Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: ezt7sdIQx9TGaSy5p2DuM5THpSxPomtAtZLUSPx40fM=
Subject key identifier: BB:D3:36:C1:D2:DD:BD:99:45:E5:21:28:7E:99:5C:C6:52:79:63:0F
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 019A4F2B02A1AF55B2C638DC8AB06410CB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: I0lsXsTuED5rNuJFNXrqHZQfLeu8hicbIfcMlD2t8Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:02:a1:af:55:b2:c6:38:dc:8a:b0:64:10:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=bbd336c1d2ddbd9945e521287e995cc65279630f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:a3:da:29:56:11:f9:38:3a:2e:bf:e2:a8:
ff:71:60:3a:8d:56:50:66:a5:c3:62:d4:66:a3:0d:
c9:b8:77:1b:ce:76:4d:9d:05:97:81:b5:93:54:e6:
06:32:34:2d:f7:c4:fd:d7:0f:9b:a8:12:66:1c:17:
11:15:d3:04:fe:e3:5e:0b:72:aa:ad:24:20:7a:38:
35:bb:53:00:26:ae:b6:c3:dd:0a:9c:de:b1:b5:30:
10:6c:7c:ec:16:bf:db:54:1e:d8:ff:b0:24:9d:97:
f3:1e:3e:14:c1:75:63:56:79:a8:ae:1c:80:a8:ba:
4b:c5:e1:e5:09:13:30:a2:bf:d3:20:ee:63:a0:03:
e0:22:0c:65:6c:25:12:5f:cf:33:5b:84:da:6f:bd:
c0:e5:3f:7e:e5:56:db:ca:dc:bf:64:06:e6:49:a4:
05:02:ef:5b:6b:40:b4:bf:38:90:d2:12:f1:b6:b8:
48:63:70:55:59:d4:b7:be:b1:42:42:67:90:51:ad:
78:3b:ae:8d:d8:16:40:20:cc:d4:a7:73:a4:5d:9c:
d0:b4:40:34:e6:f3:15:f9:f5:06:60:cd:04:93:55:
50:52:3c:31:76:86:bf:c1:98:32:4e:cb:5f:8b:b0:
03:32:3d:c4:b3:86:8b:48:42:5d:db:66:56:2d:3a:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:36:C1:D2:DD:BD:99:45:E5:21:28:7E:99:5C:C6:52:79:63:0F
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:01:62:86:ac:2a:7d:63:72:20:79:16:16:47:13:42:f7:78:
35:62:89:b2:17:ea:6e:ae:ae:66:0d:0a:43:d3:f0:2d:03:a8:
81:19:32:a0:b7:cc:71:97:0b:c4:8c:e8:b6:03:7d:6a:a4:38:
51:2e:d4:df:16:70:b8:ca:47:e4:4b:57:eb:d3:e7:ea:7d:04:
6f:54:f8:da:7c:5b:42:3c:03:32:84:23:74:39:37:27:2c:91:
bc:c6:55:c8:1d:b9:80:fd:7a:dd:68:f7:20:9f:13:c9:8f:14:
70:94:28:fc:3b:4a:fc:00:b4:4e:e2:d5:31:cb:74:c7:41:48:
57:08:28:8d:96:e2:e3:ac:01:f2:65:da:3d:c2:5b:6f:d9:ae:
85:3e:74:76:22:f8:e0:56:08:3d:fb:3e:31:ca:e1:3e:e1:2b:
29:9f:a8:e2:26:91:3a:30:36:1e:49:b7:15:51:42:f5:2d:70:
85:eb:f5:14:33:1b:af:9b:d5:b2:00:e0:40:72:51:71:ca:e4:
5a:01:6f:94:d8:78:8c:41:f0:b6:b9:e2:6e:f8:0c:03:c1:d4:
6e:74:fa:27:b6:af:e8:a3:81:cb:7a:30:73:20:98:ad:6c:97:
13:14:78:2a:f1:53:6f:cb:de:b2:d5:d0:ae:0f:20:32:bb:8a:
f6:6f:a8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKwKhr1WyxjjcirBkEMszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh
ZTM0OTcwHhcNMjUxMTA0MTQwMDEwWhcNMjUxMTA1MTQwMDEwWjAzMTEwLwYDVQQD
EyhiYmQzMzZjMWQyZGRiZDk5NDVlNTIxMjg3ZTk5NWNjNjUyNzk2MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gej2ilWEfk4Oi6/4qj/cWA6jVZQ
ZqXDYtRmow3JuHcbznZNnQWXgbWTVOYGMjQt98T91w+bqBJmHBcRFdME/uNeC3Kq
rSQgejg1u1MAJq62w90KnN6xtTAQbHzsFr/bVB7Y/7AknZfzHj4UwXVjVnmorhyA
qLpLxeHlCRMwor/TIO5joAPgIgxlbCUSX88zW4Tab73A5T9+5Vbbyty/ZAbmSaQF
Au9ba0C0vziQ0hLxtrhIY3BVWdS3vrFCQmeQUa14O66N2BZAIMzUp3OkXZzQtEA0
5vMV+fUGYM0Ek1VQUjwxdoa/wZgyTstfi7ADMj3Es4aLSEJd22ZWLTpJQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvTNsHS3b2ZReUhKH6ZXMZSeWMPMB8GA1UdIwQY
MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt
MDAwZWFkMzk3NjVhLzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh
LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwFihqwq
fWNyIHkWFkcTQvd4NWKJshfqbq6uZg0KQ9PwLQOogRkyoLfMcZcLxIzotgN9aqQ4
US7U3xZwuMpH5EtX69Pn6n0Eb1T42nxbQjwDMoQjdDk3JyyRvMZVyB25gP163Wj3
IJ8TyY8UcJQo/DtK/AC0TuLVMct0x0FIVwgojZbi46wB8mXaPcJbb9muhT50diL4
4FYIPfs+McrhPuErKZ+o4iaROjA2Hkm3FVFC9S1whev1FDMbr5vVsgDgQHJRccrk
WgFvlNh4jEHwtrnibvgMA8HUbnT6J7av6KOBy3owcyCYrWyXExR4KvFTb8vestXQ
rg8gMruK9m+oNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:01 2025 by rpki-client