Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: NB8wP5x9fyJ+79+YxPQmLHNCBQGbo9GxlwtNUh4hU/g=
Subject key identifier: BF:53:FC:A1:87:4D:F3:F5:A7:E1:F1:16:01:6F:65:BF:68:F6:AA:84
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019A4E19176D5F6C7D61ADEEE17DA4A0813B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 07E2
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: EhWNr0XaXwTwUSSsGIUwGnyivW0wqWD4K9Tiy0n01yg=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:17:6d:5f:6c:7d:61:ad:ee:e1:7d:a4:a0:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=bf53fca1874df3f5a7e1f116016f65bf68f6aa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:2f:a7:c7:aa:d3:1e:cf:26:7b:63:c0:e8:
86:f3:87:9f:19:f9:a1:38:06:10:38:6b:ca:de:d9:
c5:67:79:17:8d:91:38:ec:41:1a:a3:4d:44:bd:0f:
9c:93:95:9a:f5:eb:f5:25:5a:a2:06:39:c9:49:16:
0f:c2:1e:23:26:e7:12:1a:93:3e:a4:73:45:8e:a3:
c1:e3:f8:62:22:9d:8b:f0:bb:d8:ed:16:4f:d5:68:
41:5b:44:74:fb:ad:b8:5f:59:3e:e7:35:b5:32:c3:
78:e2:c8:2f:1b:70:45:9a:ad:16:c5:dd:af:9e:03:
dc:32:7a:c6:5a:22:37:6f:ee:39:19:6c:aa:13:43:
fb:09:f6:8c:fc:cd:56:9f:3f:a6:21:fa:02:26:23:
0b:6f:8c:06:a2:95:33:6c:8e:5e:da:a4:68:1f:82:
d8:68:a7:d9:52:52:51:52:c7:0e:bb:7a:a8:82:fe:
5a:30:9e:d8:e6:f0:27:15:c4:e7:11:35:3e:1a:0b:
d0:d6:3c:4c:39:a6:87:f6:38:6f:41:32:04:bd:42:
61:ed:94:dd:92:b0:9b:ba:3d:2a:c6:43:0b:07:da:
18:a6:80:1e:cb:91:6f:60:4f:f0:bc:6f:cd:d2:d5:
f2:aa:c6:d7:2e:cb:8e:a0:9b:52:65:ad:20:2f:3d:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:FC:A1:87:4D:F3:F5:A7:E1:F1:16:01:6F:65:BF:68:F6:AA:84
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:46:24:ef:a6:77:1f:6a:5a:23:e4:e0:5f:af:2f:94:7a:
23:a9:e0:da:6a:56:36:9a:19:d3:8d:a9:73:f5:06:63:a9:7e:
54:d5:2f:1c:6a:cd:e3:45:2f:e9:2f:bc:7c:fa:a3:5f:67:89:
db:c2:a9:e9:e8:ba:30:3a:7a:f5:ec:74:ff:a0:88:04:c7:eb:
69:b6:7e:62:aa:73:c0:b1:02:58:3b:e3:48:57:06:19:87:cf:
f3:59:d5:90:2b:6e:1b:e5:15:ee:f3:96:49:a4:48:38:65:e9:
4d:4a:88:0c:32:fe:a4:a7:bc:96:18:93:2e:2f:43:25:7b:57:
3c:08:a7:3e:e9:3f:e1:d7:55:9e:7c:b8:21:da:5f:5f:da:74:
77:b8:2f:a9:2e:84:41:c1:3c:86:e8:cc:46:28:d3:b2:1e:4e:
78:0c:90:dc:23:1e:02:62:9b:c2:f2:f9:ef:4f:51:b2:78:5c:
66:9b:b2:89:60:87:80:3f:e3:34:51:0d:c4:e3:97:21:a6:bf:
aa:dc:ee:d8:f9:76:0c:c2:34:dc:b7:9c:ea:be:73:c8:59:0c:
7c:a6:e0:99:0c:15:3e:0e:76:c4:f1:47:ab:42:5d:7d:ee:dd:
42:1f:6d:0a:47:41:f7:eb:a6:ab:5c:0d:21:22:6e:0c:34:ff:
74:af:75:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRdtX2x9Ya3u4X2koIE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjUxMTA0MDkwMDU4WhcNMjUxMTA1MDkwMDU4WjAzMTEwLwYDVQQD
EyhiZjUzZmNhMTg3NGRmM2Y1YTdlMWYxMTYwMTZmNjViZjY4ZjZhYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIvp8eq0x7PJntjwOiG84efGfmh
OAYQOGvK3tnFZ3kXjZE47EEao01EvQ+ck5Wa9ev1JVqiBjnJSRYPwh4jJucSGpM+
pHNFjqPB4/hiIp2L8LvY7RZP1WhBW0R0+624X1k+5zW1MsN44sgvG3BFmq0Wxd2v
ngPcMnrGWiI3b+45GWyqE0P7CfaM/M1Wnz+mIfoCJiMLb4wGopUzbI5e2qRoH4LY
aKfZUlJRUscOu3qogv5aMJ7Y5vAnFcTnETU+GgvQ1jxMOaaH9jhvQTIEvUJh7ZTd
krCbuj0qxkMLB9oYpoAey5FvYE/wvG/N0tXyqsbXLsuOoJtSZa0gLz1yuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9T/KGHTfP1p+HxFgFvZb9o9qqEMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjdGJO+m
dx9qWiPk4F+vL5R6I6ng2mpWNpoZ042pc/UGY6l+VNUvHGrN40Uv6S+8fPqjX2eJ
28Kp6ei6MDp69ex0/6CIBMfrabZ+YqpzwLECWDvjSFcGGYfP81nVkCtuG+UV7vOW
SaRIOGXpTUqIDDL+pKe8lhiTLi9DJXtXPAinPuk/4ddVnny4IdpfX9p0d7gvqS6E
QcE8hujMRijTsh5OeAyQ3CMeAmKbwvL5709RsnhcZpuyiWCHgD/jNFENxOOXIaa/
qtzu2Pl2DMI03Lec6r5zyFkMfKbgmQwVPg52xPFHq0Jdfe7dQh9tCkdB9+umq1wN
ISJuDDT/dK91lw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:45 2025 by rpki-client