Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier: xX57sb/EfjxSYTUvNHdsBMOYw+OytfYzy/HYFeL+h2s=
Subject key identifier: B7:00:B5:C4:97:49:23:8E:36:3D:FD:58:AA:F5:1D:E4:5F:D9:01:F7
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 019A23D3357E8DEC5EC0111BC896FCE38403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number: 107A
Signing time: Mon 27 Oct 2025 04:00:35 +0000
Manifest this update: Mon 27 Oct 2025 04:00:35 +0000
Manifest next update: Tue 28 Oct 2025 04:00:35 +0000
Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: 3ELcJsOhMQmiyeVmXq+JzFyN6hnPnsqvTFg4SlbIr2M=)
3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:35:7e:8d:ec:5e:c0:11:1b:c8:96:fc:e3:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Oct 27 04:00:35 2025 GMT
Not After : Oct 28 04:00:35 2025 GMT
Subject: CN=b700b5c49749238e363dfd58aaf51de45fd901f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7d:3f:73:60:1d:12:2b:c6:db:15:78:85:e9:
ee:23:88:12:3d:b6:61:b0:06:3c:12:b9:57:78:dd:
00:ff:76:36:c3:67:4d:be:32:34:f8:9a:ed:2f:7b:
95:19:de:a4:be:70:2b:d3:05:0d:bd:6f:2b:e3:bc:
92:18:5e:1b:13:bb:95:d9:94:dd:98:a6:13:2c:14:
63:d6:a5:6e:38:c3:ea:40:4d:9d:c9:0c:a1:30:89:
9a:66:65:c4:f2:04:ff:c7:75:20:3e:7c:e1:4b:a4:
b5:de:ee:2b:51:f2:a4:af:a5:9f:d7:db:e0:ea:54:
b6:6d:80:7a:19:14:d9:97:80:8f:61:41:98:cc:93:
1b:41:a1:8d:ed:48:27:7a:4c:55:60:3c:2a:a4:97:
c5:c7:ad:9e:d6:f6:ef:ac:d3:2c:57:05:41:bc:c1:
74:3d:50:52:f3:5b:ee:f8:b0:1d:cc:8f:66:85:88:
9a:74:4c:73:92:72:0d:8d:7f:40:22:23:6e:d3:bf:
fc:ed:a4:26:45:eb:95:01:c5:84:3a:e6:6e:1e:d4:
3e:5b:14:de:2e:2d:33:da:84:ee:66:f5:3f:da:35:
e6:d1:d1:ff:75:c9:01:25:fe:d6:94:4d:a7:ed:43:
ee:64:3c:9c:5c:e1:b1:40:ca:4f:4d:70:b4:d3:48:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:B5:C4:97:49:23:8E:36:3D:FD:58:AA:F5:1D:E4:5F:D9:01:F7
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:4b:3b:fd:fe:97:8f:59:c8:99:94:4c:c0:e2:db:2a:ce:
47:91:5d:2f:e5:64:50:89:59:3d:da:e4:a5:a5:31:2a:15:43:
5b:ed:60:7c:fc:b2:75:c4:b2:56:d8:49:92:f0:69:5e:de:8b:
b6:6a:42:b8:c1:34:78:01:ab:a8:ca:1d:38:8a:bb:1d:93:8a:
e4:51:d2:0c:5f:0e:ef:9e:7e:a9:82:74:ae:b0:83:5e:e0:15:
f6:b3:62:ca:07:d9:84:67:35:8f:72:d3:6b:32:68:70:9b:7a:
05:fa:4a:20:68:10:a1:03:86:25:30:19:45:1d:b7:66:02:bf:
b8:74:b2:57:27:8b:23:ba:76:fb:9a:d6:e4:63:a0:30:9d:39:
b9:bb:2f:e4:71:bd:69:93:0b:ad:89:04:8f:83:2d:bf:9c:f6:
7a:8f:19:c4:5a:75:4f:2e:56:23:96:6c:3a:a2:10:4f:64:8a:
98:2e:d0:df:d0:83:ad:49:df:c1:61:8d:aa:6f:13:53:2a:67:
5c:a6:c7:52:22:54:0f:26:5e:eb:1a:a6:4d:70:6f:a1:af:08:
a3:cb:e1:13:80:12:0f:55:20:3a:28:ad:b5:b6:3e:2e:b8:fe:
1c:da:ac:56:7e:f3:4c:1a:c7:86:7b:18:06:78:a3:79:b6:75:
77:22:a4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj0zV+jexewBEbyJb844QDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4
MzhmMzMwHhcNMjUxMDI3MDQwMDM1WhcNMjUxMDI4MDQwMDM1WjAzMTEwLwYDVQQD
EyhiNzAwYjVjNDk3NDkyMzhlMzYzZGZkNThhYWY1MWRlNDVmZDkwMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA930/c2AdEivG2xV4henuI4gSPbZh
sAY8ErlXeN0A/3Y2w2dNvjI0+JrtL3uVGd6kvnAr0wUNvW8r47ySGF4bE7uV2ZTd
mKYTLBRj1qVuOMPqQE2dyQyhMImaZmXE8gT/x3UgPnzhS6S13u4rUfKkr6Wf19vg
6lS2bYB6GRTZl4CPYUGYzJMbQaGN7UgnekxVYDwqpJfFx62e1vbvrNMsVwVBvMF0
PVBS81vu+LAdzI9mhYiadExzknINjX9AIiNu07/87aQmReuVAcWEOuZuHtQ+WxTe
Li0z2oTuZvU/2jXm0dH/dckBJf7WlE2n7UPuZDycXOGxQMpPTXC000g8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcAtcSXSSOONj39WKr1HeRf2QH3MB8GA1UdIwQY
MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt
OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi
LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjstLO/3+
l49ZyJmUTMDi2yrOR5FdL+VkUIlZPdrkpaUxKhVDW+1gfPyydcSyVthJkvBpXt6L
tmpCuME0eAGrqModOIq7HZOK5FHSDF8O755+qYJ0rrCDXuAV9rNiygfZhGc1j3LT
azJocJt6BfpKIGgQoQOGJTAZRR23ZgK/uHSyVyeLI7p2+5rW5GOgMJ05ubsv5HG9
aZMLrYkEj4Mtv5z2eo8ZxFp1Ty5WI5ZsOqIQT2SKmC7Q39CDrUnfwWGNqm8TUypn
XKbHUiJUDyZe6xqmTXBvoa8Io8vhE4ASD1UgOiittbY+Lrj+HNqsVn7zTBrHhnsY
BnijebZ1dyKkjQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:24:40 2025 by rpki-client