Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File: MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier: GlCWGikbI7IFnXRGi9Cn8bLtguzgX1ujfxZjJdJq+/0=
Subject key identifier: 34:CA:BB:B2:87:1C:88:42:63:C6:EC:08:AC:E3:66:85:AB:82:1B:87
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 0199C4C4DB9CFE3A577CF0A6BF5A8E1DE225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number: 11AA
Signing time: Wed 08 Oct 2025 17:00:59 +0000
Manifest this update: Wed 08 Oct 2025 17:00:59 +0000
Manifest next update: Thu 09 Oct 2025 17:00:59 +0000
Files and hashes: 1: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (hash: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=)
2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: P4PdLEjV4n7wFXaQWmAVnI2pMgXOTCH88sCj9/wQLiI=)
3: ZlJWr-hEOqUqxRC1ufvh4DxAuDM.roa (hash: jx78O4mw6UZw+ac2ij3Kg6QoCkl1hgwVf80ooqVUn5Q=)
4: mouRKK4_Q2E-W7kvAvNPxrpZLhE.roa (hash: ybMAN8gUri6B6wRdRo0fLl/8jSvuyoOJGt4dM0c6HXQ=)
5: oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa (hash: txEsmpmbkyHZufJHl2J4dFHRxGpSRd6FBOFojmw5rsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:db:9c:fe:3a:57:7c:f0:a6:bf:5a:8e:1d:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: Oct 8 17:00:59 2025 GMT
Not After : Oct 9 17:00:59 2025 GMT
Subject: CN=34cabbb2871c884263c6ec08ace36685ab821b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:ab:12:a2:a2:60:23:f8:2c:ea:df:b8:a1:
8e:c3:49:93:d8:a4:f3:9e:a5:d1:ef:47:90:c0:d8:
56:d5:fd:2f:d5:26:bb:2c:41:cc:1f:69:db:54:65:
fc:a1:49:33:e6:e8:7e:1f:4b:9f:88:d1:51:3c:c0:
8f:30:33:ed:71:d6:b3:be:2c:2d:18:97:f3:c6:e6:
1b:6a:67:b1:8e:7e:13:da:f2:ae:e8:f7:b7:49:f9:
8b:40:b9:c6:b6:72:6c:cd:c0:6a:6d:19:44:70:b2:
ec:32:53:12:23:b7:34:f6:2f:2d:84:0d:a8:1e:a2:
ed:f8:b5:d6:6b:cd:62:18:42:33:ae:f2:06:2f:3c:
47:bd:05:cf:bd:aa:24:67:a7:49:60:f6:9a:9f:15:
49:2e:5b:00:66:96:5f:b2:7f:ae:63:c2:e9:68:41:
54:a0:fe:88:3c:ed:8c:5f:99:d6:ee:09:5e:ee:45:
4c:63:a2:af:db:32:ee:83:12:c4:66:df:99:19:fe:
9e:08:f3:d1:b1:6f:1b:74:ed:28:bf:31:b9:6c:cb:
28:2e:49:b5:47:f5:d9:4f:8d:46:62:cd:f6:ac:e5:
7f:05:6e:3b:9e:31:42:ee:8a:99:80:d9:57:7a:02:
25:fb:90:fe:79:b2:75:75:3b:87:ae:18:ea:1d:9a:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:BB:B2:87:1C:88:42:63:C6:EC:08:AC:E3:66:85:AB:82:1B:87
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:a9:d8:ab:60:3d:c6:e0:7e:0b:2b:67:fd:d0:50:56:a7:
56:7b:9a:e2:8f:e0:10:86:b3:d3:f0:f5:b4:01:2c:aa:42:3c:
82:86:3d:9c:0f:23:79:fd:16:f9:a1:0d:74:2a:c5:43:32:73:
74:d5:1f:70:d4:e5:3d:e4:73:c5:60:9f:e7:f0:0c:79:af:06:
e2:be:36:66:ab:3e:ce:41:2c:08:a5:bc:bf:1c:10:70:a9:78:
d9:b7:48:33:b6:4a:99:f6:d6:d6:4f:25:55:a7:53:bf:8e:73:
93:26:d1:af:86:0e:d4:36:8c:3f:00:2f:2e:16:8a:40:8c:27:
27:62:32:ae:04:44:bd:2e:60:3b:9b:b4:a5:d1:a1:a3:d4:f2:
1f:d4:4d:98:b2:c4:60:99:27:1a:d1:65:cd:7a:c7:2e:31:4c:
ec:4f:31:ad:18:73:79:69:de:52:7f:67:c2:1c:f2:ff:48:80:
17:c7:b5:74:e5:51:34:3d:7e:4c:e2:92:d3:77:c4:ac:10:64:
98:f6:f3:cf:e3:e0:25:f7:a6:d7:57:61:c4:25:98:44:72:dc:
dd:cd:fb:5c:08:29:6b:03:2d:02:1c:ad:92:af:fb:58:77:15:
2a:47:d7:53:dd:1f:2e:52:cd:15:ea:0d:23:45:26:80:2d:46:
ae:54:db:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnExNuc/jpXfPCmv1qOHeIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi
ZjllZjYwHhcNMjUxMDA4MTcwMDU5WhcNMjUxMDA5MTcwMDU5WjAzMTEwLwYDVQQD
EygzNGNhYmJiMjg3MWM4ODQyNjNjNmVjMDhhY2UzNjY4NWFiODIxYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS6rEqKiYCP4LOrfuKGOw0mT2KTz
nqXR70eQwNhW1f0v1Sa7LEHMH2nbVGX8oUkz5uh+H0ufiNFRPMCPMDPtcdazviwt
GJfzxuYbamexjn4T2vKu6Pe3SfmLQLnGtnJszcBqbRlEcLLsMlMSI7c09i8thA2o
HqLt+LXWa81iGEIzrvIGLzxHvQXPvaokZ6dJYPaanxVJLlsAZpZfsn+uY8LpaEFU
oP6IPO2MX5nW7gle7kVMY6Kv2zLugxLEZt+ZGf6eCPPRsW8bdO0ovzG5bMsoLkm1
R/XZT41GYs32rOV/BW47njFC7oqZgNlXegIl+5D+ebJ1dTuHrhjqHZrLNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTKu7KHHIhCY8bsCKzjZoWrghuHMB8GA1UdIwQY
MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt
YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz
LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb6p2Ktg
PcbgfgsrZ/3QUFanVnua4o/gEIaz0/D1tAEsqkI8goY9nA8jef0W+aENdCrFQzJz
dNUfcNTlPeRzxWCf5/AMea8G4r42Zqs+zkEsCKW8vxwQcKl42bdIM7ZKmfbW1k8l
VadTv45zkybRr4YO1DaMPwAvLhaKQIwnJ2IyrgREvS5gO5u0pdGho9TyH9RNmLLE
YJknGtFlzXrHLjFM7E8xrRhzeWneUn9nwhzy/0iAF8e1dOVRND1+TOKS03fErBBk
mPbzz+PgJfem11dhxCWYRHLc3c37XAgpawMtAhytkq/7WHcVKkfXU90fLlLNFeoN
I0UmgC1GrlTbfg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:20:02 2025 by rpki-client