Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File: m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier: SuU9oHK9fEFqY1uQUVayqm88YQ4hyF+xzy5T36MSWfE=
Subject key identifier: A5:D3:E0:DC:2D:0E:F4:73:40:19:3C:CE:34:BE:DE:FF:DD:4B:BE:B1
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019A0A49E9C8A3A6E669A12869C1D72C30EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number: 16D1
Signing time: Wed 22 Oct 2025 05:00:07 +0000
Manifest this update: Wed 22 Oct 2025 05:00:07 +0000
Manifest next update: Thu 23 Oct 2025 05:00:07 +0000
Files and hashes: 1: 8GYAexsjvmr0ISLsQKryGmpLtTs.roa (hash: SQMUuzA/SYQZuwCfc0e9iAWXVLPmE3XP9dpG659uDkI=)
2: GX0hRHwpO_GFAf_Dl8eMW3z_248.roa (hash: HctIB8ovJUFcdq28I1mZn+xQVZZMOfz92Vt9MrUaS78=)
3: WKensdemy_AXuee8qERPXAv7WQQ.roa (hash: 5h5e2Cjl6Y6xTdpx1Uogj/kqIPDJsoW5m77rPfpWD30=)
4: Yp8Y2f-rm0XFP0JksYyQiIn5YI4.roa (hash: zUTWYSFUC05+hAZt14a3XZJms6iqhzhaVnj/uuxFKy0=)
5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 9uJgoFU0mMprgq3Mx+yhWcfzZf76XLNfBHJp9xlSp3A=)
6: p78TdZM7jp7r56ACoeEx_vocT4c.roa (hash: GFGeQudO2jovI4snICeqKAiASNPKMGJsocJeu39JBto=)
7: tXVRXa1qJjFTp7ESN89vh6T8E94.roa (hash: 0lv9VjdN51nQRf36Hx017s+uMUMF9eBDdjJHsff15ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:49:e9:c8:a3:a6:e6:69:a1:28:69:c1:d7:2c:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Oct 22 05:00:07 2025 GMT
Not After : Oct 23 05:00:07 2025 GMT
Subject: CN=a5d3e0dc2d0ef47340193cce34bedeffdd4bbeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:63:87:c0:56:f8:fc:dd:86:2a:7e:14:44:
74:f6:3c:61:37:e6:26:00:4f:0b:bd:50:2d:de:31:
00:bf:8f:a8:d6:20:2c:37:8e:06:d9:08:1d:e9:0a:
89:e0:63:42:09:1e:4a:14:d3:d9:ac:05:58:9c:f7:
fe:7c:ab:11:41:c5:ea:5e:be:88:09:7d:ca:3c:39:
49:34:3a:54:97:08:28:7d:7e:f1:d0:b6:73:db:5c:
a0:c4:ad:e8:24:4e:2a:18:de:52:e0:a9:6e:81:da:
1a:84:bb:12:05:ed:6c:8d:fa:44:25:7b:cf:ca:c7:
a9:4a:fa:f0:6d:d4:ff:98:a8:c4:59:69:6f:b6:c2:
2b:46:b5:34:e4:6b:e8:37:21:19:2a:3e:d2:e1:5c:
00:ea:d0:9f:40:18:9b:2f:5a:42:92:6f:4f:07:32:
4b:41:4a:d2:a7:89:40:95:e7:d9:f5:1e:22:c6:a9:
74:41:b8:dd:19:1a:1c:67:78:66:e8:e9:0a:15:f2:
48:bc:3d:30:57:79:c5:5f:ca:9c:61:94:0e:9a:c9:
42:6f:00:7a:bb:20:00:06:62:01:64:dc:af:3e:58:
57:3b:cf:37:79:30:c6:f0:da:c2:f9:64:d9:c2:83:
a7:96:4d:14:bc:01:b1:d0:2a:0d:8b:c7:7f:6a:84:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:E0:DC:2D:0E:F4:73:40:19:3C:CE:34:BE:DE:FF:DD:4B:BE:B1
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:28:ff:e4:eb:0f:54:85:ec:f6:23:8f:2a:12:11:76:78:
1c:83:38:41:c6:b0:b3:b3:2f:ed:e9:7f:99:13:f8:26:08:85:
77:3e:82:bc:6c:a3:b3:9b:e9:39:d0:a6:36:6c:67:e0:7e:0a:
f3:1a:23:39:6c:b4:44:8c:71:fd:b4:f7:87:97:a5:52:86:84:
4d:6b:8d:cb:06:35:da:18:bb:b9:07:e2:2c:84:11:5f:65:cd:
f4:f7:22:56:d7:a8:59:16:3e:c3:7e:6d:68:3b:1a:76:6e:79:
14:0d:7c:0a:75:a3:94:11:01:65:1f:2b:a7:13:1f:29:2f:04:
cf:00:1f:bf:52:6e:a8:83:4d:d7:40:c2:a9:47:83:fd:3f:92:
48:e1:54:13:4c:40:e1:86:fe:ef:e0:41:7d:6a:14:22:26:d4:
a7:08:a6:f1:b6:d9:f4:cb:28:57:f0:22:83:25:b3:e1:cc:8d:
63:24:13:f1:41:ba:f1:4e:2b:55:13:c7:9c:44:4d:61:b8:d9:
69:ec:ef:03:c9:49:d0:90:bf:5f:3e:55:bc:de:8a:a6:4e:0f:
e7:2a:52:d1:62:cb:93:83:37:d1:c6:98:15:2e:c8:ab:33:a9:
1e:4e:0b:aa:ff:b1:ee:dd:77:2e:82:36:da:90:13:27:e2:55:
41:c4:5d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKSenIo6bmaaEoacHXLDDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjUxMDIyMDUwMDA3WhcNMjUxMDIzMDUwMDA3WjAzMTEwLwYDVQQD
EyhhNWQzZTBkYzJkMGVmNDczNDAxOTNjY2UzNGJlZGVmZmRkNGJiZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k5jh8BW+Pzdhip+FER09jxhN+Ym
AE8LvVAt3jEAv4+o1iAsN44G2Qgd6QqJ4GNCCR5KFNPZrAVYnPf+fKsRQcXqXr6I
CX3KPDlJNDpUlwgofX7x0LZz21ygxK3oJE4qGN5S4KlugdoahLsSBe1sjfpEJXvP
ysepSvrwbdT/mKjEWWlvtsIrRrU05GvoNyEZKj7S4VwA6tCfQBibL1pCkm9PBzJL
QUrSp4lAlefZ9R4ixql0QbjdGRocZ3hm6OkKFfJIvD0wV3nFX8qcYZQOmslCbwB6
uyAABmIBZNyvPlhXO883eTDG8NrC+WTZwoOnlk0UvAGx0CoNi8d/aoQ2RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXT4NwtDvRzQBk8zjS+3v/dS76xMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh60o/+Tr
D1SF7PYjjyoSEXZ4HIM4Qcaws7Mv7el/mRP4JgiFdz6CvGyjs5vpOdCmNmxn4H4K
8xojOWy0RIxx/bT3h5elUoaETWuNywY12hi7uQfiLIQRX2XN9PciVteoWRY+w35t
aDsadm55FA18CnWjlBEBZR8rpxMfKS8EzwAfv1JuqINN10DCqUeD/T+SSOFUE0xA
4Yb+7+BBfWoUIibUpwim8bbZ9MsoV/AigyWz4cyNYyQT8UG68U4rVRPHnERNYbjZ
aezvA8lJ0JC/Xz5VvN6Kpk4P5ypS0WLLk4M30caYFS7IqzOpHk4Lqv+x7t13LoI2
2pATJ+JVQcRdSw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:32:06 2025 by rpki-client