZGM2Njc1Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpkKnRxhmDUcpDlQw49SMaAA7/jY
oDxXBwCWK1RwOzBZ6wweQNv6PzE4NGKOikhId0WsUvo9yJBiw5WppZCl8SQDV0Df
/1xWUXwFFTLFS1LxTb5rs+zHqtFiTwb5vMbtfllY5ig62s7WB3MgR6R75ZojfA8g
cnQYq90eFVNhX8JcuL0kgLt/7qJqyen0CELfkFBdIbwgiUjQ3lxDKXAvxuN97qC/
UXXZb+O/V4QiHvNH5UIpQ55IY2TAFb8q++GSQ0u4VBEYo7FEpZOudsgoGf9h7TPo
HDIoP2yG4Uj+VrohyaKYsUgS0YxIOv/XfRP3oZVjrQvIJeiWi04LDjwVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBye8VjAWSb+GbXEU1wI693GZ1+IMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXUCiRGE
ef9xsx0VKWRnSvMc3VkYWGejre/WkrjG5b8q6ZRvJ7D2vUbpHJDUPiRoxHyVHsRz
tULcJR2uVo4SvSKaEkqM61NPqfI2S1kgGP8RDZiPBwsoMxqNG5Rk9/3HuUeoQAMe
P4GkOWKJvBIrwgGdMlOnyR44es6I3muZClQgQ6vyT0/nefbrsL0LeoVwu2O0Bbq2
rmiLLh8NcqdmXdK+P9wnp2W38aqIIEPiU5APp5dNCx+KjMSPyCN+f+di0kpJWmPe
tJIRB+oieY2VQbx/hvYLjPD3pJNegxciF8AMuA0b9Y4d5K2Fyfwc7yVaZF3z/AiS
WYuMMJVijxlMfw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:38:07 2025 by rpki-client