Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier: +n/8QxWXK+jsFCpBmheO5RgYbqipPQqJoe5F0i6uhq0=
Subject key identifier: C9:E5:03:B3:A7:37:F6:20:B4:49:18:58:98:8C:3E:C6:F1:2D:BD:E5
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 019A52D14B7EAB8D0A24ABF0979F16B02540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number: 0B8B
Signing time: Wed 05 Nov 2025 07:00:39 +0000
Manifest this update: Wed 05 Nov 2025 07:00:39 +0000
Manifest next update: Thu 06 Nov 2025 07:00:39 +0000
Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: qDtx5YgP5L+baGu7jWnK3d74CM+WC9yvcm43dSkOrxw=)
3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4b:7e:ab:8d:0a:24:ab:f0:97:9f:16:b0:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Nov 5 07:00:39 2025 GMT
Not After : Nov 6 07:00:39 2025 GMT
Subject: CN=c9e503b3a737f620b4491858988c3ec6f12dbde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:21:14:3b:ab:ad:c3:9b:d8:8c:2b:6e:cc:
c7:e0:3b:2b:4c:b5:68:ea:6b:75:4c:c1:2d:0c:79:
89:fb:4f:f2:9e:6f:5c:4d:10:f8:df:72:e7:75:45:
50:62:fa:37:4d:da:e9:e4:04:a5:46:b3:21:4d:28:
59:e1:83:a4:92:f7:94:1a:81:c4:d8:cb:f2:c7:5c:
a4:89:53:44:5c:31:2f:6a:4f:96:98:ad:02:08:16:
64:77:ca:6a:11:63:2e:05:2b:a1:60:96:02:5f:b0:
4d:96:39:72:f1:41:7e:70:53:0a:10:51:58:e8:57:
40:0b:05:19:84:cb:36:8b:cb:04:9b:be:b4:bc:de:
93:bd:46:d9:21:9c:35:20:1a:ab:58:16:2d:db:c7:
52:06:69:9c:09:f5:84:a1:23:b5:57:85:1d:5e:92:
cd:68:b5:6e:76:11:1c:dc:7a:82:27:ef:65:82:a2:
3f:98:c2:ba:6b:91:2b:f6:7b:91:51:1c:53:bf:da:
67:11:51:bd:46:b6:e7:1e:0f:98:c7:ef:c5:47:76:
8c:0c:5f:fc:1d:fb:e8:47:b6:7c:b1:2f:4f:1c:1a:
7d:a4:95:a4:37:e7:a8:3f:4c:42:8c:a2:2b:b7:a0:
69:04:80:d8:16:63:f7:30:f9:bd:39:8f:5c:81:c0:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:03:B3:A7:37:F6:20:B4:49:18:58:98:8C:3E:C6:F1:2D:BD:E5
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:9d:28:74:25:0e:f0:c0:b9:d8:e3:88:49:47:f8:22:2d:
5b:5d:91:91:0d:77:c8:2c:56:a1:19:3a:09:e4:14:e5:76:1c:
a2:b1:df:e1:90:3e:5e:11:9f:cc:1f:e5:44:38:f9:ff:1f:08:
12:8f:1b:10:43:b1:6a:a7:63:38:67:ac:b1:0d:46:5a:24:82:
fe:9c:3e:10:e3:27:f2:70:d5:de:d3:6d:4a:6f:d7:ad:d5:43:
e1:30:c1:35:34:44:8a:54:f5:03:10:18:3e:ca:54:38:30:2b:
25:d1:a1:33:fb:70:90:44:62:c0:95:1d:50:61:4c:b7:94:fd:
e3:85:fc:85:b4:79:a0:c4:13:01:50:03:db:43:8b:5b:ec:0d:
25:52:ea:2f:19:99:2b:a8:d7:91:9a:e1:ce:cb:78:d6:98:ad:
25:7a:c5:ae:7e:26:3b:07:74:34:20:58:94:b6:29:89:6b:87:
7c:b8:fd:6c:dd:35:b6:29:1e:2d:b0:f2:a3:b5:7b:da:aa:b7:
c4:00:36:73:ae:93:a3:f9:a9:a0:8e:51:ee:d9:f3:9c:06:e1:
aa:eb:2d:4c:e0:6a:80:48:36:bf:f4:fe:2d:07:22:a2:10:a2:
be:c8:f1:61:ea:08:71:42:96:d8:d3:f0:b8:c2:49:74:e0:67:
dd:b2:41:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Ut+q40KJKvwl58WsCVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1
YjcyZTEwHhcNMjUxMTA1MDcwMDM5WhcNMjUxMTA2MDcwMDM5WjAzMTEwLwYDVQQD
EyhjOWU1MDNiM2E3MzdmNjIwYjQ0OTE4NTg5ODhjM2VjNmYxMmRiZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZchFDurrcOb2IwrbszH4DsrTLVo
6mt1TMEtDHmJ+0/ynm9cTRD433LndUVQYvo3Tdrp5ASlRrMhTShZ4YOkkveUGoHE
2Mvyx1ykiVNEXDEvak+WmK0CCBZkd8pqEWMuBSuhYJYCX7BNljly8UF+cFMKEFFY
6FdACwUZhMs2i8sEm760vN6TvUbZIZw1IBqrWBYt28dSBmmcCfWEoSO1V4UdXpLN
aLVudhEc3HqCJ+9lgqI/mMK6a5Er9nuRURxTv9pnEVG9RrbnHg+Yx+/FR3aMDF/8
HfvoR7Z8sS9PHBp9pJWkN+eoP0xCjKIrt6BpBIDYFmP3MPm9OY9cgcCJSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnlA7OnN/YgtEkYWJiMPsbxLb3lMB8GA1UdIwQY
MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt
NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl
LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1+dKHQl
DvDAudjjiElH+CItW12RkQ13yCxWoRk6CeQU5XYcorHf4ZA+XhGfzB/lRDj5/x8I
Eo8bEEOxaqdjOGessQ1GWiSC/pw+EOMn8nDV3tNtSm/XrdVD4TDBNTREilT1AxAY
PspUODArJdGhM/twkERiwJUdUGFMt5T944X8hbR5oMQTAVAD20OLW+wNJVLqLxmZ
K6jXkZrhzst41pitJXrFrn4mOwd0NCBYlLYpiWuHfLj9bN01tikeLbDyo7V72qq3
xAA2c66To/mpoI5R7tnznAbhqustTOBqgEg2v/T+LQciohCivsjxYeoIcUKW2NPw
uMJJdOBn3bJBTg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:19 2025 by rpki-client