Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: UYCQEOAWPn0KdQMqIsSTpWcWdqNXdjpANck0/ii/+Jc=
Subject key identifier: 9C:69:69:A3:26:15:23:6B:29:07:5F:B7:BB:64:B8:D1:03:CA:ED:C1
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019A50E355432268F6BC36D6692274135735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 1596
Signing time: Tue 04 Nov 2025 22:01:07 +0000
Manifest this update: Tue 04 Nov 2025 22:01:07 +0000
Manifest next update: Wed 05 Nov 2025 22:01:07 +0000
Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: RWc2eq2U70ooN1Wr+0V4gSaHtcxWyYZYkMxs16WvK68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:55:43:22:68:f6:bc:36:d6:69:22:74:13:57:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Nov 4 22:01:07 2025 GMT
Not After : Nov 5 22:01:07 2025 GMT
Subject: CN=9c6969a32615236b29075fb7bb64b8d103caedc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:96:ca:3e:46:32:2d:51:72:33:34:e5:e5:
3d:9a:ac:6b:ec:0a:3d:0a:ac:5e:a7:c1:a2:f9:cf:
04:b6:2b:71:1f:8d:79:d3:84:17:fb:c5:c0:c6:5b:
7a:18:16:ea:1b:07:f4:5f:32:f0:14:e9:6e:9d:0f:
bd:75:52:6f:06:e0:8b:34:ab:51:5a:5e:61:f8:37:
8b:62:13:c0:76:5d:0d:1f:f9:db:ec:02:c7:d9:41:
1c:2b:e4:80:24:11:1d:a5:42:ba:11:26:5a:11:35:
03:cc:a5:d8:a0:4e:b5:d2:2b:2c:44:cc:ba:51:37:
4e:bc:5c:76:bc:21:40:52:bd:3f:25:b1:2b:e3:fc:
69:b6:50:c8:40:a9:79:25:8d:96:d9:79:ce:cd:fd:
9a:2a:84:ff:80:6f:64:76:83:78:3b:a0:c5:80:49:
95:88:ce:86:3d:d1:81:67:95:fd:09:7d:16:29:57:
e0:c1:47:35:af:22:3d:05:0d:c6:08:5b:c2:4c:1f:
88:ed:8f:40:bf:61:18:74:46:45:56:26:c1:79:3a:
97:3b:e9:7d:db:2e:7f:3f:9f:3a:ab:8c:4d:f7:2a:
ab:de:47:e5:61:72:c8:6c:dc:8a:58:5c:7e:5e:1e:
b6:66:20:3d:2a:20:0e:fd:82:bf:38:d7:5a:9e:38:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:69:A3:26:15:23:6B:29:07:5F:B7:BB:64:B8:D1:03:CA:ED:C1
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:9b:0f:8d:26:39:39:eb:ca:95:35:aa:ea:d3:49:b4:c3:
97:72:4e:aa:1a:83:eb:9b:da:4b:5d:e8:c0:6f:8a:a9:2a:9d:
4f:8f:5a:73:a8:94:60:e7:59:d2:d7:36:6d:88:d0:d4:fe:23:
6c:c4:75:5e:4d:00:fa:21:9e:5f:d7:11:d5:58:cc:ba:a3:3d:
38:1b:d3:01:f8:ba:0a:f0:b3:20:99:49:a4:20:b0:fd:8a:94:
21:c7:ca:74:1c:08:f9:89:7b:05:f5:ea:7a:70:79:b3:9d:46:
4e:a9:93:56:97:9f:1a:af:65:81:c7:a8:47:5f:4c:f2:da:3b:
5d:6e:a0:06:e4:4b:8b:5f:96:6a:b7:b4:eb:28:32:f9:48:b6:
18:11:38:b4:51:05:3e:01:93:37:5a:fd:0a:4e:4c:c9:f5:3a:
00:9f:0b:9a:0b:9f:fd:3a:52:c4:5c:ee:8d:75:a6:b0:84:28:
f9:64:57:d6:dd:ed:91:de:2d:7a:95:3f:69:ca:05:57:70:79:
15:40:c9:06:6c:b9:9e:22:d7:66:46:cb:e3:03:43:e4:f5:92:
6f:e6:70:23:73:bd:0d:e8:47:af:05:b4:10:84:60:25:e9:8f:
e2:ef:de:f8:9e:fe:f9:2c:5c:93:f0:0b:cf:d5:3f:51:89:a5:
b2:7b:c8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ41VDImj2vDbWaSJ0E1c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjUxMTA0MjIwMTA3WhcNMjUxMTA1MjIwMTA3WjAzMTEwLwYDVQQD
Eyg5YzY5NjlhMzI2MTUyMzZiMjkwNzVmYjdiYjY0YjhkMTAzY2FlZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjimWyj5GMi1RcjM05eU9mqxr7Ao9
Cqxep8Gi+c8EtitxH41504QX+8XAxlt6GBbqGwf0XzLwFOlunQ+9dVJvBuCLNKtR
Wl5h+DeLYhPAdl0NH/nb7ALH2UEcK+SAJBEdpUK6ESZaETUDzKXYoE610issRMy6
UTdOvFx2vCFAUr0/JbEr4/xptlDIQKl5JY2W2XnOzf2aKoT/gG9kdoN4O6DFgEmV
iM6GPdGBZ5X9CX0WKVfgwUc1ryI9BQ3GCFvCTB+I7Y9Av2EYdEZFVibBeTqXO+l9
2y5/P586q4xN9yqr3kflYXLIbNyKWFx+Xh62ZiA9KiAO/YK/ONdanjgbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxpaaMmFSNrKQdft7tkuNEDyu3BMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViibD40m
OTnrypU1qurTSbTDl3JOqhqD65vaS13owG+KqSqdT49ac6iUYOdZ0tc2bYjQ1P4j
bMR1Xk0A+iGeX9cR1VjMuqM9OBvTAfi6CvCzIJlJpCCw/YqUIcfKdBwI+Yl7BfXq
enB5s51GTqmTVpefGq9lgceoR19M8to7XW6gBuRLi1+Ware06ygy+Ui2GBE4tFEF
PgGTN1r9Ck5MyfU6AJ8Lmguf/TpSxFzujXWmsIQo+WRX1t3tkd4tepU/acoFV3B5
FUDJBmy5niLXZkbL4wND5PWSb+ZwI3O9DehHrwW0EIRgJemP4u/e+J7++Sxck/AL
z9U/UYmlsnvIBA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:03:44 2025 by rpki-client