Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier: RrMWatTk3lBs/c609yKL71sX3VMUzr3fVgTowsG6QmQ=
Subject key identifier: B6:52:CF:04:29:9D:36:6F:7F:62:36:0B:CB:05:CE:38:E1:E5:E9:AE
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 019A4FD07D03964FCFA3827F89A5D0B6DF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number: 0DB1
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: 1rSKQ1/xm4WS7n+d9y52H9xpBrRjh9pjonb7fN37RS8=)
3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7d:03:96:4f:cf:a3:82:7f:89:a5:d0:b6:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=b652cf04299d366f7f62360bcb05ce38e1e5e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:0b:a0:cb:25:b2:e1:d1:cb:54:87:5c:47:
e8:2d:54:37:1b:20:93:6d:8b:8f:39:b0:55:80:ce:
1b:37:19:a6:db:c9:6e:48:7b:98:1f:fb:86:6f:69:
9c:f3:8e:5c:e5:52:1f:40:43:bd:48:f2:4e:d3:58:
f6:1b:87:92:0f:44:37:f8:b6:c8:5c:0d:a1:44:af:
09:ee:15:c9:04:eb:e1:0a:bc:d3:f3:63:0f:c7:52:
47:c1:6a:95:2b:f4:43:1c:ad:7d:3f:8a:ea:6b:25:
86:ec:96:ad:30:4f:c4:1e:75:70:d2:09:e7:bb:43:
e7:31:01:e7:24:3c:38:a7:3e:e0:4f:a1:bc:49:ec:
7f:8f:c6:38:ce:cd:4f:52:c1:2a:4d:8e:de:5f:77:
0d:10:84:d4:04:42:30:5b:72:e2:a4:37:74:a0:01:
9a:38:b8:e2:4b:06:d7:43:e9:ea:93:4a:a3:ea:73:
43:41:7b:a2:59:97:8c:19:16:f7:ff:d7:6f:01:1a:
81:ff:f4:b4:0a:b9:31:2f:aa:ad:14:3d:3e:f0:c0:
53:fc:f8:8c:c7:4d:61:97:ea:8e:bf:39:92:ea:0b:
f3:16:a7:9c:64:7e:27:fa:03:6c:ac:45:07:1f:09:
14:cf:92:9c:c0:d7:9a:7a:6f:65:bb:1d:32:ce:2c:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:CF:04:29:9D:36:6F:7F:62:36:0B:CB:05:CE:38:E1:E5:E9:AE
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e0:9e:c4:16:1b:08:0a:a9:96:90:48:21:d0:56:17:bb:a0:
ed:a4:56:a6:9a:11:5a:3d:22:e1:98:81:80:ad:d2:51:20:7e:
42:bb:d4:47:3b:d1:8b:a2:70:52:ff:7a:cc:97:82:1d:0f:48:
42:0c:ad:7b:cb:64:6b:31:8e:12:45:3e:05:90:af:58:be:34:
3c:b1:5a:15:82:6e:96:c5:ec:da:c5:46:7a:ab:52:ed:f4:db:
2a:d8:03:6f:e2:f5:fb:67:e4:dc:ee:d2:13:d8:27:be:73:1c:
2e:f1:cd:14:75:b5:80:ad:05:78:2e:59:94:0d:cc:2d:cf:84:
c7:57:9a:6e:75:c9:4e:c0:58:59:88:a4:f5:40:ff:4a:ea:ab:
6b:fd:25:c0:be:2a:7c:58:78:9a:77:72:5d:11:40:5e:6e:6f:
6f:67:bc:f9:61:d4:31:18:95:e8:8c:24:f6:97:63:9c:79:c6:
ce:89:25:76:bb:fd:b2:0b:cd:86:2a:21:c5:a2:b0:36:37:55:
2d:5a:b1:6a:ae:e5:42:3e:c1:64:a2:4c:77:73:5e:87:63:6d:
af:01:76:94:bf:40:68:16:8d:4b:9d:2b:35:31:bd:64:f2:1b:
3e:d8:d5:31:e0:bd:30:25:ad:33:d3:5a:97:b3:2f:73:b9:aa:
6d:72:67:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0H0Dlk/Po4J/iaXQtt9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODI4Yzk5ZDM1Y2I5MmUyZDUzZGFmMTI4ZTQ5N2U4NDFi
NjNhYjAwHhcNMjUxMTA0MTcwMDU0WhcNMjUxMTA1MTcwMDU0WjAzMTEwLwYDVQQD
EyhiNjUyY2YwNDI5OWQzNjZmN2Y2MjM2MGJjYjA1Y2UzOGUxZTVlOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL8LoMslsuHRy1SHXEfoLVQ3GyCT
bYuPObBVgM4bNxmm28luSHuYH/uGb2mc845c5VIfQEO9SPJO01j2G4eSD0Q3+LbI
XA2hRK8J7hXJBOvhCrzT82MPx1JHwWqVK/RDHK19P4rqayWG7JatME/EHnVw0gnn
u0PnMQHnJDw4pz7gT6G8Sex/j8Y4zs1PUsEqTY7eX3cNEITUBEIwW3LipDd0oAGa
OLjiSwbXQ+nqk0qj6nNDQXuiWZeMGRb3/9dvARqB//S0CrkxL6qtFD0+8MBT/PiM
x01hl+qOvzmS6gvzFqecZH4n+gNsrEUHHwkUz5KcwNeaem9lux0yziwNQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZSzwQpnTZvf2I2C8sFzjjh5emuMB8GA1UdIwQY
MBaAFDGCjJnTXLkuLVPa8Sjkl+hBtjqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYt
ZWIzN2E4NWE4MmM1LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYtZWIzN2E4NWE4MmM1
LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+CexBYb
CAqplpBIIdBWF7ug7aRWppoRWj0i4ZiBgK3SUSB+QrvURzvRi6JwUv96zJeCHQ9I
Qgyte8tkazGOEkU+BZCvWL40PLFaFYJulsXs2sVGeqtS7fTbKtgDb+L1+2fk3O7S
E9gnvnMcLvHNFHW1gK0FeC5ZlA3MLc+Ex1eabnXJTsBYWYik9UD/Suqra/0lwL4q
fFh4mndyXRFAXm5vb2e8+WHUMRiV6Iwk9pdjnHnGzokldrv9sgvNhiohxaKwNjdV
LVqxaq7lQj7BZKJMd3Neh2NtrwF2lL9AaBaNS50rNTG9ZPIbPtjVMeC9MCWtM9Na
l7Mvc7mqbXJn/g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:02 2025 by rpki-client