Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: AlRiPvmz52cumxUA+KSqauL8Sf+jJ/Ov5D3YnEzgu/o=
Subject key identifier: 2D:30:40:84:8C:F5:47:86:CC:43:39:57:9A:AA:7C:A4:08:25:8C:9A
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019A4EF482F6B8EE37514B01140AC80472B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: S2bTYkvoHRzxuD0eETUKjLSoCb0KZH0doWk4c2csv00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:82:f6:b8:ee:37:51:4b:01:14:0a:c8:04:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=2d3040848cf54786cc4339579aaa7ca408258c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:3d:40:b1:17:bb:f1:26:80:ad:b8:d8:74:
ec:0f:93:46:3b:c6:1c:0a:7d:db:dd:8a:09:a6:a9:
39:0a:74:10:9a:2b:62:d7:44:0c:ae:f9:27:7c:bc:
2b:bf:65:b3:a0:3a:90:16:95:d8:b8:17:fe:b3:fe:
b6:09:43:4c:83:a7:8f:bf:09:b9:dc:84:4d:b8:cc:
38:fa:ae:92:3b:23:74:16:15:a6:5f:45:6b:f7:e4:
19:d4:b1:2c:6b:d4:e7:e5:9b:3a:b1:2e:98:5a:0d:
ab:73:11:79:6b:78:83:07:a0:48:c2:d2:92:98:af:
20:01:ab:62:19:c5:f8:ad:7e:af:e0:55:c4:b5:1f:
d6:75:2d:07:0c:08:6e:a8:9a:c6:ff:8d:b8:aa:94:
ad:95:85:0f:df:5e:4b:05:dd:62:74:88:b8:8d:6e:
d0:74:5e:a3:ce:9c:d8:71:25:09:1a:39:7b:9a:cd:
22:75:ff:b1:bc:cd:08:ad:d1:c6:e3:aa:68:18:1b:
8f:6b:e4:55:6a:bb:59:6b:ed:0a:47:82:7a:3c:b8:
e7:c2:07:df:f7:2b:1c:ee:b6:99:31:e8:91:81:31:
cc:60:1b:05:81:a2:6b:e4:57:97:15:13:1a:2d:b7:
29:01:a6:e4:d4:9b:6b:5d:60:1b:6f:0a:a6:1a:75:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:40:84:8C:F5:47:86:CC:43:39:57:9A:AA:7C:A4:08:25:8C:9A
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:d3:33:42:2e:97:3a:3a:53:29:35:e0:8a:80:42:4b:08:
69:a9:b3:2f:97:79:9f:98:3f:86:38:62:84:cd:c3:41:c0:cb:
97:d4:47:bd:64:8b:11:f9:94:14:27:12:a8:64:3a:e8:c1:50:
19:ce:59:7c:87:bd:ff:57:3a:a7:86:0a:3d:e9:09:b1:78:6b:
b1:5c:77:8e:7f:ab:12:59:e1:22:70:cf:df:60:4b:1e:1b:3f:
fb:6c:26:0e:ca:0f:9f:53:ab:40:c7:ef:16:47:13:88:14:58:
75:7b:bf:9f:c5:03:f3:7b:db:f0:fb:5b:93:5c:fb:45:bd:1f:
58:8b:98:7f:d9:69:05:b4:31:ac:b9:cd:12:60:12:42:86:22:
bf:7b:82:e0:c3:bb:0d:2a:06:cd:34:62:3a:79:4e:35:ce:35:
d5:8a:d6:4f:2b:0b:9a:75:d2:2e:9a:62:0f:97:a7:2e:aa:94:
28:ee:78:55:49:98:02:f3:72:d9:8b:45:9f:30:f2:8c:55:9d:
b3:3e:0a:93:54:ae:b1:64:f3:2d:37:0d:9a:6d:d3:fa:0e:fe:
8e:58:a9:c9:76:84:ce:ea:4a:37:72:97:48:84:f6:ac:4d:60:
a2:4a:23:50:ae:f0:98:d6:eb:8c:da:11:b9:62:5a:3a:f1:05:
e6:93:79:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IL2uO43UUsBFArIBHK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy
OTFlZTgwHhcNMjUxMTA0MTMwMDM4WhcNMjUxMTA1MTMwMDM4WjAzMTEwLwYDVQQD
EygyZDMwNDA4NDhjZjU0Nzg2Y2M0MzM5NTc5YWFhN2NhNDA4MjU4YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYk9QLEXu/EmgK242HTsD5NGO8Yc
Cn3b3YoJpqk5CnQQmiti10QMrvknfLwrv2WzoDqQFpXYuBf+s/62CUNMg6ePvwm5
3IRNuMw4+q6SOyN0FhWmX0Vr9+QZ1LEsa9Tn5Zs6sS6YWg2rcxF5a3iDB6BIwtKS
mK8gAatiGcX4rX6v4FXEtR/WdS0HDAhuqJrG/424qpStlYUP315LBd1idIi4jW7Q
dF6jzpzYcSUJGjl7ms0idf+xvM0IrdHG46poGBuPa+RVartZa+0KR4J6PLjnwgff
9ysc7raZMeiRgTHMYBsFgaJr5FeXFRMaLbcpAabk1JtrXWAbbwqmGnWn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0wQISM9UeGzEM5V5qqfKQIJYyaMB8GA1UdIwQY
MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct
ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx
LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJvTM0Iu
lzo6Uyk14IqAQksIaamzL5d5n5g/hjhihM3DQcDLl9RHvWSLEfmUFCcSqGQ66MFQ
Gc5ZfIe9/1c6p4YKPekJsXhrsVx3jn+rElnhInDP32BLHhs/+2wmDsoPn1OrQMfv
FkcTiBRYdXu/n8UD83vb8Ptbk1z7Rb0fWIuYf9lpBbQxrLnNEmASQoYiv3uC4MO7
DSoGzTRiOnlONc411YrWTysLmnXSLppiD5enLqqUKO54VUmYAvNy2YtFnzDyjFWd
sz4Kk1SusWTzLTcNmm3T+g7+jlipyXaEzupKN3KXSIT2rE1gokojUK7wmNbrjNoR
uWJaOvEF5pN5+w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:34 2025 by rpki-client