Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File: MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier: Ax4hrCO/P6d6w9Nh0Wwna997Rm2uiqmNqcQf+SowtT4=
Subject key identifier: 7A:CE:B9:47:EF:29:C1:3D:44:13:AA:95:2F:3C:D1:F4:CA:0A:2C:75
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 019A4DE20E93647D2FFFD575FBF18919E07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number: 11F1
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (hash: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=)
2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: 2D2eUW5c/AjGLt15NhXUZzaaqttPly6zRKSvUT7OkNE=)
3: ZlJWr-hEOqUqxRC1ufvh4DxAuDM.roa (hash: jx78O4mw6UZw+ac2ij3Kg6QoCkl1hgwVf80ooqVUn5Q=)
4: mouRKK4_Q2E-W7kvAvNPxrpZLhE.roa (hash: ybMAN8gUri6B6wRdRo0fLl/8jSvuyoOJGt4dM0c6HXQ=)
5: oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa (hash: txEsmpmbkyHZufJHl2J4dFHRxGpSRd6FBOFojmw5rsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0e:93:64:7d:2f:ff:d5:75:fb:f1:89:19:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=7aceb947ef29c13d4413aa952f3cd1f4ca0a2c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:f9:a0:15:83:8d:96:74:e9:62:79:f3:8a:
60:2e:dd:5f:a9:43:64:15:d4:66:84:55:9e:47:0c:
55:77:6c:28:d9:03:d1:cb:c2:d5:0a:ea:ca:ce:5a:
a5:d2:4b:6c:15:44:e4:78:2e:87:18:fe:e1:be:1f:
9f:bb:bb:b0:f4:45:2e:e2:98:cb:ce:b3:67:10:75:
2e:23:28:33:6b:48:d5:59:5a:5a:94:ea:7b:95:a7:
59:a7:6e:a1:f3:0d:a8:1e:75:88:80:74:68:df:b2:
73:31:3b:65:4f:6b:80:60:23:3f:1b:72:af:3c:03:
6f:28:c0:59:b8:0e:a8:b8:25:0f:e9:c2:df:5d:b6:
fa:2f:a3:89:a0:70:b8:60:3b:ca:44:4b:44:18:a6:
29:79:ef:42:ce:72:1e:b1:c3:38:66:ed:b8:b9:d7:
84:33:3f:9c:5e:84:64:95:fb:f2:b6:01:7a:6b:2d:
6c:b3:41:f6:e5:8c:d0:39:71:9f:21:6b:a3:65:8d:
28:c2:29:f1:cc:bb:a3:d5:03:4f:1d:63:f2:48:07:
dc:01:7a:ab:9a:a0:b9:b2:3d:85:0c:63:c5:93:8a:
68:f0:2e:cc:64:57:ef:02:49:27:40:f7:12:19:87:
62:22:03:46:b1:aa:3a:e7:5d:f7:23:ac:bf:51:f0:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:B9:47:EF:29:C1:3D:44:13:AA:95:2F:3C:D1:F4:CA:0A:2C:75
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7f:a2:a4:21:32:64:06:be:f0:53:d6:09:84:70:6a:de:52:
5d:ab:f2:ec:e9:e2:a6:3c:0e:9e:09:ea:6e:15:f1:76:5e:32:
47:a0:54:d1:bf:d6:54:76:81:53:31:50:49:af:2f:49:51:68:
e4:47:c4:25:21:89:3c:e1:2c:9d:5c:24:58:fb:e6:c1:aa:7d:
b1:f9:7b:5c:8b:d0:1a:df:7d:f0:84:c9:73:22:d9:74:5c:bd:
82:90:3c:7c:47:3a:b0:13:c6:ba:4b:86:67:e5:15:27:fe:8e:
72:9b:25:70:43:6c:ce:10:29:50:b5:e2:53:45:bf:e6:c8:ea:
39:ac:60:72:85:95:8c:9d:63:22:39:36:ca:2f:46:d5:4f:97:
05:da:b6:67:03:09:20:e7:e5:42:5b:b8:58:d2:4b:91:31:41:
ed:30:a1:50:53:11:75:3c:39:13:84:aa:1b:11:aa:47:b7:ae:
39:fb:5d:d9:63:aa:0c:3f:f8:2b:a7:03:01:63:eb:46:07:92:
9a:b3:33:b6:d5:99:b1:d5:6a:01:a4:be:6c:b6:a6:6b:b4:fb:
30:6d:46:ad:88:2c:ee:f0:6f:11:ed:fb:99:e1:59:7f:3a:af:
1c:08:b7:be:3a:c4:44:ea:64:51:4b:f4:f6:46:96:03:3e:7b:
5a:c3:f1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4g6TZH0v/9V1+/GJGeB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi
ZjllZjYwHhcNMjUxMTA0MDgwMDUxWhcNMjUxMTA1MDgwMDUxWjAzMTEwLwYDVQQD
Eyg3YWNlYjk0N2VmMjljMTNkNDQxM2FhOTUyZjNjZDFmNGNhMGEyYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYf5oBWDjZZ06WJ584pgLt1fqUNk
FdRmhFWeRwxVd2wo2QPRy8LVCurKzlql0ktsFUTkeC6HGP7hvh+fu7uw9EUu4pjL
zrNnEHUuIygza0jVWVpalOp7ladZp26h8w2oHnWIgHRo37JzMTtlT2uAYCM/G3Kv
PANvKMBZuA6ouCUP6cLfXbb6L6OJoHC4YDvKREtEGKYpee9CznIescM4Zu24udeE
Mz+cXoRklfvytgF6ay1ss0H25YzQOXGfIWujZY0owinxzLuj1QNPHWPySAfcAXqr
mqC5sj2FDGPFk4po8C7MZFfvAkknQPcSGYdiIgNGsao65133I6y/UfDXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrOuUfvKcE9RBOqlS880fTKCix1MB8GA1UdIwQY
MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt
YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz
LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH+ipCEy
ZAa+8FPWCYRwat5SXavy7OnipjwOngnqbhXxdl4yR6BU0b/WVHaBUzFQSa8vSVFo
5EfEJSGJPOEsnVwkWPvmwap9sfl7XIvQGt998ITJcyLZdFy9gpA8fEc6sBPGukuG
Z+UVJ/6OcpslcENszhApULXiU0W/5sjqOaxgcoWVjJ1jIjk2yi9G1U+XBdq2ZwMJ
IOflQlu4WNJLkTFB7TChUFMRdTw5E4SqGxGqR7euOftd2WOqDD/4K6cDAWPrRgeS
mrMzttWZsdVqAaS+bLama7T7MG1GrYgs7vBvEe37meFZfzqvHAi3vjrEROpkUUv0
9kaWAz57WsPxfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:42 2025 by rpki-client