Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: btQsI3aJD+S1reqaQPgkvB4QqM4KB6xREinsj3b34s8=
Subject key identifier: 99:AB:38:7A:D7:1B:BE:D4:0A:66:90:43:CD:BD:B7:F9:8D:C3:98:43
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019A590ADE5E0843D11BACFBEE3F7B787ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1712
Signing time: Thu 06 Nov 2025 12:01:15 +0000
Manifest this update: Thu 06 Nov 2025 12:01:15 +0000
Manifest next update: Fri 07 Nov 2025 12:01:15 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: CpU6sWcbrfxufHOR/le9idEe7GMg6U/3OdPwx0LTGwA=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:0a:de:5e:08:43:d1:1b:ac:fb:ee:3f:7b:78:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Nov 6 12:01:15 2025 GMT
Not After : Nov 7 12:01:15 2025 GMT
Subject: CN=99ab387ad71bbed40a669043cdbdb7f98dc39843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:3c:ce:44:c3:3d:f0:df:14:f9:9a:1b:4f:
bd:f7:7c:80:b2:df:f9:95:41:48:d6:7b:18:f9:ec:
89:a8:9c:56:d3:67:e7:80:79:f3:a4:38:98:90:40:
f8:ff:aa:35:6b:cc:67:51:e1:3c:17:ed:05:33:3c:
94:4c:e4:3c:21:70:60:90:1a:15:b6:7b:b1:28:d3:
c8:17:69:f6:2b:30:ec:4a:3a:e3:71:09:c8:fe:5f:
6a:31:a4:cb:81:70:0c:ff:9a:f3:58:17:c7:e5:6f:
97:ee:bb:fb:42:4e:6f:b2:c0:40:a7:2c:31:3b:1f:
bc:a8:c0:c8:31:dd:fa:9c:03:e8:14:e8:28:2f:8c:
51:13:5b:7a:55:cb:3f:f8:d6:a1:9e:21:59:dd:9e:
dc:69:75:a5:19:23:40:ea:a5:37:35:11:47:e3:37:
a4:12:d8:62:62:a4:fd:78:32:fc:32:93:73:da:35:
32:87:a6:ab:a6:22:7f:f9:22:46:0a:92:e6:6c:f2:
ee:74:22:ff:2f:54:29:e1:f8:60:08:9a:d0:48:9d:
b3:e4:fe:2b:05:28:bc:eb:f4:91:69:5c:ce:46:55:
4c:8a:37:53:b6:9b:4e:11:5e:99:ad:cf:66:80:12:
d6:fb:e4:f8:e0:de:72:70:93:aa:67:21:98:23:88:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:38:7A:D7:1B:BE:D4:0A:66:90:43:CD:BD:B7:F9:8D:C3:98:43
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9f:72:ce:69:46:50:50:17:5e:d9:1b:64:53:52:48:3e:8e:
a7:8a:57:4a:44:b9:5d:45:a5:69:17:16:4b:19:b8:a4:da:e4:
e2:ee:14:29:36:9c:43:5b:07:fb:d1:0a:7e:1a:b5:b1:86:10:
5d:27:1a:6f:af:6d:58:9b:c4:3a:3c:18:b8:f0:24:2e:29:99:
9f:ef:11:53:e8:70:7d:66:f8:9c:77:3c:21:f2:65:bd:eb:07:
c8:02:be:ef:0a:a1:b9:4f:5e:f5:78:ad:aa:e9:d8:61:23:40:
f7:6b:62:70:a0:e9:e2:bd:87:8b:10:1d:0b:ca:24:6a:f2:d8:
02:a9:2b:31:e8:9f:96:53:89:26:a8:a6:57:21:69:04:ff:a3:
83:05:12:2c:af:90:8c:ee:d9:6e:24:1e:0f:01:cd:99:25:64:
71:c6:46:c4:e1:fc:16:44:c1:4a:29:b9:27:af:ac:3c:85:64:
43:e0:61:48:7a:0d:c2:e0:c2:39:36:5e:fc:b2:d6:3b:de:df:
2d:7a:7f:0e:6d:8a:1e:81:9d:fd:08:9f:ce:9e:e4:75:bf:86:
a6:d5:09:d1:c8:6c:4d:de:ea:1a:a0:d7:bd:2c:60:d0:9e:21:
bc:08:ad:ab:c5:44:f2:12:fd:1a:ca:b2:1d:c6:1b:b1:bb:33:
c9:9b:25:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpZCt5eCEPRG6z77j97eHraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjNDYyNmVjZGUyNTMzNWFmZjA4OGIwNGM3MTM5NWFl
NmJjMjQwHhcNMjUxMTA2MTIwMTE1WhcNMjUxMTA3MTIwMTE1WjAzMTEwLwYDVQQD
Eyg5OWFiMzg3YWQ3MWJiZWQ0MGE2NjkwNDNjZGJkYjdmOThkYzM5ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu008zkTDPfDfFPmaG0+993yAst/5
lUFI1nsY+eyJqJxW02fngHnzpDiYkED4/6o1a8xnUeE8F+0FMzyUTOQ8IXBgkBoV
tnuxKNPIF2n2KzDsSjrjcQnI/l9qMaTLgXAM/5rzWBfH5W+X7rv7Qk5vssBApywx
Ox+8qMDIMd36nAPoFOgoL4xRE1t6Vcs/+NahniFZ3Z7caXWlGSNA6qU3NRFH4zek
EthiYqT9eDL8MpNz2jUyh6arpiJ/+SJGCpLmbPLudCL/L1Qp4fhgCJrQSJ2z5P4r
BSi86/SRaVzORlVMijdTtptOEV6Zrc9mgBLW++T44N5ycJOqZyGYI4iPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmrOHrXG77UCmaQQ829t/mNw5hDMB8GA1UdIwQY
MBaAFDIexGJuzeJTNa/wiLBMcTla5rwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0Nzkt
YjA4NGM3Mzg2MWI4LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0NzktYjA4NGM3Mzg2MWI4
LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ9yzmlG
UFAXXtkbZFNSSD6Op4pXSkS5XUWlaRcWSxm4pNrk4u4UKTacQ1sH+9EKfhq1sYYQ
XScab69tWJvEOjwYuPAkLimZn+8RU+hwfWb4nHc8IfJlvesHyAK+7wqhuU9e9Xit
qunYYSNA92ticKDp4r2HixAdC8okavLYAqkrMeifllOJJqimVyFpBP+jgwUSLK+Q
jO7ZbiQeDwHNmSVkccZGxOH8FkTBSim5J6+sPIVkQ+BhSHoNwuDCOTZe/LLWO97f
LXp/Dm2KHoGd/Qifzp7kdb+GptUJ0chsTd7qGqDXvSxg0J4hvAitq8VE8hL9Gsqy
HcYbsbszyZsl3g==
-----END CERTIFICATE-----
Generated at Thu Nov 6 15:11:49 2025 by rpki-client