
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier: T/2lzsYDqDyWMJZeyTZ2xoKxtHqEBFcdIF+bcUOPQAU=
Subject key identifier: 42:F6:88:DE:13:B0:BD:69:EB:B1:A3:BE:DB:E9:96:C6:FE:80:7E:2C
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 019A4DE20EB8CA2B68A0A6408C00AADA37F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number: 10A3
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: 8FzhGMtZv2x-9zLN2UYHeQV341o.roa (hash: qGnveFjiOnO4NOM7gilbdoFw5wFNnGKNy0BPR46F8X8=)
2: A454pJNoUsORGbO3OAfK7YV_Whc.roa (hash: ktLhYNOBSpXYd1+zR/ovh2Wfy7oD07XxrxHk2YHvGTs=)
3: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: yVR6x2M9D27xEe+WqQmWhJFYhlNkLlxqtE8ieZtdLIY=)
4: VKJdOQxl7p8p7x4aN4Wby4zX0pY.roa (hash: yezqvXwILM44YJ3tHBGsCwM+mCK4UNXyobV3FDKf4iQ=)
5: eDgDXUFrSK7xUZkPtBuSB2bzf-g.roa (hash: EmMIdVFxxDw1T5QOtxoH7PieLIsGiM73XYNo7gIlAMg=)
6: egnrXyyNbGvpg6aIGoEfRznijCU.roa (hash: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0e:b8:ca:2b:68:a0:a6:40:8c:00:aa:da:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=42f688de13b0bd69ebb1a3bedbe996c6fe807e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:83:21:67:bb:a9:40:af:cb:fa:6a:37:98:
53:9c:6a:99:bb:ed:12:38:c5:d5:80:21:0e:52:0a:
55:ae:3f:f8:b1:23:43:f6:69:b8:f7:56:67:f0:d9:
a2:6f:95:83:07:51:e1:dc:9d:7e:e1:d0:3b:9f:64:
7c:f4:a9:ba:73:1b:24:43:48:c1:f6:5a:41:40:02:
0f:fa:94:e7:88:cc:b7:a3:2b:04:1b:d1:97:f1:5a:
54:1e:4a:da:e3:da:2e:44:42:de:d1:0c:bf:78:76:
08:fc:a2:d3:17:79:cc:37:52:09:1b:23:bc:68:c8:
cc:fa:23:bf:fc:dd:ef:8b:96:b4:15:c4:31:1e:2b:
8c:bc:0b:c5:79:f5:f6:26:da:d1:1e:4f:8c:b7:ee:
b9:13:73:f6:44:55:b7:0c:cc:a4:b8:e0:db:7e:ef:
a6:33:32:3c:2c:d1:78:1f:dc:93:47:b0:9a:5e:7e:
e8:3d:78:cd:a0:af:6d:9e:19:15:d4:e5:19:55:57:
2b:66:4b:dc:f3:bd:8f:41:c8:e7:96:ed:27:fb:1b:
88:0b:16:90:2f:fd:94:77:3b:aa:7a:62:1d:96:24:
4c:29:28:7d:77:03:f1:c0:1c:1c:2a:60:36:9f:75:
42:15:79:c0:04:89:ff:4f:b7:f0:96:76:ad:62:27:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:88:DE:13:B0:BD:69:EB:B1:A3:BE:DB:E9:96:C6:FE:80:7E:2C
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4f:a4:bc:02:a4:73:e3:34:9a:98:61:29:a0:74:84:f6:1f:
d0:7a:1f:da:05:eb:a8:f1:52:9f:61:9d:5e:fe:61:99:95:6f:
ca:7c:64:5e:f4:0f:30:78:d5:40:9e:96:57:de:9a:a1:6a:80:
b7:f5:47:f9:a9:46:b8:b3:00:b9:ad:f5:07:b7:5f:53:22:c9:
2c:21:d9:54:ab:bd:67:d8:c7:d6:4d:f5:0e:b0:64:29:16:97:
57:75:44:a2:fd:fa:b8:75:fb:6c:9f:74:49:83:77:76:c7:11:
d0:ac:4b:dc:21:b9:7c:c0:ad:67:b6:c4:2a:96:03:c5:33:39:
6d:fe:7d:4c:c1:f5:c3:81:54:a4:9f:83:68:33:98:43:bc:55:
43:b6:9c:1c:71:b1:bd:21:e3:7c:aa:b0:5b:a1:fa:3e:63:d6:
09:47:9c:78:f8:82:30:16:21:41:9a:ca:a6:d3:f2:c0:09:82:
67:d4:b3:c7:c7:9e:f6:7a:35:f1:e4:02:8f:72:bf:2e:95:6f:
56:99:b2:a1:e2:ca:2b:90:ee:50:73:a5:88:10:8e:a6:17:0b:
91:6f:25:a1:41:1b:4b:73:7f:e9:c5:a5:c6:13:c9:5c:fd:b2:
97:58:3a:b7:72:da:88:0b:d1:ee:99:48:01:33:50:29:9a:6e:
92:51:15:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4g64yitooKZAjACq2jfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjYzOWIzNWU1ZDlkMGZiMzY5NmZlMmZkNjFjYjZmNGMz
ZmE1MDQwHhcNMjUxMTA0MDgwMDUxWhcNMjUxMTA1MDgwMDUxWjAzMTEwLwYDVQQD
Eyg0MmY2ODhkZTEzYjBiZDY5ZWJiMWEzYmVkYmU5OTZjNmZlODA3ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApByDIWe7qUCvy/pqN5hTnGqZu+0S
OMXVgCEOUgpVrj/4sSND9mm491Zn8Nmib5WDB1Hh3J1+4dA7n2R89Km6cxskQ0jB
9lpBQAIP+pTniMy3oysEG9GX8VpUHkra49ouRELe0Qy/eHYI/KLTF3nMN1IJGyO8
aMjM+iO//N3vi5a0FcQxHiuMvAvFefX2JtrRHk+Mt+65E3P2RFW3DMykuODbfu+m
MzI8LNF4H9yTR7CaXn7oPXjNoK9tnhkV1OUZVVcrZkvc872PQcjnlu0n+xuICxaQ
L/2UdzuqemIdliRMKSh9dwPxwBwcKmA2n3VCFXnABIn/T7fwlnatYieoRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL2iN4TsL1p67Gjvtvplsb+gH4sMB8GA1UdIwQY
MBaAFDImObNeXZ0Ps2lv4v1hy29MP6UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmIt
YjViM2FlYWU5OGVhLzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmItYjViM2FlYWU5OGVh
LzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU+kvAKk
c+M0mphhKaB0hPYf0Hof2gXrqPFSn2GdXv5hmZVvynxkXvQPMHjVQJ6WV96aoWqA
t/VH+alGuLMAua31B7dfUyLJLCHZVKu9Z9jH1k31DrBkKRaXV3VEov36uHX7bJ90
SYN3dscR0KxL3CG5fMCtZ7bEKpYDxTM5bf59TMH1w4FUpJ+DaDOYQ7xVQ7acHHGx
vSHjfKqwW6H6PmPWCUecePiCMBYhQZrKptPywAmCZ9Szx8ee9no18eQCj3K/LpVv
VpmyoeLKK5DuUHOliBCOphcLkW8loUEbS3N/6cWlxhPJXP2yl1g6t3LaiAvR7plI
ATNQKZpuklEVTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:16 2025 by rpki-client