Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: bWp5T5mo/2qhyS8BAYIOkqW3cV6yjr/+xFUH8imYjdU=
Subject key identifier: AE:09:67:00:F6:C3:1F:9F:E4:A6:E9:32:10:27:79:12:EA:97:C6:28
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019A4F62690599D2C81FDE478E49F197E13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: 5TEPi0bh8aroOSx9+qHK+Y29CUz2oJ1UhzNm00HkFKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:69:05:99:d2:c8:1f:de:47:8e:49:f1:97:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=ae096700f6c31f9fe4a6e93210277912ea97c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:c7:b4:fd:03:12:92:c1:a4:2e:53:b1:07:
03:14:b1:72:c1:57:43:50:91:0b:68:79:a7:b9:b9:
4e:da:6a:db:9d:95:f4:f3:03:ad:53:4d:3b:6b:50:
f9:db:a0:f4:f0:31:66:6e:26:bb:b8:da:0a:e8:b3:
2a:00:e6:f3:e3:a8:43:b1:1f:46:5a:aa:4b:3a:ee:
7d:f6:be:00:58:e7:5e:0e:76:22:12:0e:cb:46:56:
89:6a:9b:6f:0f:60:63:70:ee:39:99:3d:b8:59:fa:
ea:02:0b:a2:d3:8d:59:65:04:e7:7b:38:34:f3:16:
64:57:0a:e6:33:03:f6:8a:74:ac:80:f4:e6:45:50:
1b:21:0e:0c:23:79:c3:78:7a:f7:fc:37:8a:ef:85:
ee:9d:d6:23:1c:13:07:1b:8f:6c:d9:14:f3:69:a6:
f8:95:55:d9:0a:33:52:ab:7c:f0:54:c6:d2:23:ee:
54:e5:49:fa:b2:0e:96:7a:b2:44:7b:51:58:96:26:
12:fe:a5:14:ad:e3:40:dd:c4:ff:1e:ee:51:33:d3:
28:ec:9f:29:65:1d:be:72:17:52:fe:bd:68:ce:82:
69:d6:db:73:ea:f1:60:06:1c:f7:95:ad:9d:38:5b:
cb:59:8a:43:f3:eb:6d:01:21:f7:09:4e:9d:32:63:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:67:00:F6:C3:1F:9F:E4:A6:E9:32:10:27:79:12:EA:97:C6:28
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a1:31:a2:05:e9:41:59:2e:9b:c7:3e:5d:05:33:6e:97:c6:
53:1b:6e:c4:52:b5:28:d3:4d:36:11:c4:7d:39:3e:ed:f5:32:
39:22:ee:80:eb:fc:c2:be:af:f1:12:8e:80:d2:50:41:02:46:
5a:f0:16:b7:41:3f:d8:65:36:12:be:95:d7:62:6b:dd:04:14:
a1:88:a1:cd:b6:79:6c:c7:bc:66:60:6d:29:a8:03:1e:e6:d7:
a0:fa:18:1b:e0:1e:ad:9f:34:13:87:50:04:47:e9:2e:cb:8a:
4c:53:3c:d9:93:50:03:7b:d2:1b:53:14:cf:10:e9:86:b8:3b:
2d:88:72:70:32:f2:f1:88:db:f0:c3:86:9b:20:83:82:4e:a9:
e5:c4:1b:30:b6:55:a0:9b:44:7d:67:b2:7c:86:be:53:02:8e:
21:5b:19:ab:23:2f:dc:17:cc:d7:b1:17:5c:c7:44:4e:a8:f5:
e0:b7:aa:ac:c6:f1:d5:39:47:5a:26:ff:56:f5:2c:b2:b0:9f:
cc:81:2f:d9:5d:9b:cc:52:ac:e7:45:03:96:0c:7b:c7:43:f4:
05:ef:e4:84:c7:92:5c:00:f7:60:ac:60:8d:54:a2:fe:e5:c3:
18:83:21:f5:bd:47:8b:93:05:9a:c4:07:0e:7c:7c:2f:6e:3b:
01:43:4b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYmkFmdLIH95Hjknxl+E6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjUxMTA0MTUwMDQwWhcNMjUxMTA1MTUwMDQwWjAzMTEwLwYDVQQD
EyhhZTA5NjcwMGY2YzMxZjlmZTRhNmU5MzIxMDI3NzkxMmVhOTdjNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcDHtP0DEpLBpC5TsQcDFLFywVdD
UJELaHmnublO2mrbnZX08wOtU007a1D526D08DFmbia7uNoK6LMqAObz46hDsR9G
WqpLOu599r4AWOdeDnYiEg7LRlaJaptvD2BjcO45mT24WfrqAgui041ZZQTnezg0
8xZkVwrmMwP2inSsgPTmRVAbIQ4MI3nDeHr3/DeK74XundYjHBMHG49s2RTzaab4
lVXZCjNSq3zwVMbSI+5U5Un6sg6WerJEe1FYliYS/qUUreNA3cT/Hu5RM9Mo7J8p
ZR2+chdS/r1ozoJp1ttz6vFgBhz3la2dOFvLWYpD8+ttASH3CU6dMmOvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4JZwD2wx+f5KbpMhAneRLql8YoMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6ExogXp
QVkum8c+XQUzbpfGUxtuxFK1KNNNNhHEfTk+7fUyOSLugOv8wr6v8RKOgNJQQQJG
WvAWt0E/2GU2Er6V12Jr3QQUoYihzbZ5bMe8ZmBtKagDHubXoPoYG+AerZ80E4dQ
BEfpLsuKTFM82ZNQA3vSG1MUzxDphrg7LYhycDLy8Yjb8MOGmyCDgk6p5cQbMLZV
oJtEfWeyfIa+UwKOIVsZqyMv3BfM17EXXMdETqj14LeqrMbx1TlHWib/VvUssrCf
zIEv2V2bzFKs50UDlgx7x0P0Be/khMeSXAD3YKxgjVSi/uXDGIMh9b1Hi5MFmsQH
Dnx8L247AUNL2w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:37 2025 by rpki-client