Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: noEPEQuGdpFGVkVfpeviA7ls72s/AVnXYhr6rcDdm9U=
Subject key identifier: B6:69:E3:DB:AD:93:04:C7:36:A6:29:DD:C7:C2:FD:A5:04:B3:D0:6A
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 019A51BEA028BB5D53581C9A2BDA018B9123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 12A5
Signing time: Wed 05 Nov 2025 02:00:38 +0000
Manifest this update: Wed 05 Nov 2025 02:00:38 +0000
Manifest next update: Thu 06 Nov 2025 02:00:38 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: ZfEh7riId6lUAdFS3sI+qcjvJsNWIbyvoZXmN9YQEiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a0:28:bb:5d:53:58:1c:9a:2b:da:01:8b:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Nov 5 02:00:38 2025 GMT
Not After : Nov 6 02:00:38 2025 GMT
Subject: CN=b669e3dbad9304c736a629ddc7c2fda504b3d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:68:80:66:ff:28:8f:52:d3:ef:67:ff:bf:
61:29:9f:52:6b:e6:02:31:71:d7:ac:e0:0e:e3:92:
37:8d:2d:fd:af:32:10:1e:46:10:7f:56:cc:c1:ff:
27:48:be:39:19:1d:6e:2c:0e:0f:ec:d2:d4:f3:fc:
79:99:30:79:8d:88:f8:af:ac:fc:78:ba:f9:fe:86:
05:af:77:3d:bd:31:16:d6:77:b7:ba:b4:90:15:52:
a9:22:28:64:d3:18:71:60:b8:a8:b3:2a:a6:75:fc:
78:9a:e3:26:56:f4:00:26:df:87:96:4f:d1:f7:05:
50:23:a2:14:31:b1:a4:ae:ad:cc:09:f0:d4:a4:46:
00:ca:83:ff:74:e7:f1:ed:05:f8:e3:c8:6d:10:90:
52:69:b5:1f:7b:3e:2d:93:ce:19:cc:4b:42:83:91:
34:0d:67:d5:a7:37:b9:fc:87:78:e6:1b:27:40:cd:
58:2b:94:94:51:25:95:ce:06:6f:f4:e5:19:2e:9c:
d8:79:5e:46:c0:e2:6f:c3:f8:1b:d2:f2:c9:92:93:
e0:23:09:1b:7d:a3:ce:d6:c9:ef:c3:0b:00:ac:31:
12:1a:3b:e2:8c:30:96:13:68:e8:b7:f8:8d:44:1a:
bc:a3:94:f7:76:b9:e8:df:7e:ec:18:bf:fd:e2:6f:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:E3:DB:AD:93:04:C7:36:A6:29:DD:C7:C2:FD:A5:04:B3:D0:6A
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5d:cf:fa:28:4d:2f:57:f1:6f:0a:02:20:1d:16:b2:3c:92:
59:1a:f9:94:1f:07:17:66:14:53:97:31:90:bf:da:64:eb:fb:
68:02:f2:ec:e3:72:4c:07:2e:d3:8e:c4:24:27:73:18:65:7f:
3e:4f:8f:43:55:b7:41:2e:43:ab:37:cd:bc:41:92:34:c5:78:
7a:5f:3b:52:b7:12:65:15:f7:71:de:80:b5:39:cb:cf:71:ba:
ea:68:45:1a:da:e8:cc:7d:bb:be:cd:78:04:dc:19:d8:13:5f:
42:33:6a:ed:66:68:34:9a:26:35:26:77:89:e2:94:f8:1b:e6:
3a:ee:da:9f:63:da:9a:b6:91:3e:c3:04:45:7e:98:c0:ff:f8:
94:36:f0:a5:d2:81:fb:69:01:6b:7b:ad:98:48:75:8f:b3:e7:
cb:cf:8a:ea:cd:6f:57:ed:0f:bb:2b:e8:71:ea:01:f2:b5:f7:
9c:67:4a:33:9a:e4:92:15:5e:89:f1:1e:a5:77:a5:ed:36:00:
b8:8a:7c:84:c1:4c:ee:47:35:17:78:ae:a7:49:a2:ce:e8:51:
18:32:6c:78:9d:09:2a:11:d2:4e:dc:a9:da:de:5d:2a:4b:82:
62:43:60:8a:7a:8e:d8:8e:c6:b4:78:be:9c:6b:42:c6:95:55:
02:7f:d0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvqAou11TWByaK9oBi5EjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm
MWRiNWQwHhcNMjUxMTA1MDIwMDM4WhcNMjUxMTA2MDIwMDM4WjAzMTEwLwYDVQQD
EyhiNjY5ZTNkYmFkOTMwNGM3MzZhNjI5ZGRjN2MyZmRhNTA0YjNkMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobtogGb/KI9S0+9n/79hKZ9Sa+YC
MXHXrOAO45I3jS39rzIQHkYQf1bMwf8nSL45GR1uLA4P7NLU8/x5mTB5jYj4r6z8
eLr5/oYFr3c9vTEW1ne3urSQFVKpIihk0xhxYLiosyqmdfx4muMmVvQAJt+Hlk/R
9wVQI6IUMbGkrq3MCfDUpEYAyoP/dOfx7QX448htEJBSabUfez4tk84ZzEtCg5E0
DWfVpze5/Id45hsnQM1YK5SUUSWVzgZv9OUZLpzYeV5GwOJvw/gb0vLJkpPgIwkb
faPO1snvwwsArDESGjvijDCWE2jot/iNRBq8o5T3drno337sGL/94m9zEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZp49utkwTHNqYp3cfC/aUEs9BqMB8GA1UdIwQY
MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt
YTIxOWNiNGQ0YTNiLzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi
LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp13P+ihN
L1fxbwoCIB0WsjySWRr5lB8HF2YUU5cxkL/aZOv7aALy7ONyTAcu047EJCdzGGV/
Pk+PQ1W3QS5DqzfNvEGSNMV4el87UrcSZRX3cd6AtTnLz3G66mhFGtrozH27vs14
BNwZ2BNfQjNq7WZoNJomNSZ3ieKU+BvmOu7an2PamraRPsMERX6YwP/4lDbwpdKB
+2kBa3utmEh1j7Pny8+K6s1vV+0PuyvoceoB8rX3nGdKM5rkkhVeifEepXel7TYA
uIp8hMFM7kc1F3iup0mizuhRGDJseJ0JKhHSTtyp2t5dKkuCYkNginqO2I7GtHi+
nGtCxpVVAn/Qfw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:30 2025 by rpki-client