Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: Wii4dgcyg57okZgCk/ognWvb+4ggpSBSXTbx3woTG4k=
Subject key identifier: AE:0E:80:93:0A:88:88:E9:13:A8:42:7D:C2:44:64:43:7E:C5:4F:0C
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 019A4EF581E83A3711EAC953DE60AA377249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 0A8D
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: XTIGTErkXaibLhU7lojbkbQducbxXt6eLWXOuoJ+U/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:81:e8:3a:37:11:ea:c9:53:de:60:aa:37:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=ae0e80930a8888e913a8427dc24464437ec54f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9b:5a:ed:29:5a:98:52:f7:e5:cf:b3:6e:6f:
2f:b5:73:cf:15:cf:2d:c4:a3:6c:4e:94:db:28:b8:
cf:13:3f:a8:89:d2:41:1f:a0:5e:56:17:26:f6:25:
80:f6:0b:76:81:ed:22:0e:01:e4:cf:91:fe:5a:86:
07:9e:18:9d:23:46:d2:ab:0d:05:f6:9e:26:95:25:
98:47:b8:52:92:b2:f0:82:00:90:f8:96:25:d4:9b:
71:2d:6b:ed:92:45:43:5c:74:ea:5c:96:33:58:ac:
56:38:4c:75:87:8f:9d:f2:31:5b:cf:41:8c:02:36:
87:b6:4c:5e:ff:b1:11:aa:cd:da:d3:26:9f:c3:30:
ce:f3:7b:78:26:10:d4:46:86:c8:96:c1:b7:b1:04:
46:21:8b:22:a4:92:40:b2:d3:15:0b:81:1a:80:9f:
b4:2b:6d:15:8b:56:76:98:4f:f8:a1:95:a6:e1:10:
d0:5c:ec:47:8e:bd:2b:36:8d:e8:7a:7c:c1:5f:53:
e2:25:28:50:ba:70:76:00:8f:4b:55:53:0c:7b:e6:
85:46:38:b5:77:9b:9a:69:98:2c:5c:fa:f0:09:5e:
5e:8a:c9:cf:4e:5f:50:ab:dd:e7:7c:4c:48:80:9d:
e0:05:db:3f:2e:b6:2d:c6:f2:65:a1:7a:6a:4c:72:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:80:93:0A:88:88:E9:13:A8:42:7D:C2:44:64:43:7E:C5:4F:0C
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d5:d7:a6:4e:be:a9:bb:b1:b5:67:9a:eb:19:7e:7b:96:20:
12:84:f5:ac:81:40:78:1c:55:26:92:f5:04:f5:60:62:57:a1:
8a:1c:cf:e4:5d:d5:ae:1d:61:3f:27:45:32:82:a0:46:e2:12:
23:79:d4:bd:a4:5d:43:54:dd:25:8d:e0:ed:ef:3f:53:2b:bf:
10:22:0d:0a:e7:7f:be:b3:d1:56:3b:6d:75:dd:c5:b6:52:b1:
fd:6c:31:c8:a9:62:37:70:95:12:dd:c6:f3:72:1f:2c:c5:cd:
7a:d4:2f:42:75:e1:95:89:45:0a:ca:5c:2f:97:ea:d6:45:57:
72:46:cf:1b:84:04:de:83:be:65:be:3b:54:1f:82:2c:7c:4b:
35:fa:f4:cb:f0:6b:09:ae:ef:aa:a5:00:c2:7b:39:27:27:f3:
ca:c2:6f:b3:ed:c5:1b:d9:bb:21:bf:8e:bf:e3:4f:76:66:ac:
fe:bc:9a:a0:08:46:94:58:53:23:72:5a:13:60:1d:f4:03:ec:
38:f9:6d:c3:c7:3e:37:9b:ba:88:11:ba:6b:64:1e:17:2a:d0:
a1:57:3f:d0:e6:fc:65:d5:b7:6e:cb:ef:4d:ca:f1:c5:35:df:
c9:e3:8e:75:60:d2:95:46:cd:ab:95:9f:db:49:1f:f3:a6:12:
b9:78:99:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9YHoOjcR6slT3mCqN3JJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk
YWNmN2MwHhcNMjUxMTA0MTMwMTQzWhcNMjUxMTA1MTMwMTQzWjAzMTEwLwYDVQQD
EyhhZTBlODA5MzBhODg4OGU5MTNhODQyN2RjMjQ0NjQ0MzdlYzU0ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jta7SlamFL35c+zbm8vtXPPFc8t
xKNsTpTbKLjPEz+oidJBH6BeVhcm9iWA9gt2ge0iDgHkz5H+WoYHnhidI0bSqw0F
9p4mlSWYR7hSkrLwggCQ+JYl1JtxLWvtkkVDXHTqXJYzWKxWOEx1h4+d8jFbz0GM
AjaHtkxe/7ERqs3a0yafwzDO83t4JhDURobIlsG3sQRGIYsipJJAstMVC4EagJ+0
K20Vi1Z2mE/4oZWm4RDQXOxHjr0rNo3oenzBX1PiJShQunB2AI9LVVMMe+aFRji1
d5uaaZgsXPrwCV5eisnPTl9Qq93nfExIgJ3gBds/LrYtxvJloXpqTHIjtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4OgJMKiIjpE6hCfcJEZEN+xU8MMB8GA1UdIwQY
MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt
OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5
LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItXXpk6+
qbuxtWea6xl+e5YgEoT1rIFAeBxVJpL1BPVgYlehihzP5F3Vrh1hPydFMoKgRuIS
I3nUvaRdQ1TdJY3g7e8/Uyu/ECINCud/vrPRVjttdd3FtlKx/WwxyKliN3CVEt3G
83IfLMXNetQvQnXhlYlFCspcL5fq1kVXckbPG4QE3oO+Zb47VB+CLHxLNfr0y/Br
Ca7vqqUAwns5JyfzysJvs+3FG9m7Ib+Ov+NPdmas/ryaoAhGlFhTI3JaE2Ad9APs
OPltw8c+N5u6iBG6a2QeFyrQoVc/0Ob8ZdW3bsvvTcrxxTXfyeOOdWDSlUbNq5Wf
20kf86YSuXiZLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:51 2025 by rpki-client