Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: TNsDxmie/HMWgsWrZ7Qg7BU7s5Wo5tTBrafaY55bwKc=
Subject key identifier: 8E:5B:5B:20:CC:0C:3C:C4:22:15:CE:10:5D:70:34:1E:61:4E:31:DD
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019A52D1A0FC232B25C94AED4BE52E4AA5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0E70
Signing time: Wed 05 Nov 2025 07:01:01 +0000
Manifest this update: Wed 05 Nov 2025 07:01:01 +0000
Manifest next update: Thu 06 Nov 2025 07:01:01 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: zr4DvtAMycpT6ULeiGf3OzPNfVxlfN1/iYK3hdVH1NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a0:fc:23:2b:25:c9:4a:ed:4b:e5:2e:4a:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Nov 5 07:01:01 2025 GMT
Not After : Nov 6 07:01:01 2025 GMT
Subject: CN=8e5b5b20cc0c3cc42215ce105d70341e614e31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:d9:a9:d1:f5:06:f1:ba:89:16:93:b1:b6:
7c:3a:89:ef:ab:2c:7b:b2:97:fc:9b:be:89:ad:4e:
c2:e1:21:9b:0f:f5:cb:eb:69:13:04:43:a2:f6:46:
ed:fd:98:93:3e:8b:db:dc:a3:58:da:b8:98:de:b2:
49:33:5e:ee:86:45:f8:93:41:e4:5f:10:c2:5f:46:
5d:cb:9c:7f:85:4c:bc:27:2e:48:cf:4e:cd:26:06:
86:99:9d:c6:67:82:90:00:58:32:62:29:ac:e4:69:
1b:d4:d5:dd:bc:0d:4d:3d:a6:f6:7e:3f:67:bf:58:
55:a1:51:37:ef:14:5a:dd:00:8e:30:29:14:9f:8c:
f5:c5:7b:a9:df:db:82:6c:e1:f5:ce:cf:da:6b:11:
4c:70:b7:fb:9c:a3:36:d2:84:a7:68:4c:93:a8:9e:
dd:63:13:51:0c:3c:49:75:4b:23:a4:1a:c2:30:c2:
b3:cc:81:86:4b:f9:30:32:73:8d:2c:9d:f2:96:eb:
8d:83:93:53:58:c6:a5:b7:d5:e9:00:e3:63:2b:c5:
1a:ae:2f:c4:18:2d:65:c4:94:77:45:5e:a8:0f:85:
be:d0:44:37:46:f9:fb:5d:6e:94:37:6d:22:90:b6:
5b:6d:e8:2a:58:a0:9e:5c:ef:f0:ea:96:b1:94:e3:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:5B:20:CC:0C:3C:C4:22:15:CE:10:5D:70:34:1E:61:4E:31:DD
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:d3:2e:78:cc:35:e8:d8:94:f2:ac:c9:19:4d:eb:35:13:
40:07:f7:87:9d:56:65:9f:95:be:17:6d:86:31:31:5e:79:70:
ee:cc:eb:61:be:53:5d:d8:34:e2:38:c9:1c:0f:87:f2:24:63:
21:50:1e:37:47:55:6f:09:b6:bf:55:07:51:e9:90:80:d3:9c:
44:85:a2:c9:58:b9:5f:e6:8e:8a:5a:43:85:8f:cc:4a:92:8b:
ca:c4:53:19:db:33:1b:c2:59:fa:9d:75:f6:98:66:94:a8:af:
8a:40:48:e5:4e:59:76:b5:44:f8:94:ec:e3:4b:39:ec:1c:72:
45:ed:6b:7c:1b:88:d4:28:ab:5c:ea:42:a4:6d:00:ba:fb:1b:
18:5f:95:2a:21:ee:f1:f3:a1:91:36:29:c0:6c:7d:bf:57:cb:
6a:57:01:d2:3e:d6:d5:7b:db:00:84:86:54:f1:fa:b3:ee:85:
ff:c8:b3:f8:43:90:fa:d5:dc:44:ac:5d:e2:8a:cd:a4:35:d9:
d3:8f:28:b2:d9:84:25:9c:a9:1d:e3:84:34:a4:f2:44:c7:66:
3c:76:5b:92:f7:49:0c:7c:fb:55:b0:fa:d2:0a:ba:1b:3b:75:
4a:60:74:e4:89:3d:7a:bf:1c:fe:c7:2d:e9:77:e9:17:a0:01:
28:18:83:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0aD8IyslyUrtS+UuSqXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll
ZTI0NDQwHhcNMjUxMTA1MDcwMTAxWhcNMjUxMTA2MDcwMTAxWjAzMTEwLwYDVQQD
Eyg4ZTViNWIyMGNjMGMzY2M0MjIxNWNlMTA1ZDcwMzQxZTYxNGUzMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgDZqdH1BvG6iRaTsbZ8Oonvqyx7
spf8m76JrU7C4SGbD/XL62kTBEOi9kbt/ZiTPovb3KNY2riY3rJJM17uhkX4k0Hk
XxDCX0Zdy5x/hUy8Jy5Iz07NJgaGmZ3GZ4KQAFgyYims5Gkb1NXdvA1NPab2fj9n
v1hVoVE37xRa3QCOMCkUn4z1xXup39uCbOH1zs/aaxFMcLf7nKM20oSnaEyTqJ7d
YxNRDDxJdUsjpBrCMMKzzIGGS/kwMnONLJ3yluuNg5NTWMalt9XpAONjK8Uari/E
GC1lxJR3RV6oD4W+0EQ3Rvn7XW6UN20ikLZbbegqWKCeXO/w6paxlON2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5bWyDMDDzEIhXOEF1wNB5hTjHdMB8GA1UdIwQY
MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt
ZDA4YTljZGVjOTg2LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2
LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeXTLnjM
NejYlPKsyRlN6zUTQAf3h51WZZ+VvhdthjExXnlw7szrYb5TXdg04jjJHA+H8iRj
IVAeN0dVbwm2v1UHUemQgNOcRIWiyVi5X+aOilpDhY/MSpKLysRTGdszG8JZ+p11
9phmlKivikBI5U5ZdrVE+JTs40s57BxyRe1rfBuI1CirXOpCpG0AuvsbGF+VKiHu
8fOhkTYpwGx9v1fLalcB0j7W1XvbAISGVPH6s+6F/8iz+EOQ+tXcRKxd4orNpDXZ
048ostmEJZypHeOENKTyRMdmPHZbkvdJDHz7VbD60gq6Gzt1SmB05Ik9er8c/sct
6XfpF6ABKBiDrw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:17 2025 by rpki-client