Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: RMxRZTSvkNR7/nTLUEYcHFDyxKIlEvqbkuEKCxeCC/w=
Subject key identifier: D0:A1:0C:19:6C:FA:70:8B:14:E4:C1:9C:A9:E7:1E:3B:14:5A:5D:D0
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019A51F5AA3C1816954B0039963EE1D73B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 057E
Signing time: Wed 05 Nov 2025 03:00:45 +0000
Manifest this update: Wed 05 Nov 2025 03:00:45 +0000
Manifest next update: Thu 06 Nov 2025 03:00:45 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: mZKCwekebJZyzIrqHfMNPkB8wyjJCgdTpLewYlng9PI=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:aa:3c:18:16:95:4b:00:39:96:3e:e1:d7:3b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Nov 5 03:00:45 2025 GMT
Not After : Nov 6 03:00:45 2025 GMT
Subject: CN=d0a10c196cfa708b14e4c19ca9e71e3b145a5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:31:d6:b5:1c:ff:0f:eb:bc:d2:53:0c:af:
9a:f9:6e:23:34:93:33:01:0e:d0:c9:f5:b2:58:f0:
3c:4a:36:13:04:dd:d9:ef:69:d5:d8:9a:e1:d3:ab:
b6:75:01:79:91:95:00:33:e2:e9:2a:c1:bd:6c:7a:
fa:96:e7:84:87:e2:81:14:f6:55:5b:0b:7d:cc:28:
13:12:6e:43:ba:82:26:a7:c7:73:ff:5f:16:b0:84:
00:f3:9e:e8:10:05:ab:40:34:73:cf:f4:1b:8a:5c:
5a:77:7d:6e:c5:36:e1:d0:a7:b8:cc:71:14:f7:02:
18:91:c6:a6:06:45:42:ec:1a:44:43:46:e2:08:54:
71:15:5a:7b:20:d4:6e:2c:f9:8c:0a:af:48:f2:9e:
9e:32:37:74:69:b2:62:b9:6c:c4:2d:59:dd:1a:3c:
f0:40:d0:ed:02:26:b0:67:b2:b9:3a:e1:0c:3b:36:
c6:67:df:17:a8:38:b3:de:f7:c7:a9:9e:dd:be:74:
30:4d:19:5d:bf:c3:68:86:87:c8:84:a8:34:9a:0f:
a1:66:da:0b:f7:c6:45:1b:b7:92:4e:a9:0a:80:03:
42:75:3c:71:0a:79:bf:2c:30:ad:41:b0:d0:51:c5:
cb:cb:a9:bb:83:1c:e6:b5:16:16:0f:a5:f7:ee:10:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:0C:19:6C:FA:70:8B:14:E4:C1:9C:A9:E7:1E:3B:14:5A:5D:D0
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7d:a4:64:0d:7a:ca:d3:dd:06:05:12:f3:80:cb:ee:bc:0b:
05:00:5c:f8:15:76:1c:fb:b0:2e:88:11:04:79:f2:a2:c5:5f:
a5:ec:ba:fb:ed:e5:b9:f0:92:b8:63:e8:b3:c5:cf:06:9e:2b:
a7:46:4e:5f:c9:09:43:55:ef:84:5e:78:14:bf:f0:25:84:e5:
3a:c5:de:28:7b:d3:0e:99:da:d0:72:14:62:f9:26:aa:64:07:
7a:25:70:13:ce:42:de:7f:93:21:3f:e2:c8:2c:62:68:13:77:
7a:30:38:6f:ca:fd:9e:b1:fb:47:0c:76:a4:c5:64:43:4e:80:
ba:1c:f9:70:fa:e7:c2:da:21:0e:fc:75:d4:19:ff:bf:5d:19:
00:3c:52:13:e6:65:f4:e7:d4:98:5d:27:7a:47:10:d3:c4:52:
eb:93:d5:47:ec:29:7a:31:94:07:d6:c6:80:1b:d2:d5:ef:c5:
ec:6f:97:39:60:62:5d:76:39:ff:01:78:72:00:94:5f:a4:db:
5c:f2:4a:61:20:99:2a:96:ef:01:2d:45:0a:40:cc:3c:26:d2:
3c:53:bb:a7:cb:4e:4a:25:72:60:f0:47:9a:d8:d6:bf:d8:d4:
ac:d4:0b:64:f5:b2:ed:0d:47:9a:5e:d9:d4:b8:de:6e:1b:55:
b6:f4:fd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9ao8GBaVSwA5lj7h1zsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl
OWViMjMwHhcNMjUxMTA1MDMwMDQ1WhcNMjUxMTA2MDMwMDQ1WjAzMTEwLwYDVQQD
EyhkMGExMGMxOTZjZmE3MDhiMTRlNGMxOWNhOWU3MWUzYjE0NWE1ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ox1rUc/w/rvNJTDK+a+W4jNJMz
AQ7QyfWyWPA8SjYTBN3Z72nV2Jrh06u2dQF5kZUAM+LpKsG9bHr6lueEh+KBFPZV
Wwt9zCgTEm5DuoImp8dz/18WsIQA857oEAWrQDRzz/Qbilxad31uxTbh0Ke4zHEU
9wIYkcamBkVC7BpEQ0biCFRxFVp7INRuLPmMCq9I8p6eMjd0abJiuWzELVndGjzw
QNDtAiawZ7K5OuEMOzbGZ98XqDiz3vfHqZ7dvnQwTRldv8NohofIhKg0mg+hZtoL
98ZFG7eSTqkKgANCdTxxCnm/LDCtQbDQUcXLy6m7gxzmtRYWD6X37hC9aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNChDBls+nCLFOTBnKnnHjsUWl3QMB8GA1UdIwQY
MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt
Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm
LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX2kZA16
ytPdBgUS84DL7rwLBQBc+BV2HPuwLogRBHnyosVfpey6++3lufCSuGPos8XPBp4r
p0ZOX8kJQ1XvhF54FL/wJYTlOsXeKHvTDpna0HIUYvkmqmQHeiVwE85C3n+TIT/i
yCxiaBN3ejA4b8r9nrH7Rwx2pMVkQ06Auhz5cPrnwtohDvx11Bn/v10ZADxSE+Zl
9OfUmF0nekcQ08RS65PVR+wpejGUB9bGgBvS1e/F7G+XOWBiXXY5/wF4cgCUX6Tb
XPJKYSCZKpbvAS1FCkDMPCbSPFO7p8tOSiVyYPBHmtjWv9jUrNQLZPWy7Q1Hml7Z
1LjebhtVtvT9pA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:50 2025 by rpki-client