Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: 5KlBGN79LMgqCUtv+Kls3GqaQ++YxSVShHp59o2JsqI=
Subject key identifier: D4:47:88:18:3A:07:14:BE:27:DE:C9:2D:83:7C:9B:60:A1:2B:31:6F
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019A4EF412F6AA2AEF15CCB2CBE02F9B9688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: GMQ1ETi2VrRijwvvWtNOo4AqcJRBvlMha5sIC570jIE=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:12:f6:aa:2a:ef:15:cc:b2:cb:e0:2f:9b:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=d44788183a0714be27dec92d837c9b60a12b316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:d5:0c:55:b8:23:fc:a2:99:36:34:97:58:
2c:8a:f8:09:d1:bc:dc:5c:ac:8b:70:ee:07:0a:fe:
57:fc:28:88:af:89:42:39:75:19:c6:25:2b:32:f9:
5c:ef:fc:62:44:a9:d9:03:3f:06:a8:aa:d1:37:90:
bb:ce:ce:c3:5b:1e:4a:a4:96:eb:db:42:3d:4f:1f:
14:3b:94:0c:43:d4:db:75:35:3b:81:ea:3d:ac:fa:
b2:85:d2:3d:75:bd:90:07:41:03:db:87:a9:7f:d7:
14:d3:33:56:47:57:bd:40:7f:90:60:a1:4d:0f:92:
1a:49:46:ad:bb:ba:b1:ef:ec:31:3a:85:2c:ae:0c:
b4:7f:54:d2:74:d2:12:88:3f:c7:03:4d:c4:07:8a:
63:b6:fe:01:5a:9b:47:0e:44:af:03:ba:a7:a8:62:
85:54:b7:7d:91:0c:26:4e:57:51:9c:b1:0e:60:44:
8c:eb:a2:4e:36:9c:5d:35:62:50:d8:5d:2c:d2:75:
38:88:8c:4c:56:87:89:6e:16:b4:69:10:d6:c1:c0:
41:e8:32:88:a7:bc:7c:1c:da:f2:6d:21:c6:df:66:
0e:12:4d:8d:a1:52:73:02:1b:f9:bf:b3:af:71:4d:
de:a4:6f:95:69:6f:bf:8a:01:94:84:75:ef:5f:df:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:88:18:3A:07:14:BE:27:DE:C9:2D:83:7C:9B:60:A1:2B:31:6F
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:4d:d7:f6:08:6b:17:a2:0c:fe:96:cb:42:59:47:16:bf:
24:04:d5:ca:fa:85:23:31:2f:d6:1e:eb:a1:0a:de:3e:9e:9d:
24:a5:54:4f:ac:0f:2f:7a:bd:f7:63:86:e7:d4:d1:9d:e6:59:
4d:0a:fa:c4:cd:54:a6:f6:ef:b3:cd:07:d0:33:c8:f5:a0:15:
5b:75:fb:29:3f:6a:b7:22:24:0d:6d:6f:c0:4e:f4:56:9d:22:
52:84:89:fe:1f:71:bb:c1:fa:4a:b6:2d:7a:07:41:c2:ab:e1:
88:f5:07:77:b6:f6:61:d4:1e:97:28:a7:5c:a1:3e:e2:c4:8a:
25:e5:a7:ad:bd:13:fa:4a:c6:74:47:7d:f6:88:a2:ac:3c:4a:
35:ab:46:98:dd:e3:64:5b:94:f8:ba:d7:92:51:1c:8b:7f:ab:
a9:7b:73:14:90:0d:09:6c:6a:08:db:ae:8c:2e:95:cc:24:b2:
aa:70:b5:94:92:1a:4d:12:24:a4:8b:64:1e:91:47:30:ad:a4:
b0:e8:47:24:ce:ca:44:9c:17:e6:af:24:8e:dd:88:42:37:f5:
5f:b2:fe:b6:51:36:cd:38:7e:6e:71:d9:7e:6e:a0:7a:93:82:
73:b3:ab:99:68:bc:4e:79:38:95:6f:66:b7:e1:1e:ab:69:37:
f9:d0:f3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BL2qirvFcyyy+Avm5aIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj
YzY0YTkwHhcNMjUxMTA0MTMwMDA5WhcNMjUxMTA1MTMwMDA5WjAzMTEwLwYDVQQD
EyhkNDQ3ODgxODNhMDcxNGJlMjdkZWM5MmQ4MzdjOWI2MGExMmIzMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1bVDFW4I/yimTY0l1gsivgJ0bzc
XKyLcO4HCv5X/CiIr4lCOXUZxiUrMvlc7/xiRKnZAz8GqKrRN5C7zs7DWx5KpJbr
20I9Tx8UO5QMQ9TbdTU7geo9rPqyhdI9db2QB0ED24epf9cU0zNWR1e9QH+QYKFN
D5IaSUatu7qx7+wxOoUsrgy0f1TSdNISiD/HA03EB4pjtv4BWptHDkSvA7qnqGKF
VLd9kQwmTldRnLEOYESM66JONpxdNWJQ2F0s0nU4iIxMVoeJbha0aRDWwcBB6DKI
p7x8HNrybSHG32YOEk2NoVJzAhv5v7OvcU3epG+VaW+/igGUhHXvX98aIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRHiBg6BxS+J97JLYN8m2ChKzFvMB8GA1UdIwQY
MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt
Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi
LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFpN1/YI
axeiDP6Wy0JZRxa/JATVyvqFIzEv1h7roQrePp6dJKVUT6wPL3q992OG59TRneZZ
TQr6xM1Upvbvs80H0DPI9aAVW3X7KT9qtyIkDW1vwE70Vp0iUoSJ/h9xu8H6SrYt
egdBwqvhiPUHd7b2YdQelyinXKE+4sSKJeWnrb0T+krGdEd99oiirDxKNatGmN3j
ZFuU+LrXklEci3+rqXtzFJANCWxqCNuujC6VzCSyqnC1lJIaTRIkpItkHpFHMK2k
sOhHJM7KRJwX5q8kjt2IQjf1X7L+tlE2zTh+bnHZfm6gepOCc7OrmWi8Tnk4lW9m
t+Eeq2k3+dDz+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:30 2025 by rpki-client