Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: lfz5YTWS5cg/JYEnfIQqBj1z3Q52lqFzc33cfXpay+U=
Subject key identifier: 4E:41:72:FE:7C:B1:88:C0:D6:85:FF:3A:4B:2A:68:49:9F:17:70:28
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019A4DE21168AE9B9E299BFAAB77B71C0171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: X9jfKBjhGGtqhDfyVPa+ScSR9fNe0KQtw/cIBLoTCFI=)
2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:68:ae:9b:9e:29:9b:fa:ab:77:b7:1c:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=4e4172fe7cb188c0d685ff3a4b2a68499f177028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:ba:39:28:82:fa:cc:d4:71:7a:52:2c:0b:
8a:f5:65:b4:5b:00:37:f4:ca:64:14:9c:44:dd:5f:
18:9f:58:f8:84:8a:62:2b:12:e6:80:b2:ae:55:a4:
08:f8:7a:ef:b0:91:29:26:c9:ff:62:33:4a:fd:45:
27:a8:7f:48:97:18:86:33:f5:b5:c1:c0:ba:32:e5:
ba:b1:3b:55:5d:94:a6:b1:ad:20:83:62:53:b8:57:
ad:cc:fe:56:11:0f:eb:fc:3d:56:03:1d:e3:03:2c:
e3:96:cb:87:1a:a2:e9:0d:da:c9:b5:d5:ae:db:8d:
d2:ff:46:f4:24:4e:25:73:d0:a3:d3:61:1c:d6:1d:
b8:fa:df:9a:16:84:ec:47:77:e4:c1:65:93:96:ac:
88:8d:db:7d:b8:2d:dc:ef:fc:36:9d:2b:24:d4:b5:
65:5e:82:2b:d8:08:2e:34:57:1a:61:f6:a3:0e:1c:
f2:f9:d3:2a:c4:58:f6:02:49:a1:96:68:83:6b:e6:
68:02:45:5f:b2:1b:a2:18:8e:60:1a:ca:a9:10:0b:
84:fd:ff:97:91:8c:ec:a7:c5:3d:e6:d3:3a:8a:d6:
a2:9a:c9:ac:88:b3:43:bf:18:d2:c5:eb:53:a8:6c:
f1:74:54:56:f2:19:f8:a7:7d:57:9a:0c:f5:4b:ab:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:72:FE:7C:B1:88:C0:D6:85:FF:3A:4B:2A:68:49:9F:17:70:28
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:cb:44:8f:2f:bf:59:e7:c2:cc:90:84:8c:db:ca:6a:92:
eb:59:01:39:69:fc:a2:14:f6:46:fb:f4:ed:bf:8e:76:32:cc:
e6:fa:02:30:74:39:f2:38:5b:cf:88:47:eb:bf:29:70:d2:6d:
5d:83:d2:b0:15:4b:a9:72:30:cd:2a:1d:98:27:7f:19:5f:28:
2e:79:c7:80:2b:a8:b3:a5:39:3e:8b:24:39:fb:76:1b:3e:8d:
3d:9f:a3:15:16:87:20:21:ed:82:37:3f:9c:18:a8:05:80:39:
c8:34:ea:ca:08:06:b0:5f:04:e1:4d:85:eb:91:fe:bd:82:25:
71:1a:62:df:aa:d4:5e:49:b6:f7:7c:47:97:47:3a:6d:df:f4:
5b:f0:ec:ed:67:1b:c8:69:b0:27:9c:d0:28:59:f2:55:c5:1c:
34:01:1c:a9:af:b4:32:17:35:0f:dd:3e:cd:bb:19:1e:67:4c:
98:9b:d9:f2:6f:9b:0a:4b:22:7f:06:e6:58:27:1c:a0:c4:0c:
e2:50:9f:d1:b5:32:f8:d4:a2:7d:bd:02:e9:56:48:ae:5f:bc:
d1:d9:6d:d9:ea:89:10:cf:3a:76:a7:e4:25:ee:53:2e:05:61:
bc:bd:2d:7d:a1:d9:e5:f5:d5:5d:fc:5e:b5:80:e9:41:ab:1d:
df:2d:ea:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hForpueKZv6q3e3HAFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2NkYmM0YjRkZTU0OTVlZTYxMzE3ZDJlNzM3YzJjM2Y3
ZjgzYmEwHhcNMjUxMTA0MDgwMDUyWhcNMjUxMTA1MDgwMDUyWjAzMTEwLwYDVQQD
Eyg0ZTQxNzJmZTdjYjE4OGMwZDY4NWZmM2E0YjJhNjg0OTlmMTc3MDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr66OSiC+szUcXpSLAuK9WW0WwA3
9MpkFJxE3V8Yn1j4hIpiKxLmgLKuVaQI+HrvsJEpJsn/YjNK/UUnqH9IlxiGM/W1
wcC6MuW6sTtVXZSmsa0gg2JTuFetzP5WEQ/r/D1WAx3jAyzjlsuHGqLpDdrJtdWu
243S/0b0JE4lc9Cj02Ec1h24+t+aFoTsR3fkwWWTlqyIjdt9uC3c7/w2nSsk1LVl
XoIr2AguNFcaYfajDhzy+dMqxFj2AkmhlmiDa+ZoAkVfshuiGI5gGsqpEAuE/f+X
kYzsp8U95tM6itaimsmsiLNDvxjSxetTqGzxdFRW8hn4p31Xmgz1S6uSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Bcv58sYjA1oX/OksqaEmfF3AoMB8GA1UdIwQY
MBaAFDE828S03lSV7mExfS5zfCw/f4O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQt
ZmU1YWVkNTlhN2Q5LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQtZmU1YWVkNTlhN2Q5
LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALf3LRI8v
v1nnwsyQhIzbymqS61kBOWn8ohT2Rvv07b+OdjLM5voCMHQ58jhbz4hH678pcNJt
XYPSsBVLqXIwzSodmCd/GV8oLnnHgCuos6U5PoskOft2Gz6NPZ+jFRaHICHtgjc/
nBioBYA5yDTqyggGsF8E4U2F65H+vYIlcRpi36rUXkm293xHl0c6bd/0W/Ds7Wcb
yGmwJ5zQKFnyVcUcNAEcqa+0Mhc1D90+zbsZHmdMmJvZ8m+bCksifwbmWCccoMQM
4lCf0bUy+NSifb0C6VZIrl+80dlt2eqJEM86dqfkJe5TLgVhvL0tfaHZ5fXVXfxe
tYDpQasd3y3qFg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:11 2025 by rpki-client