Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: cmVDvzrAto8IOn9YkMvlD3W8JhVtKuoQ8WHUWDhMTkA=
Subject key identifier: 53:FE:77:32:19:BF:DB:E5:F2:AE:2C:CE:4F:96:1D:69:06:1C:C5:C0
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019A72934599CF14607DA5583C3A62EDD0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: 1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa (hash: 7uA8FM0km6XoivNJ8PKPfmfodgId3foqoFN3CW/tSgA=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: hSn/XlbylSQidQnf8um5sbbkdujP0cwQmzrWZjeRJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:45:99:cf:14:60:7d:a5:58:3c:3a:62:ed:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=53fe773219bfdbe5f2ae2cce4f961d69061cc5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:cf:36:b0:8c:a3:24:a5:06:83:c3:5f:74:
16:c0:db:49:81:9e:84:fa:87:8a:d5:3a:6e:d8:00:
c5:f2:17:0d:d9:63:ea:89:c8:01:98:37:85:53:a1:
61:65:75:d3:0d:13:14:86:d6:4f:e8:a5:a6:8a:7f:
1a:1a:22:43:38:9d:d2:4f:b7:ac:c4:7e:47:f8:e7:
48:71:a1:db:b9:97:00:50:47:5c:59:ff:de:b7:17:
bf:30:01:6b:ea:25:74:38:93:6c:e4:0a:95:0b:21:
e1:a9:60:18:27:aa:17:ec:27:d2:60:8a:cc:4e:11:
74:74:22:b4:90:39:02:33:49:e8:24:f6:d3:8d:99:
ec:3b:0b:ed:26:e3:4f:91:e3:e5:0c:12:42:c1:6a:
ef:f1:1d:48:30:d8:f0:f3:77:16:14:d9:70:e6:e7:
70:b3:fc:03:9b:4d:09:d2:59:53:8b:06:80:cb:68:
fb:93:01:58:0c:e4:fe:fa:0c:3d:cf:05:59:02:47:
74:2a:22:cc:e6:54:ff:34:2e:b6:8d:b7:21:6b:c5:
df:84:06:89:72:7a:87:4c:cc:a5:b3:78:79:a8:9d:
00:10:de:2f:0c:6a:95:fb:cf:b3:87:2c:e0:95:e8:
02:e7:a4:7c:cb:2f:21:63:f6:5f:70:a9:b2:db:09:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:77:32:19:BF:DB:E5:F2:AE:2C:CE:4F:96:1D:69:06:1C:C5:C0
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:d7:2d:33:d0:54:c6:03:56:1d:76:fc:36:37:38:a0:f0:
25:23:28:2e:45:e9:86:ce:14:16:05:3b:1d:96:90:ed:11:56:
d7:72:d3:74:5a:ae:a2:5f:35:30:e4:5a:f4:30:cb:c3:db:94:
18:63:a1:a7:fd:43:18:be:5e:2e:56:9b:25:a2:33:2e:3d:e4:
7d:c4:37:f4:9a:5e:0e:0a:f5:dc:79:10:56:7f:05:0d:35:c2:
0c:9d:1e:77:c7:db:5f:88:81:68:ff:8f:ed:3e:99:d1:8d:9b:
39:1d:e4:62:55:b7:99:68:53:1f:d6:18:73:01:a6:f1:e2:53:
0e:ad:80:b4:6c:13:3a:7c:ad:9a:5a:6f:b8:14:75:7c:fb:72:
99:e9:0a:ab:62:ab:88:52:47:ea:04:73:89:86:c9:20:9f:66:
5a:f3:b5:57:f3:56:2d:fc:8b:24:15:d0:39:91:8b:44:aa:b6:
38:1b:6c:70:2c:32:c1:a5:e5:6e:a2:73:ac:cc:20:fa:e0:a3:
83:85:44:5d:7a:44:93:ab:c3:bf:22:0d:a4:dc:39:9d:39:e0:
32:af:14:ec:7c:5a:2f:b7:6a:e6:9c:27:e0:94:d8:ba:bd:ae:
c5:3b:04:00:45:a4:b0:fc:79:75:8a:07:e5:fb:6c:2d:35:0a:
3e:67:11:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0WZzxRgfaVYPDpi7dDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjUxMTExMTEwMDQ1WhcNMjUxMTEyMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg1M2ZlNzczMjE5YmZkYmU1ZjJhZTJjY2U0Zjk2MWQ2OTA2MWNjNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEnPNrCMoySlBoPDX3QWwNtJgZ6E
+oeK1Tpu2ADF8hcN2WPqicgBmDeFU6FhZXXTDRMUhtZP6KWmin8aGiJDOJ3ST7es
xH5H+OdIcaHbuZcAUEdcWf/etxe/MAFr6iV0OJNs5AqVCyHhqWAYJ6oX7CfSYIrM
ThF0dCK0kDkCM0noJPbTjZnsOwvtJuNPkePlDBJCwWrv8R1IMNjw83cWFNlw5udw
s/wDm00J0llTiwaAy2j7kwFYDOT++gw9zwVZAkd0KiLM5lT/NC62jbcha8XfhAaJ
cnqHTMyls3h5qJ0AEN4vDGqV+8+zhyzglegC56R8yy8hY/ZfcKmy2wlcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP+dzIZv9vl8q4szk+WHWkGHMXAMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnDXLTPQ
VMYDVh12/DY3OKDwJSMoLkXphs4UFgU7HZaQ7RFW13LTdFquol81MORa9DDLw9uU
GGOhp/1DGL5eLlabJaIzLj3kfcQ39JpeDgr13HkQVn8FDTXCDJ0ed8fbX4iBaP+P
7T6Z0Y2bOR3kYlW3mWhTH9YYcwGm8eJTDq2AtGwTOnytmlpvuBR1fPtymekKq2Kr
iFJH6gRziYbJIJ9mWvO1V/NWLfyLJBXQOZGLRKq2OBtscCwywaXlbqJzrMwg+uCj
g4VEXXpEk6vDvyINpNw5nTngMq8U7HxaL7dq5pwn4JTYur2uxTsEAEWksPx5dYoH
5ftsLTUKPmcR4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client