Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: CshGdQEw5Vri8jvcNX08PS42ESHe1c5jhbuQ3ud2kN4=
Subject key identifier: 09:05:92:AB:30:90:85:79:0E:2C:B8:EE:54:62:0D:D6:89:AC:F3:E3
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 019A4D738468F485712CF7879233AD5E421A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 0701
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: OfQmYoiVUbV1rzn11Yz7aXfQirhLYiiGvDmoHLNKMxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:84:68:f4:85:71:2c:f7:87:92:33:ad:5e:42:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=090592ab309085790e2cb8ee54620dd689acf3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:77:14:b7:8b:1d:65:ac:b6:92:24:c6:dc:
74:75:ed:67:d5:a0:f4:1d:b4:12:52:af:6e:8e:78:
e2:51:b1:e5:da:79:c2:e6:d7:c3:48:42:05:3c:5c:
03:e8:cb:40:12:64:f2:80:3f:eb:83:ed:41:c1:ba:
e4:84:e5:e9:a8:15:8a:9d:ed:0c:d3:79:89:b0:a2:
55:1b:52:0c:35:51:f0:8f:f4:aa:99:72:08:60:44:
74:5d:42:8b:36:72:51:15:81:48:95:e5:29:e6:4f:
6a:1c:75:3b:59:16:6c:33:6f:73:02:e5:90:22:bb:
6f:79:9d:55:32:8a:a5:57:c2:9b:93:1c:bb:4c:98:
af:cc:12:c5:3c:90:13:83:02:14:d8:c7:6f:4e:4e:
c1:34:28:54:5d:4f:48:45:81:3a:0c:84:e0:d7:79:
e7:42:e9:c1:96:03:76:2e:02:4c:b2:4c:46:93:1a:
17:87:1d:00:b5:d0:e2:68:0b:42:dc:9b:ce:fb:67:
2c:c2:0d:15:aa:eb:70:f6:56:e1:e1:4c:72:02:58:
ac:d6:8d:6f:bc:98:39:7c:de:f7:8f:35:1d:48:0e:
2d:d1:72:c3:0e:be:09:48:32:fa:b9:d3:45:e4:06:
0d:53:f5:81:2a:98:fe:d0:eb:21:7c:cc:21:61:5a:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:92:AB:30:90:85:79:0E:2C:B8:EE:54:62:0D:D6:89:AC:F3:E3
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bf:e0:17:a7:f5:bc:bd:60:39:27:5b:c6:14:1f:4d:e1:4c:
92:6d:6f:4b:61:da:3c:17:e1:d4:0a:a0:cd:bd:7b:57:e6:f9:
07:0f:99:60:1c:2a:50:1d:0b:32:c4:13:9a:04:cf:f1:94:3f:
34:f3:8e:93:bb:89:7a:1a:b3:1c:f6:ff:c9:b4:8a:59:0f:eb:
b6:ef:e0:a6:14:ca:dc:15:b4:eb:fa:a0:49:03:78:9e:d8:33:
a0:02:08:3f:23:65:e9:36:c8:eb:a7:05:cf:b8:bd:e3:5a:7f:
d9:0c:53:0b:b2:2c:5b:ea:5d:b2:8c:f5:c2:0e:ff:dc:80:6f:
63:54:59:2f:05:c0:9f:0f:64:e4:27:f2:6d:84:4a:9f:ce:ad:
fb:f5:e0:82:56:42:b4:2b:79:cf:0a:c6:b7:95:ce:4a:63:27:
f3:6e:2c:8a:e7:f2:09:24:ab:17:6e:5c:0b:2a:0d:0a:be:f4:
77:a4:61:ff:a5:90:0a:bb:87:0c:dc:81:f9:45:44:27:99:83:
0f:8b:23:9f:54:5e:3f:a0:0f:5d:d5:af:da:59:d6:ff:14:65:
d6:fe:9c:7e:42:87:30:3e:ee:0e:4a:4a:20:59:98:60:99:34:
ee:a3:8b:95:64:81:3c:ff:5c:56:67:ff:e4:ee:be:90:26:f6:
6a:2a:5d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc4Ro9IVxLPeHkjOtXkIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1
MDZiZWYwHhcNMjUxMTA0MDYwMDA3WhcNMjUxMTA1MDYwMDA3WjAzMTEwLwYDVQQD
EygwOTA1OTJhYjMwOTA4NTc5MGUyY2I4ZWU1NDYyMGRkNjg5YWNmM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwN3FLeLHWWstpIkxtx0de1n1aD0
HbQSUq9ujnjiUbHl2nnC5tfDSEIFPFwD6MtAEmTygD/rg+1BwbrkhOXpqBWKne0M
03mJsKJVG1IMNVHwj/SqmXIIYER0XUKLNnJRFYFIleUp5k9qHHU7WRZsM29zAuWQ
IrtveZ1VMoqlV8Kbkxy7TJivzBLFPJATgwIU2MdvTk7BNChUXU9IRYE6DITg13nn
QunBlgN2LgJMskxGkxoXhx0AtdDiaAtC3JvO+2cswg0Vqutw9lbh4UxyAlis1o1v
vJg5fN73jzUdSA4t0XLDDr4JSDL6udNF5AYNU/WBKpj+0OshfMwhYVofOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkFkqswkIV5Diy47lRiDdaJrPPjMB8GA1UdIwQY
MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt
NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh
LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr/gF6f1
vL1gOSdbxhQfTeFMkm1vS2HaPBfh1Aqgzb17V+b5Bw+ZYBwqUB0LMsQTmgTP8ZQ/
NPOOk7uJehqzHPb/ybSKWQ/rtu/gphTK3BW06/qgSQN4ntgzoAIIPyNl6TbI66cF
z7i941p/2QxTC7IsW+pdsoz1wg7/3IBvY1RZLwXAnw9k5CfybYRKn86t+/XgglZC
tCt5zwrGt5XOSmMn824siufyCSSrF25cCyoNCr70d6Rh/6WQCruHDNyB+UVEJ5mD
D4sjn1ReP6APXdWv2lnW/xRl1v6cfkKHMD7uDkpKIFmYYJk07qOLlWSBPP9cVmf/
5O6+kCb2aipd1A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client