Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier: t1Mqf81ci9T3U+8PfBTHgfL3His3b1Lmof9e7voGFfc=
Subject key identifier: 14:19:91:D9:D8:2F:98:81:38:0A:26:33:EA:94:17:D2:19:0C:8B:40
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 019A71B8BA5986B9C05CAA6E29A04CD0EB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number: 1035
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: MBHkL7Im57L6zgd4vcRppcb7ajt/Wb67YISxL4C9x6c=)
2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ba:59:86:b9:c0:5c:aa:6e:29:a0:4c:d0:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=141991d9d82f9881380a2633ea9417d2190c8b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:1c:4b:1a:e1:c1:d0:25:b0:80:e7:7d:84:
6d:aa:2a:e2:e9:c2:66:1b:0f:e6:29:f7:42:42:96:
85:82:67:42:1c:d6:c2:cd:fe:d9:41:c2:80:00:d2:
82:b8:87:4e:99:ab:fa:9a:38:c6:d4:09:a7:45:d5:
fd:e2:2e:c1:fc:fb:07:75:ca:30:08:cc:74:5e:8e:
49:51:24:f8:3b:00:c0:11:c2:12:49:13:4d:c8:f9:
63:0a:6e:67:e9:55:ec:ce:94:2b:e4:b8:b3:f4:6d:
4f:46:51:ab:ba:fc:01:6a:e5:fc:31:73:36:be:5a:
d7:a5:4e:7b:2b:fa:b2:d3:54:91:e6:11:82:03:bf:
bf:b0:26:72:c2:25:fe:87:18:71:95:10:8f:23:6d:
51:b9:f5:8d:06:36:33:87:e0:48:34:2d:1e:aa:e8:
81:2d:5d:4c:22:12:73:10:cf:79:51:37:fc:11:de:
9e:60:58:78:71:ba:20:08:d9:ef:16:5b:e9:1b:f7:
80:9b:0e:86:3d:a7:78:5a:13:3f:ca:0e:6b:c0:77:
76:a4:b6:54:6c:37:0f:5c:65:71:f9:ec:b2:59:f9:
6d:c4:7b:a2:9f:c1:3c:60:84:1a:05:e9:cf:37:0f:
01:e8:9c:8a:27:03:d2:39:90:47:00:c5:98:20:d9:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:91:D9:D8:2F:98:81:38:0A:26:33:EA:94:17:D2:19:0C:8B:40
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1e:df:1d:3c:1f:26:7c:81:86:17:cc:f6:1c:c5:db:25:5c:
d5:10:7d:b0:fe:47:15:df:57:33:a9:85:fd:2d:11:72:5a:ae:
3a:73:87:05:99:9d:46:62:87:1e:1e:87:7e:60:20:77:c3:2d:
6b:cb:c4:e1:f4:d7:0f:c5:db:d5:f0:76:8f:44:ec:b3:28:f9:
f3:02:a5:49:d7:34:12:ed:c1:84:b2:82:fd:8c:ee:61:28:c8:
32:9e:5e:6f:fb:02:c8:0b:3c:16:7f:c5:a0:40:8a:0f:e7:10:
c1:94:39:c7:08:02:06:0b:0a:0b:60:35:3c:58:c3:da:03:50:
34:8a:1d:56:14:64:7d:0c:c7:81:1b:d0:2d:52:5d:04:44:e4:
f6:8b:9c:e8:b3:38:d2:64:80:58:ec:84:c5:e6:12:e8:53:2c:
d2:12:2c:71:09:3f:07:e2:5d:a1:7b:81:bd:97:53:ed:00:ea:
bc:e6:1b:31:79:00:17:19:e1:59:50:ed:20:4e:aa:a2:83:89:
6b:6c:71:9a:99:be:eb:77:4b:2a:8a:1c:e6:fe:8f:4a:69:f3:
43:19:c3:2d:13:06:f4:5d:95:e2:47:b5:79:d7:36:71:1f:91:
04:5a:71:80:46:b0:15:a7:4c:ec:0b:12:62:d3:66:09:c9:c1:
57:07:7c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLpZhrnAXKpuKaBM0OuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTFhOWVjMGFhOTFiOTMyYWMzYzM1ODZjZmNhY2YwY2Ey
OWY1ODAwHhcNMjUxMTExMDcwMjAyWhcNMjUxMTEyMDcwMjAyWjAzMTEwLwYDVQQD
EygxNDE5OTFkOWQ4MmY5ODgxMzgwYTI2MzNlYTk0MTdkMjE5MGM4YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jkcSxrhwdAlsIDnfYRtqiri6cJm
Gw/mKfdCQpaFgmdCHNbCzf7ZQcKAANKCuIdOmav6mjjG1AmnRdX94i7B/PsHdcow
CMx0Xo5JUST4OwDAEcISSRNNyPljCm5n6VXszpQr5Liz9G1PRlGruvwBauX8MXM2
vlrXpU57K/qy01SR5hGCA7+/sCZywiX+hxhxlRCPI21RufWNBjYzh+BINC0equiB
LV1MIhJzEM95UTf8Ed6eYFh4cbogCNnvFlvpG/eAmw6GPad4WhM/yg5rwHd2pLZU
bDcPXGVx+eyyWfltxHuin8E8YIQaBenPNw8B6JyKJwPSOZBHAMWYINnedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQZkdnYL5iBOAomM+qUF9IZDItAMB8GA1UdIwQY
MBaAFDNRqewKqRuTKsPDWGz8rPDKKfWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgt
NjY4OWY4NzJmYzg3LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgtNjY4OWY4NzJmYzg3
LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAB7fHTwf
JnyBhhfM9hzF2yVc1RB9sP5HFd9XM6mF/S0RclquOnOHBZmdRmKHHh6HfmAgd8Mt
a8vE4fTXD8Xb1fB2j0Tssyj58wKlSdc0Eu3BhLKC/YzuYSjIMp5eb/sCyAs8Fn/F
oECKD+cQwZQ5xwgCBgsKC2A1PFjD2gNQNIodVhRkfQzHgRvQLVJdBETk9ouc6LM4
0mSAWOyExeYS6FMs0hIscQk/B+JdoXuBvZdT7QDqvOYbMXkAFxnhWVDtIE6qooOJ
a2xxmpm+63dLKooc5v6PSmnzQxnDLRMG9F2V4ke1edc2cR+RBFpxgEawFadM7AsS
YtNmCcnBVwd8nA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:19 2025 by rpki-client