Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: bog2aaA45Dj7jn7DjU4Zlfm8gO06KBLylj28MSyTnBM=
Subject key identifier: 11:56:15:91:94:A9:C1:9A:A9:CE:A3:66:6D:79:34:2A:BF:E6:BA:7C
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019A72263E7D7AAB7C8DEEFE8F3F1B691889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 10A4
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: cxRufEel5qjLrNln6r7Xv6hR6Vdghw6Tx36IohYeixA=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:7d:7a:ab:7c:8d:ee:fe:8f:3f:1b:69:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=1156159194a9c19aa9cea3666d79342abfe6ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:37:66:ff:2b:83:db:62:91:ae:22:07:5d:
8d:99:d7:b3:5e:0d:ed:de:3b:75:25:13:d5:08:93:
9e:b2:be:6d:4e:10:df:5a:f8:7e:d4:b9:49:2f:4f:
40:41:e0:c9:23:1f:b5:7d:ff:b3:52:c9:52:43:b7:
5d:d2:e7:49:8e:41:c6:c0:d7:5a:ae:85:3a:01:60:
d0:21:2b:22:ee:34:ff:11:dd:51:7b:cb:eb:74:9e:
aa:a3:a5:d7:f8:1f:fe:7b:c9:ff:84:4d:92:1b:6a:
cb:27:f9:6a:c5:1b:2f:28:24:49:3e:dd:13:51:ec:
5c:3a:f3:80:80:bd:e5:b9:a5:6f:95:5d:f9:23:8e:
47:ff:07:a2:4b:0a:ee:6f:32:c8:13:07:db:92:21:
10:a8:1f:f2:41:a3:42:30:5b:e7:98:14:22:68:f9:
21:9e:6a:d8:97:9f:57:a4:48:6e:56:5c:ad:91:61:
a7:03:0b:08:0d:96:3a:12:fc:b7:99:58:c8:fb:d1:
04:52:13:0f:2f:fa:9b:8d:63:68:5b:5e:df:51:46:
64:cf:25:65:02:f9:cf:c1:d3:5b:f7:6c:36:b6:20:
56:1a:15:04:19:11:a5:70:31:9a:c0:35:87:2e:d5:
b9:a4:6f:73:1f:59:58:f3:55:5c:64:67:c3:13:b9:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:15:91:94:A9:C1:9A:A9:CE:A3:66:6D:79:34:2A:BF:E6:BA:7C
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:d2:65:bd:25:65:53:f8:ad:8a:76:19:27:e2:1b:05:d9:
f8:06:80:eb:38:c3:49:e9:71:dc:42:40:24:8a:cb:89:ec:fd:
bf:ee:21:9d:9a:ef:d0:1e:3c:ef:4d:56:54:6d:77:fa:04:ac:
0d:a4:1b:bc:64:83:32:1f:a2:22:4d:f1:77:d0:20:9d:ac:f1:
68:ab:16:37:7b:4e:1d:9a:49:47:2c:7c:37:c4:03:cb:42:4c:
e2:d7:89:9d:ce:32:62:ae:5e:7f:d5:a8:1f:6c:cb:bd:97:f3:
f5:03:99:90:f0:c3:bd:95:37:3c:65:c1:3c:2b:86:6b:90:69:
14:ee:5f:85:8f:35:dc:ca:35:17:5f:0e:df:d8:0a:83:cc:15:
fe:65:74:87:56:09:f9:6a:a7:26:66:26:70:95:04:3b:7c:35:
94:37:de:a5:7f:73:38:39:2f:16:d4:ad:03:f8:76:53:9f:9a:
3c:e2:65:cd:94:c0:12:ca:a3:75:ef:d9:a1:c9:61:35:8a:29:
bc:3c:79:1f:db:9f:42:d4:e9:7f:24:05:1a:87:01:3a:aa:01:
8a:05:45:86:71:55:cd:6e:7e:67:a5:b4:bb:01:7a:78:87:05:
d4:aa:c9:70:bd:03:b0:95:7d:3e:0d:9e:5a:12:fa:6f:a3:fe:
ef:cc:f5:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJj59eqt8je7+jz8baRiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjUxMTExMDkwMTQwWhcNMjUxMTEyMDkwMTQwWjAzMTEwLwYDVQQD
EygxMTU2MTU5MTk0YTljMTlhYTljZWEzNjY2ZDc5MzQyYWJmZTZiYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxks3Zv8rg9tika4iB12NmdezXg3t
3jt1JRPVCJOesr5tThDfWvh+1LlJL09AQeDJIx+1ff+zUslSQ7dd0udJjkHGwNda
roU6AWDQISsi7jT/Ed1Re8vrdJ6qo6XX+B/+e8n/hE2SG2rLJ/lqxRsvKCRJPt0T
UexcOvOAgL3luaVvlV35I45H/weiSwrubzLIEwfbkiEQqB/yQaNCMFvnmBQiaPkh
nmrYl59XpEhuVlytkWGnAwsIDZY6Evy3mVjI+9EEUhMPL/qbjWNoW17fUUZkzyVl
AvnPwdNb92w2tiBWGhUEGRGlcDGawDWHLtW5pG9zH1lY81VcZGfDE7kNKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFWFZGUqcGaqc6jZm15NCq/5rp8MB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj3SZb0l
ZVP4rYp2GSfiGwXZ+AaA6zjDSelx3EJAJIrLiez9v+4hnZrv0B48701WVG13+gSs
DaQbvGSDMh+iIk3xd9AgnazxaKsWN3tOHZpJRyx8N8QDy0JM4teJnc4yYq5ef9Wo
H2zLvZfz9QOZkPDDvZU3PGXBPCuGa5BpFO5fhY813Mo1F18O39gKg8wV/mV0h1YJ
+WqnJmYmcJUEO3w1lDfepX9zODkvFtStA/h2U5+aPOJlzZTAEsqjde/ZoclhNYop
vDx5H9ufQtTpfyQFGocBOqoBigVFhnFVzW5+Z6W0uwF6eIcF1KrJcL0DsJV9Pg2e
WhL6b6P+78z1eA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:14 2025 by rpki-client