Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: BgTIeTpFDqGwdbUEmbg7NZUWOpu9Bb9nFIRU/ef8+sc=
Subject key identifier: 75:D0:4F:8A:DE:70:38:D2:DA:2D:FC:E3:41:6B:C0:BC:6C:49:F1:03
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019A70DC489DFEEB75A9FDA45B5A0B85FBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 02F9
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: DSrriY0kTNELG4oxKEIjyONHFzY.roa (hash: G+y9D4/mU3p2L2jX8635Per34u+yYnPZalrdKQqBsuo=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: MqR5+s3efR9ubsEhgBb3AYjlOuTlRAFHGzGjhfWx2Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:48:9d:fe:eb:75:a9:fd:a4:5b:5a:0b:85:fb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=75d04f8ade7038d2da2dfce3416bc0bc6c49f103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:b6:d6:cc:56:b4:99:de:66:12:fa:f2:98:
d2:95:e2:10:c6:16:06:10:6b:83:6e:4a:09:7a:9c:
be:52:bb:29:f9:4c:d2:86:8f:40:db:88:d2:36:e1:
13:c5:f7:40:3c:d0:2b:87:12:12:cf:51:46:47:06:
4e:4b:8a:a6:0f:ca:98:72:dd:00:dd:f4:38:ac:06:
22:1e:9e:d5:7a:f5:b7:87:30:9a:67:b5:06:23:e4:
67:8e:c8:b5:ac:af:c9:43:10:03:6d:b6:12:a6:e4:
dc:fc:e7:8c:da:70:9f:3f:57:31:83:ac:2e:12:6e:
04:8b:fb:09:20:ad:4e:4b:e9:2d:3b:b8:17:c7:2d:
15:c5:ee:00:62:2f:a6:83:48:8f:8c:21:29:76:a1:
85:8a:42:bc:75:97:e0:6a:2a:4b:6d:f9:bc:89:e6:
75:83:c9:24:14:0e:ea:5c:07:a7:a6:53:8d:18:4d:
7a:dd:2c:fe:f2:7f:cc:35:80:d9:77:34:08:c2:cf:
e5:0c:2b:b7:da:4d:27:9f:cc:03:d7:b9:52:4b:11:
81:7b:6c:69:5a:62:2c:a0:af:4c:fa:ee:50:52:59:
c1:fd:3a:2e:ae:1e:0a:05:b6:ea:7a:13:bc:28:44:
77:0d:7d:58:d1:b6:71:e2:69:b3:fd:61:f0:ce:c0:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:4F:8A:DE:70:38:D2:DA:2D:FC:E3:41:6B:C0:BC:6C:49:F1:03
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:86:47:84:a0:d1:04:6b:e6:95:69:58:6c:6d:a2:37:5e:fc:
be:0f:c8:57:78:23:f8:9d:61:f0:87:fc:ae:7d:ef:5b:9f:fc:
5f:3f:a2:7c:cf:98:7f:57:ad:13:96:fd:30:85:9c:be:de:bd:
7b:8f:93:87:4a:2f:42:42:b0:2f:26:5a:d0:c9:14:a3:b1:16:
29:32:42:16:1b:ff:d7:a8:28:ae:30:e8:2d:3b:84:cf:c4:4d:
be:b5:4f:ea:5f:da:c1:05:d9:65:0d:6d:ed:c1:6a:42:fa:bf:
fe:27:c4:53:5c:97:af:ac:0a:19:86:24:0b:69:47:47:c8:34:
07:6b:ed:48:71:f2:78:25:dd:4d:19:3a:41:58:b1:35:42:bb:
e0:0d:3b:0b:0a:b8:49:af:7f:09:41:7f:29:a1:97:f4:5e:f3:
8a:85:0d:e0:10:d9:53:4e:56:a2:91:1d:17:2c:f8:35:90:48:
cf:40:c5:20:fd:13:25:d7:4d:fc:a8:8b:da:e0:47:9a:38:14:
b8:4f:e0:39:b6:c5:48:1c:15:a2:72:ae:14:8d:1c:40:66:80:
71:e8:26:fb:54:32:78:87:68:15:db:4f:c0:5c:79:cc:74:c6:
a9:57:a1:51:72:29:4c:df:a5:7e:71:ab:5d:0d:8b:e0:5f:54:
4f:b4:47:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Eid/ut1qf2kW1oLhfvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3
MTg0NzgwHhcNMjUxMTExMDMwMTE1WhcNMjUxMTEyMDMwMTE1WjAzMTEwLwYDVQQD
Eyg3NWQwNGY4YWRlNzAzOGQyZGEyZGZjZTM0MTZiYzBiYzZjNDlmMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mS21sxWtJneZhL68pjSleIQxhYG
EGuDbkoJepy+Ursp+UzSho9A24jSNuETxfdAPNArhxISz1FGRwZOS4qmD8qYct0A
3fQ4rAYiHp7VevW3hzCaZ7UGI+Rnjsi1rK/JQxADbbYSpuTc/OeM2nCfP1cxg6wu
Em4Ei/sJIK1OS+ktO7gXxy0Vxe4AYi+mg0iPjCEpdqGFikK8dZfgaipLbfm8ieZ1
g8kkFA7qXAenplONGE163Sz+8n/MNYDZdzQIws/lDCu32k0nn8wD17lSSxGBe2xp
WmIsoK9M+u5QUlnB/Tourh4KBbbqehO8KER3DX1Y0bZx4mmz/WHwzsAH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXQT4recDjS2i3840FrwLxsSfEDMB8GA1UdIwQY
MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt
NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx
LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIZHhKDR
BGvmlWlYbG2iN178vg/IV3gj+J1h8If8rn3vW5/8Xz+ifM+Yf1etE5b9MIWcvt69
e4+Th0ovQkKwLyZa0MkUo7EWKTJCFhv/16gorjDoLTuEz8RNvrVP6l/awQXZZQ1t
7cFqQvq//ifEU1yXr6wKGYYkC2lHR8g0B2vtSHHyeCXdTRk6QVixNUK74A07Cwq4
Sa9/CUF/KaGX9F7zioUN4BDZU05WopEdFyz4NZBIz0DFIP0TJddN/KiL2uBHmjgU
uE/gObbFSBwVonKuFI0cQGaAcegm+1QyeIdoFdtPwFx5zHTGqVehUXIpTN+lfnGr
XQ2L4F9UT7RH/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:30 2025 by rpki-client