Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: BX6wrrYFRJi3Sivy50VOol1epVfC0CS1Pkm+ExTipGw=
Subject key identifier: 90:F3:4A:98:D4:79:4F:E1:FF:6C:00:89:C3:41:DB:B8:F0:F0:FA:9F
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019A50E332E4548C35CAE09855CC2EBF3BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 10D9
Signing time: Tue 04 Nov 2025 22:00:58 +0000
Manifest this update: Tue 04 Nov 2025 22:00:58 +0000
Manifest next update: Wed 05 Nov 2025 22:00:58 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: FfHItGj4iJBZb0R1moJIx6NLC1hzejEBlBFfnUTmR7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:32:e4:54:8c:35:ca:e0:98:55:cc:2e:bf:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Nov 4 22:00:58 2025 GMT
Not After : Nov 5 22:00:58 2025 GMT
Subject: CN=90f34a98d4794fe1ff6c0089c341dbb8f0f0fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:59:0f:29:d4:5a:10:81:27:dc:b3:3a:24:
20:02:a9:5b:a4:b3:9c:0c:2e:62:45:e9:99:7e:48:
64:58:08:58:a0:91:ae:a6:96:d5:88:60:cf:bd:4b:
21:49:92:67:db:1d:10:9b:42:61:9f:11:14:9f:75:
8b:9b:68:4d:b3:c2:64:f2:7e:ee:44:3a:db:9c:2f:
13:65:bc:15:d4:7e:0b:b4:f6:4a:6c:e5:92:b5:e8:
70:27:3e:53:16:53:f9:8f:ad:af:55:2e:db:ed:ac:
29:5c:f4:68:2b:68:81:29:47:09:a9:12:23:5a:46:
81:df:5f:d6:00:32:79:e4:db:c7:56:43:8c:1e:83:
76:ef:4b:23:bd:6e:e9:ad:cc:e1:a8:a0:b1:0d:3b:
9d:e6:61:b4:bb:be:3e:46:70:e3:72:a0:59:00:e0:
b2:90:ec:69:af:64:75:a5:88:96:8d:06:5e:06:05:
bf:0b:8e:85:a3:52:ab:3a:42:40:3c:2c:66:50:7b:
3f:e8:6b:ad:6d:bc:09:d7:d0:f6:48:c1:29:e4:f4:
1e:16:46:56:24:75:fb:90:64:ab:78:15:3b:36:19:
6a:58:f5:1c:4e:fd:ae:88:c5:b2:55:6a:cc:c1:e1:
45:d9:e7:e3:1f:26:0a:05:60:dc:17:58:3d:d1:5d:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:4A:98:D4:79:4F:E1:FF:6C:00:89:C3:41:DB:B8:F0:F0:FA:9F
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:01:cf:70:e2:4c:ce:cb:b5:7e:b2:47:46:64:48:49:5e:90:
3a:5e:e0:40:dd:09:28:4d:36:0a:e5:f2:d3:3e:be:92:e3:c8:
59:58:5e:6e:6d:54:c2:67:e3:b7:2f:91:e9:16:38:51:59:67:
a6:a3:ba:ca:4d:81:a2:2c:38:28:a0:9b:b3:04:b7:51:04:ff:
92:90:f5:bd:44:0e:b7:9e:83:0b:7d:d1:1a:22:7d:1c:db:4d:
aa:34:79:bd:f6:cf:7e:c4:90:e1:4c:d7:73:07:9b:e6:7f:cc:
45:fe:b7:05:80:83:55:42:38:5e:51:8e:fe:be:78:9c:b4:7e:
11:c2:6a:c0:eb:40:89:4c:fd:2b:8e:fe:66:da:4b:2a:54:5a:
68:4d:28:76:07:20:f5:f1:a9:25:63:50:e0:21:5e:b1:9d:45:
9e:1d:b0:75:68:2c:14:89:1f:07:3f:ba:01:a1:20:b9:23:fd:
c7:4f:6a:86:0f:d3:4f:08:55:65:19:a3:f8:49:d7:b8:c5:72:
38:a8:96:aa:ee:20:96:0a:78:02:61:10:16:d6:ee:18:88:34:
27:62:4d:5e:ae:b0:e5:5c:e6:02:3c:ed:94:0e:e7:a9:d5:52:
67:0d:b7:18:09:64:d9:54:24:0c:42:01:d0:a1:4b:91:4a:35:
90:61:69:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4zLkVIw1yuCYVcwuvzv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYWU0NmUyMTM1OTMwZGEyNjhjMDY0ZGNlNWFkYmI2M2Ew
Y2VjMzYwHhcNMjUxMTA0MjIwMDU4WhcNMjUxMTA1MjIwMDU4WjAzMTEwLwYDVQQD
Eyg5MGYzNGE5OGQ0Nzk0ZmUxZmY2YzAwODljMzQxZGJiOGYwZjBmYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9ZDynUWhCBJ9yzOiQgAqlbpLOc
DC5iRemZfkhkWAhYoJGuppbViGDPvUshSZJn2x0Qm0JhnxEUn3WLm2hNs8Jk8n7u
RDrbnC8TZbwV1H4LtPZKbOWStehwJz5TFlP5j62vVS7b7awpXPRoK2iBKUcJqRIj
WkaB31/WADJ55NvHVkOMHoN270sjvW7prczhqKCxDTud5mG0u74+RnDjcqBZAOCy
kOxpr2R1pYiWjQZeBgW/C46Fo1KrOkJAPCxmUHs/6GutbbwJ19D2SMEp5PQeFkZW
JHX7kGSreBU7NhlqWPUcTv2uiMWyVWrMweFF2efjHyYKBWDcF1g90V1cGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDzSpjUeU/h/2wAicNB27jw8PqfMB8GA1UdIwQY
MBaAFJquRuITWTDaJowGTc5a27Y6DOw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEt
OGFlNDMwODFhYTM2LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kOGZjNzgtYTUxYi00M2RjLWI1MGEtOGFlNDMwODFhYTM2
LzEvbXE1RzRoTlpNTm9takFaTnpscmJ0am9NN0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQHPcOJM
zsu1frJHRmRISV6QOl7gQN0JKE02CuXy0z6+kuPIWVhebm1Uwmfjty+R6RY4UVln
pqO6yk2Boiw4KKCbswS3UQT/kpD1vUQOt56DC33RGiJ9HNtNqjR5vfbPfsSQ4UzX
cweb5n/MRf63BYCDVUI4XlGO/r54nLR+EcJqwOtAiUz9K47+ZtpLKlRaaE0odgcg
9fGpJWNQ4CFesZ1Fnh2wdWgsFIkfBz+6AaEguSP9x09qhg/TTwhVZRmj+EnXuMVy
OKiWqu4glgp4AmEQFtbuGIg0J2JNXq6w5VzmAjztlA7nqdVSZw23GAlk2VQkDEIB
0KFLkUo1kGFplg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:00 2025 by rpki-client