Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: A/JhVmtYuFuK4chzoA/93D/lrFNtQpNdMhB8fGPh/s4=
Subject key identifier: 33:A4:CE:DB:E1:74:8C:3C:3E:3E:19:45:8C:F1:EE:5E:51:92:0D:9A
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 019A4DE1A1855D6F462E3DA70D7DC3287F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: vIs06/pAlKQYMfyK/nbmOHsutWtsQAf8jG9QsSoX8Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:85:5d:6f:46:2e:3d:a7:0d:7d:c3:28:7f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=33a4cedbe1748c3c3e3e19458cf1ee5e51920d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:eb:35:45:5e:2a:9f:ee:bf:fb:1f:9e:6f:
14:b5:d6:db:27:64:aa:58:6d:b7:64:8f:c9:f0:bb:
07:7a:fc:3d:60:71:e4:36:87:7e:c7:2e:7d:c4:f6:
d4:e9:37:6d:3c:9f:e6:b0:2f:f2:1b:b6:db:7b:65:
d7:93:ea:e0:58:c5:9b:ff:34:a3:8a:69:e3:ae:2e:
11:c6:3c:f4:dc:49:eb:04:1d:98:13:c0:f4:44:75:
1f:32:0e:fb:f8:ed:c7:54:f7:5c:52:08:d8:a9:0a:
f1:bb:e4:88:95:73:12:27:50:13:5d:0d:1c:49:c6:
3a:4f:d5:9b:42:87:0e:4a:65:03:31:4d:57:9b:80:
20:a2:2d:16:ff:0c:4e:04:59:26:12:93:b8:2f:ba:
46:d3:cc:2c:4b:6c:b3:97:45:2f:22:10:be:87:b5:
8a:a9:d6:7a:32:30:61:ec:d1:ca:3a:8e:79:c3:33:
6b:4c:05:1b:0e:9a:1c:47:1f:e1:f6:67:04:96:5a:
e9:05:15:43:ec:67:26:6a:59:ad:ae:2c:8b:70:c8:
d5:9b:cb:f3:13:70:e8:e5:ef:7d:54:d9:0c:4c:e2:
e3:0c:41:44:b9:b9:fb:1e:20:f0:b8:57:3d:03:53:
99:4a:7e:7b:37:ac:a1:46:02:fe:95:44:d4:62:b3:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:CE:DB:E1:74:8C:3C:3E:3E:19:45:8C:F1:EE:5E:51:92:0D:9A
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:59:22:10:0a:9a:4e:59:49:92:68:a4:0f:9d:e8:bf:d0:
a0:08:c8:72:ab:4f:5e:2a:61:26:e2:81:cf:d7:a6:7a:90:bc:
4d:6e:33:75:69:7c:d6:a4:15:64:6b:87:72:61:b5:36:c8:a7:
f0:b5:a0:f0:be:f0:69:b7:ab:6d:9d:8b:4d:da:6a:05:79:8b:
69:86:4b:6f:ef:b8:50:d5:c9:06:89:8f:22:4c:a8:b2:2c:c1:
74:42:f1:7d:fb:9f:2a:2d:a5:af:f6:68:dc:49:81:0d:e8:00:
9c:95:5c:f4:58:2d:5f:f5:97:21:8d:86:89:ee:ff:af:0d:e1:
ed:0a:50:a2:a0:fe:db:21:99:cf:93:bc:73:a1:21:59:f6:b6:
77:3a:cd:36:7d:83:e7:1e:9f:fb:71:34:2c:c0:4d:35:fe:45:
93:33:0f:d5:47:c7:40:d4:36:73:a3:6f:a2:8c:81:4a:3f:ff:
d5:12:51:9d:26:b4:57:fc:7e:ee:f0:ef:cc:b0:94:75:77:03:
3a:45:25:84:46:ce:cb:93:fc:92:88:2f:64:73:39:f7:f3:dd:
e9:ff:17:9b:1a:68:26:f6:2d:25:70:2a:82:4b:b1:a1:e4:10:
88:62:4a:02:47:51:76:1a:11:49:95:76:83:c6:46:63:d3:fe:
3e:08:f2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4aGFXW9GLj2nDX3DKH9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGViMmUxZjg1YTE3ZGEyNDBjZmM4MTZkOTcyYzg1ZTQx
MWU2MjQwHhcNMjUxMTA0MDgwMDIzWhcNMjUxMTA1MDgwMDIzWjAzMTEwLwYDVQQD
EygzM2E0Y2VkYmUxNzQ4YzNjM2UzZTE5NDU4Y2YxZWU1ZTUxOTIwZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrLrNUVeKp/uv/sfnm8UtdbbJ2Sq
WG23ZI/J8LsHevw9YHHkNod+xy59xPbU6TdtPJ/msC/yG7bbe2XXk+rgWMWb/zSj
imnjri4Rxjz03EnrBB2YE8D0RHUfMg77+O3HVPdcUgjYqQrxu+SIlXMSJ1ATXQ0c
ScY6T9WbQocOSmUDMU1Xm4Agoi0W/wxOBFkmEpO4L7pG08wsS2yzl0UvIhC+h7WK
qdZ6MjBh7NHKOo55wzNrTAUbDpocRx/h9mcEllrpBRVD7GcmalmtriyLcMjVm8vz
E3Do5e99VNkMTOLjDEFEubn7HiDwuFc9A1OZSn57N6yhRgL+lUTUYrMg+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOkztvhdIw8Pj4ZRYzx7l5Rkg2aMB8GA1UdIwQY
MBaAFJnesuH4WhfaJAz8gW2XLIXkEeYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAt
OGRjOTRlODliZjAzLzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAtOGRjOTRlODliZjAz
LzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEZZIhAK
mk5ZSZJopA+d6L/QoAjIcqtPXiphJuKBz9emepC8TW4zdWl81qQVZGuHcmG1Nsin
8LWg8L7waberbZ2LTdpqBXmLaYZLb++4UNXJBomPIkyosizBdELxffufKi2lr/Zo
3EmBDegAnJVc9FgtX/WXIY2Gie7/rw3h7QpQoqD+2yGZz5O8c6EhWfa2dzrNNn2D
5x6f+3E0LMBNNf5FkzMP1UfHQNQ2c6NvooyBSj//1RJRnSa0V/x+7vDvzLCUdXcD
OkUlhEbOy5P8kogvZHM59/Pd6f8XmxpoJvYtJXAqgkuxoeQQiGJKAkdRdhoRSZV2
g8ZGY9P+PgjydQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client