Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: YbaQcuxYwdMbRcrs6vQAA2BY77hujRC3+thyAJw1WkQ=
Subject key identifier: 8A:02:E7:F4:E7:10:C2:5A:12:0B:90:5A:F9:B2:4C:23:26:15:B9:9D
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019A4F629C45AC36E06935DEA40C1825934C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: aOBZBqbIsjhPJo0WYe6W2Jc/t6Z64uFnukeI7717ibA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9c:45:ac:36:e0:69:35:de:a4:0c:18:25:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=8a02e7f4e710c25a120b905af9b24c232615b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:a8:8e:54:54:57:93:4c:a3:a1:6a:e9:52:
f9:70:84:d4:fe:c1:2b:ee:47:30:65:4f:d2:e9:c5:
bd:8a:0f:f8:26:a0:4c:95:b4:7d:c6:d5:eb:90:5a:
d2:36:7e:50:a5:59:a8:a7:41:cb:31:b5:25:7b:f2:
64:5a:d6:74:bb:17:cd:63:b6:69:95:7e:8d:84:32:
7b:d4:d9:e6:dd:e3:dd:9f:f7:92:d6:e7:d0:64:45:
97:27:27:f3:90:64:25:ac:74:bd:36:fd:e1:b6:5b:
0c:99:49:a8:80:7d:8c:bf:c7:c4:12:b2:96:60:27:
dc:b2:5d:af:4a:fc:4e:8e:39:4d:02:3d:56:72:d9:
11:1e:1e:24:c5:f0:21:d9:3d:40:c5:ed:dc:cf:44:
38:3b:5c:45:72:1e:7b:31:18:ec:e4:25:b8:a9:e0:
5f:a8:f2:bd:34:e2:9e:a3:7e:a7:04:0f:e5:a3:9b:
8a:12:67:48:4a:24:84:32:c3:f0:06:f0:c8:70:cc:
bf:2d:83:2d:c1:48:c9:df:5b:73:81:80:ee:01:d3:
61:40:79:1f:62:91:ae:22:b5:8e:d0:38:a3:ad:c9:
7a:db:b1:77:71:ba:f1:67:73:7b:df:5f:14:5e:7f:
d7:83:37:23:ec:9d:ce:2f:8b:7c:06:18:97:96:3d:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:E7:F4:E7:10:C2:5A:12:0B:90:5A:F9:B2:4C:23:26:15:B9:9D
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:3e:29:90:10:82:c6:5b:1f:85:98:e2:06:2d:be:71:8b:
e8:15:47:39:88:13:13:74:66:0e:6a:64:44:07:09:22:74:e3:
f5:49:0e:82:1a:84:a3:6a:7d:05:2a:b6:6b:9b:f9:b5:d0:c2:
b3:71:47:a5:14:12:f3:ce:a9:85:f7:2a:71:70:df:7d:f8:61:
34:64:29:15:3d:89:ed:b8:61:bb:3f:e4:fb:a2:75:62:67:94:
9b:55:4f:78:6b:f7:44:4f:12:89:7d:93:a4:67:fe:4d:b5:f0:
38:61:c0:2c:a7:25:54:0c:22:73:05:99:71:ff:57:4c:5a:c7:
45:a3:1f:97:c5:00:1a:f2:b7:7a:df:94:76:09:7c:32:e0:1c:
cd:31:8c:0b:f4:e8:2c:a5:3f:c8:00:5f:32:ca:40:e9:20:a3:
be:24:4a:a5:ca:93:69:f9:40:b3:62:cb:50:31:5a:35:b6:f0:
05:73:0f:df:1e:b1:17:08:53:14:a2:ac:ff:ca:5f:50:04:48:
b8:65:65:f0:14:f1:b6:31:6e:e2:08:50:41:a8:9d:0a:69:bf:
00:0e:62:e6:33:26:34:fb:8e:a5:ac:66:d0:03:d3:11:12:50:
b0:5d:51:84:b4:3b:76:94:2c:b8:65:e0:59:2b:1d:42:94:d6:
6e:7e:b8:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpxFrDbgaTXepAwYJZNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUxMTA0MTUwMDUzWhcNMjUxMTA1MTUwMDUzWjAzMTEwLwYDVQQD
Eyg4YTAyZTdmNGU3MTBjMjVhMTIwYjkwNWFmOWIyNGMyMzI2MTViOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QiojlRUV5NMo6Fq6VL5cITU/sEr
7kcwZU/S6cW9ig/4JqBMlbR9xtXrkFrSNn5QpVmop0HLMbUle/JkWtZ0uxfNY7Zp
lX6NhDJ71Nnm3ePdn/eS1ufQZEWXJyfzkGQlrHS9Nv3htlsMmUmogH2Mv8fEErKW
YCfcsl2vSvxOjjlNAj1WctkRHh4kxfAh2T1Axe3cz0Q4O1xFch57MRjs5CW4qeBf
qPK9NOKeo36nBA/lo5uKEmdISiSEMsPwBvDIcMy/LYMtwUjJ31tzgYDuAdNhQHkf
YpGuIrWO0Dijrcl627F3cbrxZ3N7318UXn/Xgzcj7J3OL4t8BhiXlj01VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoC5/TnEMJaEguQWvmyTCMmFbmdMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8Q+KZAQ
gsZbH4WY4gYtvnGL6BVHOYgTE3RmDmpkRAcJInTj9UkOghqEo2p9BSq2a5v5tdDC
s3FHpRQS886phfcqcXDfffhhNGQpFT2J7bhhuz/k+6J1YmeUm1VPeGv3RE8SiX2T
pGf+TbXwOGHALKclVAwicwWZcf9XTFrHRaMfl8UAGvK3et+Udgl8MuAczTGMC/To
LKU/yABfMspA6SCjviRKpcqTaflAs2LLUDFaNbbwBXMP3x6xFwhTFKKs/8pfUARI
uGVl8BTxtjFu4ghQQaidCmm/AA5i5jMmNPuOpaxm0APTERJQsF1RhLQ7dpQsuGXg
WSsdQpTWbn64og==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:25 2025 by rpki-client