Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: ZmDKGIY1M0+PR+PD/b54GPWS+pbuhZsAnCLQ2Hq36LI=
Subject key identifier: 1E:3E:67:11:18:B6:E7:18:00:72:A0:65:9B:97:7C:AF:10:8D:E9:B8
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 019A4EF42C05AEF31D788391983993A1687F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: wCSMqmcv2LfEDE5SjxclPilBtGS8p2kOnGpY0q5QKAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2c:05:ae:f3:1d:78:83:91:98:39:93:a1:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=1e3e671118b6e7180072a0659b977caf108de9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:36:06:d0:55:30:b9:be:84:ac:91:84:93:
9a:35:a9:fe:e8:84:b6:68:b3:b7:2c:ac:34:e1:94:
44:c8:dc:93:50:83:6f:74:9e:54:12:bd:9e:22:08:
87:ad:c3:a2:c9:ce:44:af:e7:b7:5e:21:85:47:36:
fd:e2:7b:a4:4c:d6:c6:64:98:b4:7c:29:7e:a8:7b:
f9:96:62:3f:2e:e6:0c:2b:d5:ea:29:ef:2e:98:8c:
2a:70:07:4a:98:92:66:ac:f8:6e:58:c4:db:69:36:
d1:02:74:e1:9b:27:01:19:e5:58:c8:20:8e:8c:a3:
bf:5f:38:d3:f5:17:1b:c9:be:ce:b2:1b:4c:b3:91:
45:9f:f6:58:45:03:dd:b9:ab:9c:6e:d6:a1:4b:4c:
ed:2f:5b:90:db:0d:87:cb:5d:be:45:21:20:ec:aa:
20:55:21:6e:0d:78:33:8a:c3:d0:88:37:0c:96:fd:
b1:af:84:21:15:ae:9a:33:1c:55:64:ae:3a:a3:c5:
6b:cf:7e:57:5d:be:be:b0:1e:76:16:29:09:18:49:
1e:b0:a1:3c:eb:5d:d9:48:03:c3:28:b7:b8:1c:7f:
4a:f2:9a:34:11:7a:90:46:1a:bc:3c:fa:3f:11:90:
17:3e:c0:8e:3d:40:46:bb:95:2e:36:9e:70:6a:48:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:67:11:18:B6:E7:18:00:72:A0:65:9B:97:7C:AF:10:8D:E9:B8
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:5d:34:a0:f4:db:4f:1c:32:c2:9e:a3:28:65:30:08:37:
8d:25:ac:28:f0:6b:b3:7d:73:44:d7:3b:be:7d:76:52:b3:7f:
2e:30:20:cc:ec:ba:55:c7:8c:4e:ed:60:22:da:a7:65:b2:4d:
b7:ba:6f:ac:f2:4b:0f:7d:a2:17:5b:4c:6c:fb:6d:79:e4:12:
9b:75:a6:52:56:03:62:16:b5:55:ae:ae:9e:ac:54:54:a6:09:
ec:e7:78:40:ee:71:ae:33:65:8c:0a:9e:17:dd:e8:22:a8:4c:
cf:c7:e0:1b:14:1f:dd:b3:56:74:ef:a0:16:ec:8f:7d:98:45:
3d:fe:d5:bd:39:45:1a:69:21:71:29:9f:d8:9d:06:43:51:69:
4e:b9:22:d6:19:18:f4:df:17:b0:7c:33:c0:c6:8f:13:1d:b5:
3f:fa:77:23:7f:2a:87:bf:8a:c8:8d:ed:14:76:cd:35:a1:32:
8a:24:16:50:e6:18:62:40:47:b6:c7:e5:cc:3a:3e:08:82:d6:
25:df:92:84:79:d0:22:dc:f4:04:27:1f:a6:10:cb:a9:d4:32:
c9:2c:e3:fa:4b:97:5d:ab:ba:08:a6:2f:92:ca:8d:28:cb:fd:
52:1b:24:ad:83:f4:a4:51:8f:76:74:e8:ac:98:cc:97:39:a2:
e9:22:8c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CwFrvMdeIORmDmToWh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDg0MmRiMDgzN2RhZjMxMWEzMzRiNzIyMzE4ZTcwYjU4
OGIwMDkwHhcNMjUxMTA0MTMwMDE2WhcNMjUxMTA1MTMwMDE2WjAzMTEwLwYDVQQD
EygxZTNlNjcxMTE4YjZlNzE4MDA3MmEwNjU5Yjk3N2NhZjEwOGRlOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW02BtBVMLm+hKyRhJOaNan+6IS2
aLO3LKw04ZREyNyTUINvdJ5UEr2eIgiHrcOiyc5Er+e3XiGFRzb94nukTNbGZJi0
fCl+qHv5lmI/LuYMK9XqKe8umIwqcAdKmJJmrPhuWMTbaTbRAnThmycBGeVYyCCO
jKO/XzjT9Rcbyb7OshtMs5FFn/ZYRQPduaucbtahS0ztL1uQ2w2Hy12+RSEg7Kog
VSFuDXgzisPQiDcMlv2xr4QhFa6aMxxVZK46o8Vrz35XXb6+sB52FikJGEkesKE8
613ZSAPDKLe4HH9K8po0EXqQRhq8PPo/EZAXPsCOPUBGu5UuNp5wakiwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4+ZxEYtucYAHKgZZuXfK8Qjem4MB8GA1UdIwQY
MBaAFDAIQtsIN9rzEaM0tyIxjnC1iLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMt
NTMxMmExMzNiOTRlLzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMtNTMxMmExMzNiOTRl
LzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinFdNKD0
208cMsKeoyhlMAg3jSWsKPBrs31zRNc7vn12UrN/LjAgzOy6VceMTu1gItqnZbJN
t7pvrPJLD32iF1tMbPtteeQSm3WmUlYDYha1Va6unqxUVKYJ7Od4QO5xrjNljAqe
F93oIqhMz8fgGxQf3bNWdO+gFuyPfZhFPf7VvTlFGmkhcSmf2J0GQ1FpTrki1hkY
9N8XsHwzwMaPEx21P/p3I38qh7+KyI3tFHbNNaEyiiQWUOYYYkBHtsflzDo+CILW
Jd+ShHnQItz0BCcfphDLqdQyySzj+kuXXau6CKYvksqNKMv9UhskrYP0pFGPdnTo
rJjMlzmi6SKMpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:18 2025 by rpki-client