Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: Rr+9DHfiNYtYDFzXiJfMJni8gRYl/XqjssooqS0IJg8=
Subject key identifier: 4E:4F:5B:F5:CA:79:94:07:49:35:D1:26:72:E5:17:B9:4B:38:F6:6D
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 019A50E3BB1FADC21A296EFB6EE891A9B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0CE3
Signing time: Tue 04 Nov 2025 22:01:33 +0000
Manifest this update: Tue 04 Nov 2025 22:01:33 +0000
Manifest next update: Wed 05 Nov 2025 22:01:33 +0000
Files and hashes: 1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: XWUW8RrNzgi0AHO1xVdeuy/oYYOMWQImDyVMH4msmVc=)
2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:bb:1f:ad:c2:1a:29:6e:fb:6e:e8:91:a9:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Nov 4 22:01:33 2025 GMT
Not After : Nov 5 22:01:33 2025 GMT
Subject: CN=4e4f5bf5ca7994074935d12672e517b94b38f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:de:c1:f5:da:cd:1b:89:18:b9:71:6c:48:
f9:68:d0:67:cc:43:25:3e:7f:85:aa:4e:ab:df:53:
1a:fe:b4:8c:7d:7c:72:5a:ce:f0:21:01:47:38:23:
90:67:91:93:da:76:20:ac:4c:53:a9:e3:41:c8:f8:
32:7f:6c:34:78:6c:e8:2b:2c:a7:65:5c:61:b9:30:
2f:b6:d0:c7:3a:cd:ba:af:e4:c0:1c:6a:81:2d:a9:
be:7f:e7:54:3e:e2:a2:e4:48:6d:1d:a3:47:15:5e:
a6:7d:c9:02:82:7f:0d:36:eb:0e:4e:fb:bc:b7:7e:
24:76:80:82:2a:72:ca:3c:81:80:4c:d3:3e:96:44:
84:1f:58:75:73:86:82:af:5f:0f:be:dd:89:a2:da:
b3:fe:db:5c:e6:87:ce:af:89:53:b2:27:22:77:7e:
88:4f:bd:9c:dc:4f:d6:e4:85:5b:50:3b:f1:9c:61:
40:f0:fb:b0:11:84:01:f0:04:0e:50:d4:60:db:8a:
b3:42:20:5f:54:f6:e9:50:ad:3c:f9:e2:4e:83:50:
ed:ce:b2:32:dd:df:4b:3e:97:57:55:d3:47:f0:05:
8c:42:55:38:7e:6d:7d:98:88:24:21:75:0a:76:2d:
f5:e1:c5:70:49:b8:64:da:35:71:33:df:37:05:1f:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:5B:F5:CA:79:94:07:49:35:D1:26:72:E5:17:B9:4B:38:F6:6D
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6b:2b:d9:30:1d:c7:12:fd:0d:62:3a:f8:62:78:80:62:da:
e2:84:6a:93:85:32:f9:07:8e:28:89:1c:0f:8b:06:43:5e:6d:
8c:1f:da:8b:4f:dc:34:93:c8:6e:cb:a3:d3:64:ed:77:79:dc:
09:e9:28:40:b1:8b:5c:04:f5:a8:61:f1:2c:c8:92:d8:d0:e7:
73:79:c1:c7:7f:db:37:fd:12:16:55:05:aa:9f:35:1f:45:db:
c9:4b:b7:b5:ab:b8:cf:26:71:33:67:c1:dc:9f:11:e2:51:69:
3c:14:df:e2:2f:32:36:1b:26:9a:86:a3:9a:1b:45:f2:21:2f:
7c:5b:08:41:a0:12:6e:4d:6c:fd:7a:ac:ca:3d:1b:0f:87:4e:
ef:b4:90:29:4f:8e:94:24:b2:76:ad:86:1d:78:84:ef:b8:1e:
bc:0a:ab:fe:dc:60:c7:ae:ae:f0:f7:26:d9:4f:ac:8c:f4:03:
97:49:d6:6d:10:2a:37:c3:13:ac:eb:b3:bf:14:f6:6a:95:09:
38:6b:83:20:0b:91:09:0b:77:92:de:66:31:7d:79:69:01:7e:
4a:49:79:fd:3c:61:a1:c1:6e:3a:34:22:f2:b7:a2:81:2a:0c:
97:13:14:86:fe:a8:6f:d2:18:1f:f9:c9:6a:50:8e:12:c1:f0:
48:ca:30:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ47sfrcIaKW77buiRqbMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YjA0MjViNzFjMmI1MWNkN2ViZTQ3ZDNlZmU3Y2I5ODYx
YjRkODIwHhcNMjUxMTA0MjIwMTMzWhcNMjUxMTA1MjIwMTMzWjAzMTEwLwYDVQQD
Eyg0ZTRmNWJmNWNhNzk5NDA3NDkzNWQxMjY3MmU1MTdiOTRiMzhmNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zewfXazRuJGLlxbEj5aNBnzEMl
Pn+Fqk6r31Ma/rSMfXxyWs7wIQFHOCOQZ5GT2nYgrExTqeNByPgyf2w0eGzoKyyn
ZVxhuTAvttDHOs26r+TAHGqBLam+f+dUPuKi5EhtHaNHFV6mfckCgn8NNusOTvu8
t34kdoCCKnLKPIGATNM+lkSEH1h1c4aCr18Pvt2Jotqz/ttc5ofOr4lTsicid36I
T72c3E/W5IVbUDvxnGFA8PuwEYQB8AQOUNRg24qzQiBfVPbpUK08+eJOg1DtzrIy
3d9LPpdXVdNH8AWMQlU4fm19mIgkIXUKdi314cVwSbhk2jVxM983BR+sMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5PW/XKeZQHSTXRJnLlF7lLOPZtMB8GA1UdIwQY
MBaAFJmwQltxwrUc1+vkfT7+fLmGG02CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZTk4MmQtYWQ1Yi00MTAwLThkOWQt
ZDFlZmNlZWMzNGMxLzEvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85ZTk4MmQtYWQ1Yi00MTAwLThkOWQtZDFlZmNlZWMzNGMx
LzEvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWsr2TAd
xxL9DWI6+GJ4gGLa4oRqk4Uy+QeOKIkcD4sGQ15tjB/ai0/cNJPIbsuj02Ttd3nc
CekoQLGLXAT1qGHxLMiS2NDnc3nBx3/bN/0SFlUFqp81H0XbyUu3tau4zyZxM2fB
3J8R4lFpPBTf4i8yNhsmmoajmhtF8iEvfFsIQaASbk1s/Xqsyj0bD4dO77SQKU+O
lCSydq2GHXiE77gevAqr/txgx66u8Pcm2U+sjPQDl0nWbRAqN8MTrOuzvxT2apUJ
OGuDIAuRCQt3kt5mMX15aQF+Skl5/TxhocFuOjQi8reigSoMlxMUhv6ob9IYH/nJ
alCOEsHwSMow7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:09 2025 by rpki-client