Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier: zwyOwSc7gGFlV3jkOoOL4EEyWTgGuCWEB31Nf6NoNAE=
Subject key identifier: A0:5F:6B:38:1F:1E:2F:D9:DD:D9:84:C1:94:8E:A1:11:9B:61:0A:ED
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 019A4F62541E6D6B368F067AFA6A8F1E8390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=)
2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: iAeKQMjUKWBS3Tu/Z8DPwGGXUANcwIaXWTFQhKaD1M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:54:1e:6d:6b:36:8f:06:7a:fa:6a:8f:1e:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=a05f6b381f1e2fd9ddd984c1948ea1119b610aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:a7:96:78:5c:1b:8f:d0:59:fe:b8:5a:56:
09:dd:31:d6:ef:df:f6:80:59:15:c0:3e:34:13:23:
1f:27:6c:16:8e:aa:b4:da:93:e0:47:91:f2:8e:c6:
df:e7:ef:e3:9a:91:23:19:17:a4:ab:f3:09:46:9a:
cc:1b:ad:6a:57:de:0f:68:9c:77:36:d1:51:bc:11:
04:bd:94:a8:6f:8e:88:f0:6c:42:19:ac:9f:1e:86:
a9:5c:ee:b1:9b:90:b0:4c:92:81:fc:29:34:13:b6:
5d:9e:82:64:68:aa:ba:1f:8f:f0:09:72:c2:ab:d9:
7f:ae:73:c1:72:6f:c8:4c:13:c2:d6:ca:c0:ef:96:
37:21:ee:01:b8:cc:af:38:aa:d5:ba:c1:3a:fc:82:
20:a3:2e:9e:24:36:0c:8f:13:ff:cb:a8:4f:a8:2f:
64:75:56:12:88:96:e3:d6:c9:33:d8:ce:3f:67:4d:
70:4e:c0:de:f0:f9:49:f2:21:12:f3:05:ff:9f:c0:
a5:ef:1e:93:4d:45:93:3d:cd:dd:4a:eb:c6:23:1b:
d8:4b:97:6d:4e:d2:3f:ec:3a:a4:bf:92:aa:82:4c:
29:e7:aa:2c:d2:98:3d:38:17:66:6b:a0:32:c2:27:
b7:15:49:eb:7d:5d:da:6c:f7:01:ee:60:e6:5d:1d:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:6B:38:1F:1E:2F:D9:DD:D9:84:C1:94:8E:A1:11:9B:61:0A:ED
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:c6:1c:3a:13:ff:c8:88:de:be:81:d8:15:42:53:20:2e:
c1:e1:04:07:f5:1a:a1:37:8d:54:48:ac:be:32:51:90:ac:13:
df:4e:8b:f9:cd:34:e3:2d:69:55:09:ec:8b:ee:ca:e3:6a:ae:
7c:f5:2f:d4:f0:53:21:df:5d:4a:00:6d:23:20:c6:b2:25:f6:
67:5a:48:0f:0d:09:f0:d2:dc:2c:b2:aa:fc:cc:7b:cb:2a:c7:
54:64:35:27:c3:5f:be:9a:53:db:a7:f2:63:07:98:7b:1d:ac:
36:a2:e1:8a:f4:73:51:b2:0b:fa:cf:05:0b:93:6f:50:3a:11:
b1:52:bb:9f:5d:eb:42:c6:af:62:72:2d:3b:28:0a:08:ec:7a:
fc:f1:f1:17:e2:1b:1c:09:49:22:ea:0d:61:c8:b8:77:22:79:
6f:68:c4:4a:99:a3:d1:64:43:52:3f:19:7d:77:1c:b6:1e:7a:
3e:a4:f1:a9:6b:7e:f1:23:e3:9f:4d:dd:60:f5:e2:a6:b6:9c:
58:59:5c:a7:c3:29:15:f4:c1:9f:a4:68:a3:90:b9:82:d4:c3:
47:aa:fa:0b:2a:c5:ba:47:43:d0:6e:cb:07:52:a2:ff:8c:72:
c3:23:14:f0:c5:b3:d4:8a:23:df:70:d7:7e:21:95:7f:fd:8d:
7a:48:74:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYlQebWs2jwZ6+mqPHoOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0
MWQ1YmYwHhcNMjUxMTA0MTUwMDM1WhcNMjUxMTA1MTUwMDM1WjAzMTEwLwYDVQQD
EyhhMDVmNmIzODFmMWUyZmQ5ZGRkOTg0YzE5NDhlYTExMTliNjEwYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mnlnhcG4/QWf64WlYJ3THW79/2
gFkVwD40EyMfJ2wWjqq02pPgR5Hyjsbf5+/jmpEjGRekq/MJRprMG61qV94PaJx3
NtFRvBEEvZSob46I8GxCGayfHoapXO6xm5CwTJKB/Ck0E7ZdnoJkaKq6H4/wCXLC
q9l/rnPBcm/ITBPC1srA75Y3Ie4BuMyvOKrVusE6/IIgoy6eJDYMjxP/y6hPqC9k
dVYSiJbj1skz2M4/Z01wTsDe8PlJ8iES8wX/n8Cl7x6TTUWTPc3dSuvGIxvYS5dt
TtI/7Dqkv5Kqgkwp56os0pg9OBdma6Aywie3FUnrfV3abPcB7mDmXR0pYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBfazgfHi/Z3dmEwZSOoRGbYQrtMB8GA1UdIwQY
MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt
Njc2ZTgwZGMxZGU2LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2
LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc7GHDoT
/8iI3r6B2BVCUyAuweEEB/UaoTeNVEisvjJRkKwT306L+c004y1pVQnsi+7K42qu
fPUv1PBTId9dSgBtIyDGsiX2Z1pIDw0J8NLcLLKq/Mx7yyrHVGQ1J8NfvppT26fy
YweYex2sNqLhivRzUbIL+s8FC5NvUDoRsVK7n13rQsavYnItOygKCOx6/PHxF+Ib
HAlJIuoNYci4dyJ5b2jESpmj0WRDUj8ZfXccth56PqTxqWt+8SPjn03dYPXiprac
WFlcp8MpFfTBn6Roo5C5gtTDR6r6CyrFukdD0G7LB1Ki/4xywyMU8MWz1Ioj33DX
fiGVf/2Nekh06Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:59 2025 by rpki-client