Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: 9Qc+16r1mdMQXpR9b3jPx7zSDnmIgZNWjhpMWpUejq0=
Subject key identifier: 8B:7D:F6:5C:9E:87:DD:65:15:F7:4F:05:70:6B:FD:8F:3D:CA:3C:78
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 019A5150C1F93B5D7ACB2D67CB18F86FB822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 15E2
Signing time: Wed 05 Nov 2025 00:00:38 +0000
Manifest this update: Wed 05 Nov 2025 00:00:38 +0000
Manifest next update: Thu 06 Nov 2025 00:00:38 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: ZgEdNTK7YNE3Nsck83L25AM+1MjhfONFOK6WmzhR5tM=)
2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c1:f9:3b:5d:7a:cb:2d:67:cb:18:f8:6f:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Nov 5 00:00:38 2025 GMT
Not After : Nov 6 00:00:38 2025 GMT
Subject: CN=8b7df65c9e87dd6515f74f05706bfd8f3dca3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:64:b3:6d:8a:1d:07:81:12:ef:e4:0b:fc:
18:4e:39:8b:6e:cf:cb:0d:cd:69:1d:57:53:0c:90:
4b:9e:0c:d9:95:28:12:f9:d3:0d:00:78:bd:1c:33:
88:16:ca:95:0d:a1:ec:d0:cc:bf:18:db:97:93:53:
e1:34:c9:13:5c:99:8b:f5:26:d3:67:49:b1:62:26:
3a:24:75:0f:23:54:76:f5:e7:8d:4d:6a:ec:99:7e:
b7:48:dc:b6:1d:8c:af:2a:ec:f0:f9:35:ee:c4:8e:
81:f9:14:93:a9:fb:f8:9c:24:9a:49:b7:93:d8:d9:
f2:bf:b3:f4:77:40:9b:8f:f3:08:c5:13:f3:55:3e:
ca:78:88:dd:1e:b0:80:bb:79:10:fc:0e:62:12:47:
b8:dd:83:6c:d4:02:fb:62:e9:75:d9:b5:5c:e8:e1:
f2:98:52:2f:63:a1:7f:e4:dd:9e:b6:b4:2a:e7:d7:
f2:9a:c0:b8:f8:c6:68:9d:bf:ad:ec:9a:17:7c:05:
7e:91:48:07:92:ce:64:73:6c:f4:32:38:59:6b:32:
37:e1:2f:36:8c:e7:aa:59:da:8f:0b:40:3b:83:b3:
08:71:1d:a3:0c:98:98:14:80:3b:6d:b2:67:23:27:
1a:70:d3:82:3d:d0:d7:27:d1:83:fa:2c:c9:5d:c9:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7D:F6:5C:9E:87:DD:65:15:F7:4F:05:70:6B:FD:8F:3D:CA:3C:78
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:50:a0:86:a6:ea:23:39:d3:f7:87:4e:e4:34:d8:ce:cc:03:
ec:4e:3a:77:7a:ef:0f:15:40:23:0e:18:49:be:bc:6e:44:df:
3f:4c:42:0d:7d:62:0a:f1:a9:40:26:6c:bd:6b:bb:9d:8d:36:
2a:c8:8e:05:8b:5d:81:e1:13:ca:8d:eb:51:fe:2c:ac:b8:62:
51:13:2c:aa:67:00:69:6c:18:37:63:c4:a8:6b:47:22:63:19:
c4:ea:4e:b6:26:c5:41:a3:c4:5d:6c:df:d1:5d:4e:03:97:21:
a2:94:de:47:7f:6b:1f:3a:3b:f8:d0:42:36:88:a8:82:a8:c4:
e9:a4:58:cd:a5:12:0c:4e:9c:9a:97:4b:99:2c:a2:be:4b:36:
9a:78:0a:ff:04:1b:db:4b:98:9d:4c:01:e1:21:1e:c4:d0:39:
66:13:ce:21:c4:4e:38:2d:f6:1a:7c:33:13:0a:75:27:1f:7a:
1c:46:06:9a:36:2a:e9:d8:70:c4:f6:ef:36:d0:79:49:4d:26:
fe:e6:7c:1c:6e:43:04:db:57:2d:3d:72:dc:5b:99:ba:ca:d6:
3a:4a:25:7c:43:4a:60:7e:96:f3:af:62:b2:5d:40:38:f1:3a:
e6:26:88:b2:9f:07:56:b9:ff:50:41:2b:2b:26:9b:eb:b1:59:
0d:01:75:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUMH5O116yy1nyxj4b7giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4
MmZkYzMwHhcNMjUxMTA1MDAwMDM4WhcNMjUxMTA2MDAwMDM4WjAzMTEwLwYDVQQD
Eyg4YjdkZjY1YzllODdkZDY1MTVmNzRmMDU3MDZiZmQ4ZjNkY2EzYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzFks22KHQeBEu/kC/wYTjmLbs/L
Dc1pHVdTDJBLngzZlSgS+dMNAHi9HDOIFsqVDaHs0My/GNuXk1PhNMkTXJmL9SbT
Z0mxYiY6JHUPI1R29eeNTWrsmX63SNy2HYyvKuzw+TXuxI6B+RSTqfv4nCSaSbeT
2Nnyv7P0d0Cbj/MIxRPzVT7KeIjdHrCAu3kQ/A5iEke43YNs1AL7Yul12bVc6OHy
mFIvY6F/5N2etrQq59fymsC4+MZonb+t7JoXfAV+kUgHks5kc2z0MjhZazI34S82
jOeqWdqPC0A7g7MIcR2jDJiYFIA7bbJnIycacNOCPdDXJ9GD+izJXcmT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt99lyeh91lFfdPBXBr/Y89yjx4MB8GA1UdIwQY
MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut
ZDk1NzI2NDY1M2UyLzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy
LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlCghqbq
IznT94dO5DTYzswD7E46d3rvDxVAIw4YSb68bkTfP0xCDX1iCvGpQCZsvWu7nY02
KsiOBYtdgeETyo3rUf4srLhiURMsqmcAaWwYN2PEqGtHImMZxOpOtibFQaPEXWzf
0V1OA5chopTeR39rHzo7+NBCNoiogqjE6aRYzaUSDE6cmpdLmSyivks2mngK/wQb
20uYnUwB4SEexNA5ZhPOIcROOC32GnwzEwp1Jx96HEYGmjYq6dhwxPbvNtB5SU0m
/uZ8HG5DBNtXLT1y3FuZusrWOkolfENKYH6W869isl1AOPE65iaIsp8HVrn/UEEr
Kyab67FZDQF1pA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:05:55 2025 by rpki-client