Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: Mak1ppaCejpzIoemQMp3ODHOJuIqeO4V3zsAiCoGK1M=
Subject key identifier: 19:E8:DB:2D:6B:55:E2:AF:B7:20:8D:60:6B:C3:0B:66:DD:95:16:A5
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019A4F62E9C487D64A795FD108D16A3CBDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 1664
Signing time: Tue 04 Nov 2025 15:01:13 +0000
Manifest this update: Tue 04 Nov 2025 15:01:13 +0000
Manifest next update: Wed 05 Nov 2025 15:01:13 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: T5O0CqRGh2PgLnKNRno7Ji2qyv5aD1o6HYcdIjSxqUc=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e9:c4:87:d6:4a:79:5f:d1:08:d1:6a:3c:bd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Nov 4 15:01:13 2025 GMT
Not After : Nov 5 15:01:13 2025 GMT
Subject: CN=19e8db2d6b55e2afb7208d606bc30b66dd9516a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:3a:8f:c4:5c:7c:bb:c1:f9:4f:e1:fd:88:
8b:f7:51:98:27:9e:5d:c4:5b:91:37:51:0f:f6:7d:
a5:7d:59:b2:73:b9:39:cd:1d:6a:0c:00:0f:ac:60:
4e:37:3a:3a:7b:8b:37:f3:27:5b:c1:6d:eb:28:02:
1c:0d:19:eb:db:02:bc:d3:dd:c4:71:1f:ae:12:39:
bb:b1:e6:69:22:7b:c2:5e:c1:12:e0:cb:79:11:d1:
ba:c5:4a:78:40:c5:cf:e5:ba:59:92:17:a8:cd:da:
00:2a:8a:f7:91:08:93:61:f5:de:bb:d6:ca:fe:19:
1c:b0:85:f7:5e:dc:95:20:49:71:c1:bd:e0:90:65:
4c:25:91:fc:83:41:88:8f:99:c5:5b:93:9f:71:48:
9f:fa:f4:15:4c:db:bc:32:c8:d0:4a:7c:13:2b:71:
3c:79:df:7d:dd:63:bd:c3:b8:67:7f:bb:a4:38:7c:
7c:95:1f:15:6b:45:6c:48:a5:2a:92:13:4a:e6:f2:
b6:7d:94:a4:0f:23:6c:b0:4c:a0:85:b5:7c:b4:3f:
e8:70:ea:de:e3:76:2f:c5:e4:95:86:25:27:7e:93:
d3:3e:96:4c:63:f1:54:da:c3:92:79:01:d6:3e:56:
58:eb:a4:cf:af:cb:2d:60:44:df:cd:e2:8e:4d:44:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E8:DB:2D:6B:55:E2:AF:B7:20:8D:60:6B:C3:0B:66:DD:95:16:A5
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:cf:a1:78:7f:03:88:b1:f1:cb:d8:58:7a:27:f1:13:48:
5d:2e:42:e4:06:a6:6b:15:37:e9:fe:8e:cf:22:c7:88:3a:75:
22:c1:1a:1b:2d:fe:6c:b4:51:08:ff:40:ab:5e:a8:fc:d7:f3:
31:00:5e:24:f7:9b:a6:52:b1:c1:cd:f8:31:d4:33:65:37:7b:
8c:74:f8:e8:db:e3:42:b1:3f:8f:7c:63:83:55:a6:6c:89:73:
b3:c3:eb:d5:3b:e2:e7:cb:27:54:78:be:25:8b:cb:0d:44:5b:
9e:79:a2:8a:3b:f5:86:26:c9:0a:c3:be:13:c3:d9:77:4e:f2:
f4:7f:6a:84:94:a3:1e:e9:45:57:26:9e:2d:fa:80:2d:69:b5:
ec:96:62:9a:20:63:8f:f2:ba:26:76:ec:5d:f5:15:57:d4:ef:
1f:2f:6a:4a:80:a1:b0:a1:c5:bf:90:53:99:93:3c:2a:0d:aa:
2d:91:9e:76:e4:5d:f1:08:98:72:6e:f6:d5:18:2e:80:cb:c8:
ee:5e:9c:d6:1c:0f:15:54:2f:38:12:c2:77:74:50:3c:67:b4:
1b:0e:9a:af:17:93:f3:73:77:0d:e4:78:44:f6:97:6a:1d:5a:
af:33:52:94:40:ae:68:9f:f1:bd:ce:03:16:00:9b:b6:4a:60:
88:b4:21:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYunEh9ZKeV/RCNFqPL2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUxMTA0MTUwMTEzWhcNMjUxMTA1MTUwMTEzWjAzMTEwLwYDVQQD
EygxOWU4ZGIyZDZiNTVlMmFmYjcyMDhkNjA2YmMzMGI2NmRkOTUxNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdw6j8RcfLvB+U/h/YiL91GYJ55d
xFuRN1EP9n2lfVmyc7k5zR1qDAAPrGBONzo6e4s38ydbwW3rKAIcDRnr2wK8093E
cR+uEjm7seZpInvCXsES4Mt5EdG6xUp4QMXP5bpZkheozdoAKor3kQiTYfXeu9bK
/hkcsIX3XtyVIElxwb3gkGVMJZH8g0GIj5nFW5OfcUif+vQVTNu8MsjQSnwTK3E8
ed993WO9w7hnf7ukOHx8lR8Va0VsSKUqkhNK5vK2fZSkDyNssEyghbV8tD/ocOre
43YvxeSVhiUnfpPTPpZMY/FU2sOSeQHWPlZY66TPr8stYETfzeKOTURwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBno2y1rVeKvtyCNYGvDC2bdlRalMB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ3PoXh/
A4ix8cvYWHon8RNIXS5C5AamaxU36f6OzyLHiDp1IsEaGy3+bLRRCP9Aq16o/Nfz
MQBeJPebplKxwc34MdQzZTd7jHT46NvjQrE/j3xjg1WmbIlzs8Pr1Tvi58snVHi+
JYvLDURbnnmiijv1hibJCsO+E8PZd07y9H9qhJSjHulFVyaeLfqALWm17JZimiBj
j/K6JnbsXfUVV9TvHy9qSoChsKHFv5BTmZM8Kg2qLZGeduRd8QiYcm721RgugMvI
7l6c1hwPFVQvOBLCd3RQPGe0Gw6arxeT83N3DeR4RPaXah1arzNSlECuaJ/xvc4D
FgCbtkpgiLQhpw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:59:07 2025 by rpki-client