Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: 9OuxwxubpNoM6ok17De1yQH141jv70f7t8LhdxGHYcE=
Subject key identifier: A7:B1:F4:A9:1C:B9:59:6D:C3:DA:9D:B3:40:FA:10:C4:D9:03:4F:B7
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019A5262FEB15D2D52DD076493DC80894C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1389
Signing time: Wed 05 Nov 2025 05:00:10 +0000
Manifest this update: Wed 05 Nov 2025 05:00:10 +0000
Manifest next update: Thu 06 Nov 2025 05:00:10 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: HRgG8xmDbEOD8OlycwE2tzx32BIvyoecBsvjvH7HKL4=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:fe:b1:5d:2d:52:dd:07:64:93:dc:80:89:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Nov 5 05:00:10 2025 GMT
Not After : Nov 6 05:00:10 2025 GMT
Subject: CN=a7b1f4a91cb9596dc3da9db340fa10c4d9034fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:a9:ae:ad:77:f7:88:08:69:13:9a:03:52:
e4:8a:80:28:ac:76:4d:8f:21:f7:65:88:db:c6:73:
85:18:ed:e7:c7:94:a0:8f:74:bd:ba:1f:0f:80:06:
fb:5e:21:f9:17:93:4f:c2:56:82:2a:fc:7c:bb:11:
a7:87:d0:8c:3d:05:db:32:df:45:b9:c3:0d:dd:60:
d7:a9:08:17:4e:ea:e3:53:3e:01:c2:9e:7e:4c:cd:
8e:e4:b8:14:4b:84:0d:c7:8e:98:b6:4c:34:bf:b2:
65:38:aa:23:f2:af:66:fb:3b:72:aa:12:a7:74:1a:
8a:f4:c5:19:d5:47:70:58:09:6c:25:c4:51:e2:b2:
5c:67:65:26:62:52:56:17:3e:55:42:b1:79:d9:16:
a7:e0:4d:6d:34:42:cb:96:ee:bf:cd:88:d6:11:29:
d8:20:2d:52:56:af:5c:91:b4:17:28:25:c2:b5:e6:
6d:c4:dc:48:7e:08:1c:31:f4:e8:45:27:42:a9:ab:
02:16:45:59:c2:68:1b:0b:b9:87:39:95:34:d3:5c:
6b:60:55:30:11:7d:c7:5c:5b:c5:9b:0b:41:be:aa:
f4:8f:e7:80:37:8b:e9:8f:50:2a:e0:56:77:5b:47:
52:4d:e8:5a:e8:f9:ea:e0:6b:25:9d:91:ce:db:33:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:F4:A9:1C:B9:59:6D:C3:DA:9D:B3:40:FA:10:C4:D9:03:4F:B7
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:11:da:32:e0:8b:b5:f0:6f:87:af:2d:aa:38:64:fd:9f:df:
d3:e1:6f:0a:30:08:63:9c:12:c0:80:3c:10:6d:92:85:19:b9:
e4:40:69:ad:4f:1a:3a:e3:b8:49:09:a6:a8:72:7b:36:e5:74:
ee:cb:44:9c:6c:f3:b0:e1:75:b3:9f:b3:2b:11:5c:47:f0:61:
24:dd:67:3c:4a:b8:52:3e:70:97:b3:a9:b5:3c:8c:93:25:58:
5f:88:a5:c4:65:93:c6:0e:6a:28:99:26:85:60:25:07:7c:d9:
ba:65:a7:14:7d:18:77:8e:f3:f6:c5:aa:00:50:03:b6:6b:fc:
48:ff:7e:ad:7b:c9:95:a3:7f:b2:ab:75:be:6e:01:97:b5:70:
68:20:a7:0d:36:34:91:41:23:53:43:32:3d:7a:41:22:f2:8e:
fa:ac:75:5d:32:25:ec:7a:77:e8:8f:06:64:c8:12:bc:5f:32:
56:16:ba:c4:2f:a1:57:05:29:09:bf:31:da:1d:5a:6a:ba:0a:
27:f1:e3:c0:35:9b:ae:ba:bd:dc:74:31:19:ef:f9:25:b0:f1:
5b:d6:4f:55:af:88:d3:ff:69:67:db:9f:cb:d7:19:c2:0f:67:
62:c5:30:f2:2c:5b:d1:54:46:ae:ec:7d:29:84:d4:8a:3b:ca:
a6:98:a4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYv6xXS1S3Qdkk9yAiUxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw
MWVkYjUwHhcNMjUxMTA1MDUwMDEwWhcNMjUxMTA2MDUwMDEwWjAzMTEwLwYDVQQD
EyhhN2IxZjRhOTFjYjk1OTZkYzNkYTlkYjM0MGZhMTBjNGQ5MDM0ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7uprq1394gIaROaA1LkioAorHZN
jyH3ZYjbxnOFGO3nx5Sgj3S9uh8PgAb7XiH5F5NPwlaCKvx8uxGnh9CMPQXbMt9F
ucMN3WDXqQgXTurjUz4Bwp5+TM2O5LgUS4QNx46Ytkw0v7JlOKoj8q9m+ztyqhKn
dBqK9MUZ1UdwWAlsJcRR4rJcZ2UmYlJWFz5VQrF52Ran4E1tNELLlu6/zYjWESnY
IC1SVq9ckbQXKCXCteZtxNxIfggcMfToRSdCqasCFkVZwmgbC7mHOZU001xrYFUw
EX3HXFvFmwtBvqr0j+eAN4vpj1Aq4FZ3W0dSTeha6Pnq4GslnZHO2zOnZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKex9KkcuVltw9qds0D6EMTZA0+3MB8GA1UdIwQY
MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt
OWJiZDFlZWJlMzNlLzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl
LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxHaMuCL
tfBvh68tqjhk/Z/f0+FvCjAIY5wSwIA8EG2ShRm55EBprU8aOuO4SQmmqHJ7NuV0
7stEnGzzsOF1s5+zKxFcR/BhJN1nPEq4Uj5wl7OptTyMkyVYX4ilxGWTxg5qKJkm
hWAlB3zZumWnFH0Yd47z9sWqAFADtmv8SP9+rXvJlaN/sqt1vm4Bl7VwaCCnDTY0
kUEjU0MyPXpBIvKO+qx1XTIl7Hp36I8GZMgSvF8yVha6xC+hVwUpCb8x2h1aaroK
J/HjwDWbrrq93HQxGe/5JbDxW9ZPVa+I0/9pZ9ufy9cZwg9nYsUw8ixb0VRGrux9
KYTUijvKppikkQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:14 2025 by rpki-client