Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: KvjSseTPbdpz3SqEaTmhP4YJyJOON5ezZIsG1BzbxjI=
Subject key identifier: 40:35:11:64:5F:98:E6:39:87:D0:EA:4F:81:43:7B:F2:6C:69:B4:68
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0199C5D841A6FE19FA375A0E33621D0EF941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0FE1
Signing time: Wed 08 Oct 2025 22:01:47 +0000
Manifest this update: Wed 08 Oct 2025 22:01:47 +0000
Manifest next update: Thu 09 Oct 2025 22:01:47 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: UN6cPqdlGbQ5P8pag3GntgFK/uQZvDYp2QeR9ztXZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:41:a6:fe:19:fa:37:5a:0e:33:62:1d:0e:f9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Oct 8 22:01:47 2025 GMT
Not After : Oct 9 22:01:47 2025 GMT
Subject: CN=403511645f98e63987d0ea4f81437bf26c69b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:2c:9e:8c:10:8e:82:2d:14:79:70:d8:be:
a4:94:f0:f9:ad:e3:2e:4b:fc:ea:a2:d0:d0:29:e3:
eb:c2:51:f5:ff:d2:6c:77:0f:cc:8a:75:04:4e:76:
23:b9:53:8c:00:17:63:2d:ee:63:c5:ab:db:d4:6a:
ca:7b:e4:2a:8e:2c:62:2a:8d:65:dc:b0:a2:6d:e8:
26:1c:3c:83:49:f5:2d:64:8a:8a:6e:8a:8b:05:e9:
28:e4:c0:76:2f:5b:35:74:ce:d1:2d:b6:60:55:fa:
5d:bd:81:34:c0:52:5e:81:d8:6f:bb:6b:fe:ef:3f:
f0:22:34:a5:95:30:de:dd:89:71:d5:11:58:40:03:
0c:89:fc:2e:60:cf:be:d8:51:1b:be:34:a7:45:2b:
90:d9:a9:67:92:bc:28:74:8c:a2:7d:3f:98:3f:70:
4b:7e:da:63:62:b8:2b:c9:94:34:9b:16:97:f7:fa:
cf:58:8c:35:e4:70:e3:61:22:fd:36:aa:c8:c4:51:
98:93:8f:fd:51:02:db:cf:de:80:e5:95:6e:ea:3f:
99:44:6a:a6:3e:8d:c5:bb:75:c0:a4:da:6a:2e:f3:
bf:26:41:fc:e0:6c:29:eb:1c:2c:a2:ce:69:4f:69:
4e:d1:d1:d1:30:93:4f:78:3b:aa:9e:59:0c:d0:98:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:35:11:64:5F:98:E6:39:87:D0:EA:4F:81:43:7B:F2:6C:69:B4:68
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:37:3d:7a:44:a9:b1:aa:39:fc:2b:43:b5:cd:0e:d9:12:11:
b3:31:1d:8f:d3:50:ed:ef:f1:8d:7f:54:6f:5b:4d:86:31:fa:
15:e7:fb:cf:6a:f1:f7:7b:48:26:be:43:ca:c2:df:1c:a5:2d:
58:75:a2:4e:97:50:41:0f:8b:b7:da:86:21:0a:e5:0c:8b:a4:
92:91:df:ae:2d:bd:44:a6:75:34:17:9e:ae:7a:c4:ac:b3:71:
81:61:dc:be:c5:d1:93:35:a0:d0:f2:3d:98:84:0d:0c:6b:1b:
8a:78:8a:6a:b1:28:4b:ed:b2:14:7c:9b:aa:69:f8:90:bf:c3:
5f:fa:07:88:43:ba:dd:09:1f:5c:1e:aa:d8:4a:11:03:08:a6:
ea:f8:8f:61:ac:ac:fa:9e:3a:87:7f:59:f9:3e:c1:dc:30:a7:
bf:96:a2:58:57:75:d7:85:ef:fc:4f:5c:8b:f0:51:12:f7:6e:
12:e7:27:46:75:32:69:74:a1:c5:81:6a:bb:24:5e:e4:ee:4c:
06:ef:58:e8:5f:a9:b6:73:20:52:2b:ea:5f:96:56:f3:4f:f0:
fe:f0:5b:76:1b:90:01:86:f8:bf:71:7d:3e:39:c0:8f:08:8f:
7d:47:df:a0:98:c8:11:10:7e:6d:4f:96:e7:c1:ef:29:06:b0:
cb:2b:9d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2EGm/hn6N1oOM2IdDvlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2RjY2Y1MDY4ODI5MzI5Y2RhYzUxZDVkMTkwZmUxMDg5
Y2RlOWUwHhcNMjUxMDA4MjIwMTQ3WhcNMjUxMDA5MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg0MDM1MTE2NDVmOThlNjM5ODdkMGVhNGY4MTQzN2JmMjZjNjliNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptIsnowQjoItFHlw2L6klPD5reMu
S/zqotDQKePrwlH1/9Jsdw/MinUETnYjuVOMABdjLe5jxavb1GrKe+QqjixiKo1l
3LCibegmHDyDSfUtZIqKboqLBeko5MB2L1s1dM7RLbZgVfpdvYE0wFJegdhvu2v+
7z/wIjSllTDe3Ylx1RFYQAMMifwuYM++2FEbvjSnRSuQ2alnkrwodIyifT+YP3BL
ftpjYrgryZQ0mxaX9/rPWIw15HDjYSL9NqrIxFGYk4/9UQLbz96A5ZVu6j+ZRGqm
Po3Fu3XApNpqLvO/JkH84Gwp6xwsos5pT2lO0dHRMJNPeDuqnlkM0JjYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA1EWRfmOY5h9DqT4FDe/JsabRoMB8GA1UdIwQY
MBaAFJh9zPUGiCkynNrFHV0ZD+EInN6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUgzTTlRYUlLVEtjMnNVZFhSa1A0UWljM3A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zM2U1M2QtYmNlZS00MjNiLWFhODQt
MTM1YmFiMDkwOTQwLzEvbUgzTTlRYUlLVEtjMnNVZFhSa1A0UWljM3A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zM2U1M2QtYmNlZS00MjNiLWFhODQtMTM1YmFiMDkwOTQw
LzEvbUgzTTlRYUlLVEtjMnNVZFhSa1A0UWljM3A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDc9ekSp
sao5/CtDtc0O2RIRszEdj9NQ7e/xjX9Ub1tNhjH6Fef7z2rx93tIJr5DysLfHKUt
WHWiTpdQQQ+Lt9qGIQrlDIukkpHfri29RKZ1NBeernrErLNxgWHcvsXRkzWg0PI9
mIQNDGsbiniKarEoS+2yFHybqmn4kL/DX/oHiEO63QkfXB6q2EoRAwim6viPYays
+p46h39Z+T7B3DCnv5aiWFd114Xv/E9ci/BREvduEucnRnUyaXShxYFquyRe5O5M
Bu9Y6F+ptnMgUivqX5ZW80/w/vBbdhuQAYb4v3F9PjnAjwiPfUffoJjIERB+bU+W
58HvKQawyyudEw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:29:55 2025 by rpki-client