Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: 1IyJDXXPa86uYMrxBvqYjCOLXHbs+YJgOdEUPoG6OXk=
Subject key identifier: 65:20:79:C4:69:C0:87:E4:4F:91:DD:94:AB:58:7B:51:4C:03:A7:16
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 0199C3EAC86C71BB87F4982DC34CF50615B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 16C3
Signing time: Wed 08 Oct 2025 13:02:47 +0000
Manifest this update: Wed 08 Oct 2025 13:02:47 +0000
Manifest next update: Thu 09 Oct 2025 13:02:47 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: 6OUMW97DrbjOwdr6RvO+vLlW4GNM0ZJEfAgeTPlPnQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:c8:6c:71:bb:87:f4:98:2d:c3:4c:f5:06:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Oct 8 13:02:47 2025 GMT
Not After : Oct 9 13:02:47 2025 GMT
Subject: CN=652079c469c087e44f91dd94ab587b514c03a716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:1c:b9:83:36:f6:8a:a5:2c:f5:55:74:b3:
50:d4:73:a4:c0:82:d9:48:b4:1b:a3:45:bd:c8:a0:
21:95:8a:f5:73:39:a4:f8:d0:8e:32:99:68:e6:c5:
50:e7:ca:d6:ea:e1:0b:c6:3c:bd:58:99:a3:30:52:
e7:b2:b7:b4:07:b5:04:f9:f3:eb:2a:5e:02:09:f1:
34:78:17:b2:cd:bd:ea:bd:60:6e:e4:60:aa:cb:80:
39:fc:1e:7d:96:5b:b1:69:36:e5:c3:73:83:70:ef:
c1:77:a5:f2:19:af:ac:d3:7a:9d:4d:1c:84:fc:e2:
0d:6c:25:33:67:d7:94:9f:17:21:25:b6:4a:94:d2:
2d:f0:12:f2:f0:de:1f:ca:83:f1:17:b1:ee:a8:13:
4b:d9:44:b1:f7:9d:3c:78:9b:2e:8b:70:4b:c4:fe:
cc:02:9d:89:ce:16:b3:d1:89:63:b7:4d:3f:5d:51:
32:65:16:08:25:ca:a6:d2:b0:46:82:80:ae:0b:e1:
c6:c5:98:50:e1:4e:e2:10:de:8a:d2:b8:d6:bd:d7:
d5:7a:e2:9f:c0:73:87:96:4a:b4:6c:28:c3:0e:d1:
5d:4f:a5:a2:d7:d7:19:12:ac:c6:1b:7f:5e:eb:51:
91:19:4c:27:65:9c:eb:3f:87:f9:7c:57:7e:94:b0:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:79:C4:69:C0:87:E4:4F:91:DD:94:AB:58:7B:51:4C:03:A7:16
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d8:12:e3:6e:05:0e:b4:ce:42:db:fb:b0:ef:f0:2e:71:01:
16:11:eb:45:86:6b:cc:8b:74:30:22:41:c7:17:38:41:b0:dc:
43:9d:31:ec:07:30:7e:4b:63:a3:04:f9:de:0e:ab:3b:e3:f3:
30:68:e0:ed:da:14:1f:48:63:84:88:1d:f1:fe:03:58:1f:2c:
64:95:b3:6d:44:f4:21:a5:a4:76:02:df:06:b8:bf:8d:7e:29:
84:34:65:7b:c1:60:6c:69:ac:3d:a5:66:14:a8:30:40:8a:fe:
a0:d9:8c:90:c6:0d:44:0d:a5:c8:e1:85:3b:cd:b9:22:13:07:
0e:e6:da:38:a0:92:5a:69:80:bc:cb:76:dc:c6:49:a4:4d:c2:
8b:76:ff:7d:a7:a0:70:3a:18:05:38:c8:bf:7c:1d:f4:59:ae:
59:a1:fe:c6:dc:0e:e8:cc:2c:2a:1b:78:ac:a9:3f:ab:b9:df:
ef:14:5f:ec:0e:ab:4e:be:c3:35:ae:b0:08:c9:7f:e1:89:28:
17:89:d4:f6:92:6a:ca:73:92:c6:59:89:42:80:e0:8c:03:8b:
9e:59:50:2b:27:59:7a:f8:dd:dd:dd:80:74:b5:8a:f8:ef:fa:
45:f4:2f:cf:8f:65:bb:a9:db:08:c1:2e:65:7c:95:5d:eb:b9:
ae:9d:19:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6shscbuH9Jgtw0z1BhWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj
MDRmNjAwHhcNMjUxMDA4MTMwMjQ3WhcNMjUxMDA5MTMwMjQ3WjAzMTEwLwYDVQQD
Eyg2NTIwNzljNDY5YzA4N2U0NGY5MWRkOTRhYjU4N2I1MTRjMDNhNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8wcuYM29oqlLPVVdLNQ1HOkwILZ
SLQbo0W9yKAhlYr1czmk+NCOMplo5sVQ58rW6uELxjy9WJmjMFLnsre0B7UE+fPr
Kl4CCfE0eBeyzb3qvWBu5GCqy4A5/B59lluxaTblw3ODcO/Bd6XyGa+s03qdTRyE
/OINbCUzZ9eUnxchJbZKlNIt8BLy8N4fyoPxF7HuqBNL2USx9508eJsui3BLxP7M
Ap2Jzhaz0Yljt00/XVEyZRYIJcqm0rBGgoCuC+HGxZhQ4U7iEN6K0rjWvdfVeuKf
wHOHlkq0bCjDDtFdT6Wi19cZEqzGG39e61GRGUwnZZzrP4f5fFd+lLALlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUgecRpwIfkT5HdlKtYe1FMA6cWMB8GA1UdIwQY
MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt
NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh
LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtgS424F
DrTOQtv7sO/wLnEBFhHrRYZrzIt0MCJBxxc4QbDcQ50x7AcwfktjowT53g6rO+Pz
MGjg7doUH0hjhIgd8f4DWB8sZJWzbUT0IaWkdgLfBri/jX4phDRle8FgbGmsPaVm
FKgwQIr+oNmMkMYNRA2lyOGFO825IhMHDubaOKCSWmmAvMt23MZJpE3Ci3b/faeg
cDoYBTjIv3wd9FmuWaH+xtwO6MwsKht4rKk/q7nf7xRf7A6rTr7DNa6wCMl/4Yko
F4nU9pJqynOSxlmJQoDgjAOLnllQKydZevjd3d2AdLWK+O/6RfQvz49lu6nbCMEu
ZXyVXeu5rp0ZyA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:20 2025 by rpki-client