Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: aK+q+jghhmoLZYhGlVwHuKMKoPqVzXuD4fWyA694WEs=
Subject key identifier: 15:7A:8E:CF:71:65:08:26:DB:B0:C3:01:3B:AB:5A:D9:F5:48:1F:25
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019A4E86922C6CEFA9DDB76423378E96B161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0482
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: VFxzl30N3ZcnVBT4q+eCBh6ru3g5iyrl28ntTUoO+oE=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:92:2c:6c:ef:a9:dd:b7:64:23:37:8e:96:b1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=157a8ecf71650826dbb0c3013bab5ad9f5481f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:5c:8e:88:0a:ca:ff:69:f5:e4:22:ef:91:
36:3b:9d:3f:30:76:d9:4e:89:50:e1:a2:8e:9b:20:
f8:7d:e1:00:fd:f1:ae:58:a6:78:52:99:d7:48:63:
59:98:82:dc:78:da:73:3b:d0:6c:c1:54:53:ad:2d:
ce:39:54:46:4d:53:37:50:e4:fb:bc:d3:4c:39:75:
e8:b0:83:2b:c5:1a:02:8b:92:52:a2:0a:64:a4:99:
99:01:c7:f2:9f:c4:f0:7c:fa:c7:ee:a6:a3:9c:48:
4e:f1:d9:21:45:8c:14:71:10:42:3b:8f:3b:05:b4:
a8:41:d7:5d:fa:fd:6c:2c:a2:7e:2c:fa:c1:12:a1:
3c:3d:64:2f:af:e3:82:1e:a0:ca:77:55:04:80:31:
c2:9c:34:75:d8:c6:01:45:eb:5d:c8:01:13:f2:3a:
d6:d2:a9:c1:97:5a:6e:b1:64:ae:1e:64:bd:94:0e:
a7:a1:37:47:0a:6f:72:5b:d0:29:1c:0f:eb:b2:86:
9f:f5:31:ea:b5:b4:eb:6b:85:c3:40:f1:67:83:32:
a1:f9:ba:dd:28:94:f9:d9:45:68:62:a9:80:10:1a:
31:9b:90:7a:d8:83:a5:61:a9:98:31:8e:fe:e0:72:
e0:44:01:fc:2f:8e:21:c6:2c:fd:ba:54:4b:59:32:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:8E:CF:71:65:08:26:DB:B0:C3:01:3B:AB:5A:D9:F5:48:1F:25
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:b4:b8:63:bc:e7:c6:99:51:64:a1:30:69:93:b0:96:44:
6c:9a:0c:cd:de:14:82:11:b7:3f:53:b3:09:03:03:f6:cb:1e:
74:1d:6c:04:78:b8:0e:d1:bf:93:15:de:4b:8a:08:e4:84:ad:
47:b5:0d:59:ee:5a:08:51:b1:41:4e:52:43:73:1d:1f:6c:2d:
73:a3:7d:8e:5d:7e:a6:e7:10:d5:2a:13:17:93:97:7d:cb:91:
cd:c0:2c:de:3f:bd:4a:50:63:3b:03:a0:22:49:c7:98:4e:b7:
f6:7e:d7:71:46:15:1b:d7:4c:24:73:4d:89:0f:3a:ce:50:18:
2f:56:17:50:a4:14:69:de:9d:5e:e9:e4:31:8a:52:46:0c:ad:
9a:db:16:49:e3:82:5d:f3:ee:f9:16:21:47:6d:d6:2c:4f:3f:
65:be:0f:b2:ed:cd:ad:42:63:77:87:64:ec:47:83:63:95:d9:
3c:a9:5b:78:a7:b7:45:55:89:36:12:05:f9:cd:81:98:17:52:
c7:5b:54:dc:33:25:74:91:c1:46:bf:50:93:d7:df:81:45:db:
b1:4c:c9:d7:8a:f1:06:18:4f:81:95:0f:6d:8a:7a:2c:de:5a:
82:19:a7:2b:b9:fe:01:c0:ee:3d:cb:7a:52:d3:04:03:e5:fb:
a6:bf:60:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpIsbO+p3bdkIzeOlrFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjUxMTA0MTEwMDMzWhcNMjUxMTA1MTEwMDMzWjAzMTEwLwYDVQQD
EygxNTdhOGVjZjcxNjUwODI2ZGJiMGMzMDEzYmFiNWFkOWY1NDgxZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxdcjogKyv9p9eQi75E2O50/MHbZ
TolQ4aKOmyD4feEA/fGuWKZ4UpnXSGNZmILceNpzO9BswVRTrS3OOVRGTVM3UOT7
vNNMOXXosIMrxRoCi5JSogpkpJmZAcfyn8TwfPrH7qajnEhO8dkhRYwUcRBCO487
BbSoQddd+v1sLKJ+LPrBEqE8PWQvr+OCHqDKd1UEgDHCnDR12MYBRetdyAET8jrW
0qnBl1pusWSuHmS9lA6noTdHCm9yW9ApHA/rsoaf9THqtbTra4XDQPFngzKh+brd
KJT52UVoYqmAEBoxm5B62IOlYamYMY7+4HLgRAH8L44hxiz9ulRLWTLBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV6js9xZQgm27DDATurWtn1SB8lMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofe0uGO8
58aZUWShMGmTsJZEbJoMzd4UghG3P1OzCQMD9ssedB1sBHi4DtG/kxXeS4oI5ISt
R7UNWe5aCFGxQU5SQ3MdH2wtc6N9jl1+pucQ1SoTF5OXfcuRzcAs3j+9SlBjOwOg
IknHmE639n7XcUYVG9dMJHNNiQ86zlAYL1YXUKQUad6dXunkMYpSRgytmtsWSeOC
XfPu+RYhR23WLE8/Zb4Psu3NrUJjd4dk7EeDY5XZPKlbeKe3RVWJNhIF+c2BmBdS
x1tU3DMldJHBRr9Qk9ffgUXbsUzJ14rxBhhPgZUPbYp6LN5aghmnK7n+AcDuPct6
UtMEA+X7pr9goQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:54 2025 by rpki-client