
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: QXkC6QFRQBmpyBX9VduxonTdsiIam1fMides9ncT/qE=
Subject key identifier: EE:BD:99:41:C1:59:DC:1B:A5:77:84:96:B1:AD:C8:BE:91:48:6E:F0
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019A548852C61495A9AF05FB707C3E3498D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: E0
Signing time: Wed 05 Nov 2025 15:00:11 +0000
Manifest this update: Wed 05 Nov 2025 15:00:11 +0000
Manifest next update: Thu 06 Nov 2025 15:00:11 +0000
Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: RnkYHLIYY+bdUoec/ua4hBnf/v45oNGz3zC9z5bPumI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:52:c6:14:95:a9:af:05:fb:70:7c:3e:34:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Nov 5 15:00:11 2025 GMT
Not After : Nov 6 15:00:11 2025 GMT
Subject: CN=eebd9941c159dc1ba5778496b1adc8be91486ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:a7:a3:a5:48:f3:0d:76:73:54:3f:e2:de:
94:bf:f8:5a:c5:9d:3a:bf:d8:02:19:db:22:d6:f6:
0a:9a:10:29:c9:28:66:09:c1:a6:19:7d:3e:f0:7c:
b0:94:14:29:17:93:ee:e8:9b:02:8f:18:4a:87:05:
e4:22:42:82:77:b9:47:cc:10:88:32:32:54:d3:d0:
f0:c0:9d:5a:ed:0b:dc:43:37:6b:60:44:2d:41:29:
13:d8:14:82:15:d4:59:83:5a:6a:92:1d:c8:e0:2b:
14:9c:0f:b8:9f:33:a5:43:9c:d0:30:3c:87:c7:cf:
90:94:ca:1b:cb:df:c8:6d:72:e7:d9:51:73:28:7f:
7e:be:f5:16:93:2a:43:f5:1d:ce:1d:e2:56:65:51:
f1:54:fe:e2:ee:10:d4:64:35:87:55:13:7d:8b:e0:
ec:ee:5e:83:a3:79:4f:0d:a8:1c:fb:7c:aa:c9:3f:
9f:26:2f:54:8b:be:29:02:88:76:64:2f:f4:20:9e:
d9:ff:eb:66:2a:90:f4:c8:51:62:9e:eb:01:86:6e:
d2:91:c1:57:5f:0d:6c:10:1d:48:e3:bc:27:a7:56:
b4:47:69:bd:24:d0:be:8e:44:1f:36:67:c1:ef:e1:
71:a8:0c:02:b0:f2:50:fd:6b:57:e3:79:c7:a3:3b:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:99:41:C1:59:DC:1B:A5:77:84:96:B1:AD:C8:BE:91:48:6E:F0
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:45:df:5d:36:10:0d:b9:26:b2:72:d8:cc:26:05:68:bc:0d:
49:0b:28:c0:54:de:5a:ce:bb:b0:b9:3e:ad:35:8d:4d:d9:14:
0e:28:2e:0a:35:23:b5:53:e0:b0:5d:88:6a:ec:45:ee:6c:73:
0e:14:cf:16:9b:88:6a:f8:86:12:d7:b2:6f:e9:75:a9:9d:65:
66:5f:5a:24:8a:ce:a2:c5:3b:cb:48:f1:36:8a:2b:e2:87:74:
71:f6:33:43:a5:10:98:d9:d0:2b:83:4b:2f:01:1a:21:74:93:
19:12:25:82:ac:c9:59:00:4f:ae:a6:b5:43:69:eb:77:ad:97:
23:72:9f:42:4d:b4:c8:2f:f0:05:a1:98:cb:d3:5b:4e:1d:37:
65:ab:43:d5:99:f7:50:de:b5:5a:67:b2:a1:27:c7:fe:a2:30:
d3:f8:3d:47:c2:51:1f:c9:ad:5f:d9:9d:dd:82:53:0c:07:5c:
5e:ea:75:7a:a9:11:64:91:56:e0:71:9c:58:d4:29:8e:ba:20:
d0:c4:69:ee:3d:c6:40:e3:f5:59:48:50:82:10:32:09:b9:c8:
74:7b:5c:01:c8:5d:8b:de:7d:a3:19:6a:0d:97:fe:2a:09:5f:
95:df:e0:e1:0c:5e:17:86:04:49:52:8f:9e:80:74:ca:16:b5:
93:f1:49:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUiFLGFJWprwX7cHw+NJjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2
MmNhMjAwHhcNMjUxMTA1MTUwMDExWhcNMjUxMTA2MTUwMDExWjAzMTEwLwYDVQQD
EyhlZWJkOTk0MWMxNTlkYzFiYTU3Nzg0OTZiMWFkYzhiZTkxNDg2ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSmno6VI8w12c1Q/4t6Uv/haxZ06
v9gCGdsi1vYKmhApyShmCcGmGX0+8HywlBQpF5Pu6JsCjxhKhwXkIkKCd7lHzBCI
MjJU09DwwJ1a7QvcQzdrYEQtQSkT2BSCFdRZg1pqkh3I4CsUnA+4nzOlQ5zQMDyH
x8+QlMoby9/IbXLn2VFzKH9+vvUWkypD9R3OHeJWZVHxVP7i7hDUZDWHVRN9i+Ds
7l6Do3lPDagc+3yqyT+fJi9Ui74pAoh2ZC/0IJ7Z/+tmKpD0yFFinusBhm7SkcFX
Xw1sEB1I47wnp1a0R2m9JNC+jkQfNmfB7+FxqAwCsPJQ/WtX43nHozvH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO69mUHBWdwbpXeElrGtyL6RSG7wMB8GA1UdIwQY
MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt
YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx
LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEXfXTYQ
DbkmsnLYzCYFaLwNSQsowFTeWs67sLk+rTWNTdkUDiguCjUjtVPgsF2IauxF7mxz
DhTPFpuIaviGEteyb+l1qZ1lZl9aJIrOosU7y0jxNoor4od0cfYzQ6UQmNnQK4NL
LwEaIXSTGRIlgqzJWQBPrqa1Q2nrd62XI3KfQk20yC/wBaGYy9NbTh03ZatD1Zn3
UN61WmeyoSfH/qIw0/g9R8JRH8mtX9md3YJTDAdcXup1eqkRZJFW4HGcWNQpjrog
0MRp7j3GQOP1WUhQghAyCbnIdHtcAchdi959oxlqDZf+Kglfld/g4QxeF4YESVKP
noB0yha1k/FJeQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:41:51 2025 by rpki-client