Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: kz0jvFPYuSvq0MoCUN/fR00oXEjlIlieyXe5fsvggGU=
Subject key identifier: 2C:2A:5B:02:87:4A:3B:8A:BB:C3:BE:59:8F:B1:91:8B:20:FA:95:68
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 019A70DC7BB6831A14A904DD97A93362518D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 1448
Signing time: Tue 11 Nov 2025 03:01:28 +0000
Manifest this update: Tue 11 Nov 2025 03:01:28 +0000
Manifest next update: Wed 12 Nov 2025 03:01:28 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: 2mxRZNBOcjWEkX6xAHB0P/dp4O7rvX8sy6j96pfRAI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7b:b6:83:1a:14:a9:04:dd:97:a9:33:62:51:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Nov 11 03:01:28 2025 GMT
Not After : Nov 12 03:01:28 2025 GMT
Subject: CN=2c2a5b02874a3b8abbc3be598fb1918b20fa9568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:55:42:86:d2:8d:73:d3:b2:4c:e0:7d:55:
50:25:49:7f:b2:62:f3:a7:74:93:1d:86:55:5b:a3:
da:e5:fc:00:cb:43:38:57:bf:f1:c3:99:bb:c5:6e:
5c:eb:d9:97:f1:18:a7:26:e4:24:8d:62:02:98:31:
54:9f:be:6b:6a:45:d8:78:cc:50:1f:0b:3f:ec:75:
1b:eb:94:78:1a:c7:17:b3:5e:dd:c9:7b:13:17:14:
f7:8f:9b:1f:99:27:af:43:40:a4:44:45:4f:42:01:
c2:da:7f:f5:45:9a:5e:43:ac:9e:ac:bb:92:32:8a:
5a:bf:0f:f7:86:98:f0:86:6b:9b:fd:b7:90:93:67:
45:eb:38:19:b3:46:0f:9e:67:d7:93:91:20:14:22:
9b:ae:86:60:f6:ee:b1:76:22:9f:27:1d:24:9f:97:
9c:39:bb:1c:1f:96:9f:ed:a2:ef:97:45:c8:94:c9:
a1:18:e0:a3:41:d8:dc:8c:98:3c:e6:db:f2:91:9a:
23:19:cf:af:6b:f7:51:d8:42:90:a8:67:f3:eb:f0:
ab:25:b9:45:4b:86:71:25:15:89:d4:ca:67:fe:8a:
eb:3a:06:45:e8:87:70:40:ae:c0:02:f7:e1:27:f5:
b3:dd:81:f7:21:1f:20:73:b6:c4:de:63:68:91:e9:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:5B:02:87:4A:3B:8A:BB:C3:BE:59:8F:B1:91:8B:20:FA:95:68
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fd:fa:a2:f2:c8:34:cb:f4:73:71:16:d9:43:49:34:04:dc:
89:3b:63:db:ab:81:2d:50:c8:6c:82:08:1f:7e:e4:3a:94:6d:
d4:55:2f:e1:3e:57:70:aa:cc:5d:a0:d4:55:58:3d:33:db:c4:
45:2c:d3:18:9b:f4:1b:6a:05:24:39:fd:1f:0c:ae:b0:3d:dd:
4a:2b:bd:99:bc:d5:53:33:15:9c:52:2f:01:78:dc:f4:53:f7:
26:4f:e9:78:f1:db:b2:52:66:98:1c:7d:1f:9f:47:88:ea:5c:
61:b7:0f:b2:ae:12:96:ad:97:14:83:92:60:f4:90:4b:ed:0d:
6d:55:39:4e:f0:96:e1:38:8d:7c:20:b3:50:19:e7:b7:eb:72:
75:2a:f4:e1:be:86:30:47:5b:c0:f1:ea:7b:ad:3f:d5:70:94:
6b:ee:31:89:eb:3d:80:f7:c6:21:c2:11:81:66:12:df:81:7b:
51:eb:c3:ad:ab:07:d8:06:22:f1:9a:a9:b0:e7:28:84:76:fc:
d0:60:54:90:19:01:98:a8:c2:e7:c0:dd:cd:f6:c8:58:7a:9d:
7e:be:7f:6f:5b:da:35:a2:83:d3:79:d1:4f:b4:36:16:1b:21:
90:58:1e:fd:b3:b9:e5:73:12:39:3b:c5:f0:f5:5b:c4:31:36:
6e:96:2d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Hu2gxoUqQTdl6kzYlGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjY2FlZDBmODFlMjQ4ZGFmMzMyYjgwODQzZDRhMjllOGQ3
ZDUxZTQwHhcNMjUxMTExMDMwMTI4WhcNMjUxMTEyMDMwMTI4WjAzMTEwLwYDVQQD
EygyYzJhNWIwMjg3NGEzYjhhYmJjM2JlNTk4ZmIxOTE4YjIwZmE5NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9NVQobSjXPTskzgfVVQJUl/smLz
p3STHYZVW6Pa5fwAy0M4V7/xw5m7xW5c69mX8RinJuQkjWICmDFUn75rakXYeMxQ
Hws/7HUb65R4GscXs17dyXsTFxT3j5sfmSevQ0CkREVPQgHC2n/1RZpeQ6yerLuS
Mopavw/3hpjwhmub/beQk2dF6zgZs0YPnmfXk5EgFCKbroZg9u6xdiKfJx0kn5ec
ObscH5af7aLvl0XIlMmhGOCjQdjcjJg85tvykZojGc+va/dR2EKQqGfz6/CrJblF
S4ZxJRWJ1Mpn/orrOgZF6IdwQK7AAvfhJ/Wz3YH3IR8gc7bE3mNokelvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwqWwKHSjuKu8O+WY+xkYsg+pVoMB8GA1UdIwQY
MBaAFPzK7Q+B4kja8zK4CEPUop6NfVHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYt
OGU3NzE3M2RjNGJjLzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYtOGU3NzE3M2RjNGJj
LzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/36ovLI
NMv0c3EW2UNJNATciTtj26uBLVDIbIIIH37kOpRt1FUv4T5XcKrMXaDUVVg9M9vE
RSzTGJv0G2oFJDn9HwyusD3dSiu9mbzVUzMVnFIvAXjc9FP3Jk/pePHbslJmmBx9
H59HiOpcYbcPsq4Slq2XFIOSYPSQS+0NbVU5TvCW4TiNfCCzUBnnt+tydSr04b6G
MEdbwPHqe60/1XCUa+4xies9gPfGIcIRgWYS34F7UevDrasH2AYi8ZqpsOcohHb8
0GBUkBkBmKjC58DdzfbIWHqdfr5/b1vaNaKD03nRT7Q2FhshkFge/bO55XMSOTvF
8PVbxDE2bpYt8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client