Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: Jr822FmamLbLGAiX83Oh6upuuZIjXcjvJS7xcc2oKZM=
Subject key identifier: 92:14:0E:0D:58:8C:AF:AB:7D:E6:6D:8F:B1:40:FC:F8:B4:F5:53:73
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 019A7149900D3F7BC2295283417269FDC9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 0696
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: HMPlvFvJdPXKwK0dopYYw2vbAt9d9GVvgefu8IX+Yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:90:0d:3f:7b:c2:29:52:83:41:72:69:fd:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=92140e0d588cafab7de66d8fb140fcf8b4f55373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:87:15:6c:b3:81:e4:41:7c:6e:8f:28:b6:
0b:a9:53:b5:ba:5a:7d:b9:e4:df:27:76:55:d0:8a:
69:d3:66:c8:7a:e4:10:96:53:64:43:18:9f:87:f2:
af:51:30:2d:ca:4a:ef:eb:0c:75:71:96:a0:d1:b1:
74:3f:ec:8f:d2:48:18:f3:71:88:0d:4d:0a:4b:1f:
da:2b:f8:64:63:16:a4:50:c8:ee:ac:4f:79:cc:f7:
5d:cb:67:f9:f0:55:02:44:4e:54:cd:79:18:90:c9:
e7:a9:8d:cb:44:18:66:b4:ca:c1:e9:95:c4:d0:02:
9d:73:5b:b4:14:e3:5a:b0:f4:7f:e3:42:c5:03:ac:
0d:09:84:2a:e5:ed:b4:47:ac:b5:5c:2f:17:82:3f:
95:08:d3:69:42:70:81:64:9e:db:bc:9c:35:14:43:
f7:27:ef:29:b6:f9:10:31:7f:09:0e:a9:88:76:e8:
dc:87:2d:6e:c3:03:04:45:d4:f0:e7:27:94:3c:7b:
b5:d0:7d:e9:75:e9:2d:51:ce:e3:06:64:c4:3e:f6:
4d:a6:d7:27:24:90:3d:90:db:01:23:c1:e9:d0:6a:
9e:d5:49:c9:a2:ff:21:92:77:99:75:e0:a4:52:df:
c7:b5:c0:79:89:ca:79:78:18:11:bf:c6:7c:4c:ff:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:0E:0D:58:8C:AF:AB:7D:E6:6D:8F:B1:40:FC:F8:B4:F5:53:73
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:06:18:31:be:af:a9:9f:db:4f:8b:91:d2:c8:23:73:67:
d9:c3:e4:20:e1:f2:29:d8:07:b7:41:3e:6c:28:05:43:cc:a3:
8f:bc:40:53:a6:74:c6:a0:cd:ac:6f:97:ab:72:15:3d:81:fb:
9b:da:f9:08:00:d2:ff:a2:de:b2:5f:e1:38:78:ef:29:d2:34:
42:70:7d:4f:0f:d5:94:53:d0:73:28:06:5b:3c:9c:4a:fa:64:
35:33:61:c1:3d:4e:f1:63:8e:33:69:83:f8:95:6d:c2:b6:cd:
0b:dc:e1:62:e3:89:5e:7b:1d:3a:b2:fb:55:79:34:4f:0a:7f:
46:e7:08:9d:bf:4b:13:b2:83:20:d8:6e:46:2f:2e:a0:47:35:
a8:e5:63:f7:ec:68:0b:64:a2:74:18:20:b0:f6:6e:7b:e8:4e:
1b:2d:2a:b3:2d:69:45:4e:29:99:3f:c6:83:a5:42:e4:89:1e:
0b:fd:ce:6e:83:e1:9c:d9:b3:0f:ae:49:dc:40:e6:47:94:bc:
56:60:01:64:fe:38:7e:72:99:89:c7:a8:3b:da:f3:c8:08:63:
c7:b2:16:d7:4d:f4:ed:2d:0a:97:15:6d:c4:82:a9:40:a0:05:
e2:9d:37:86:52:39:f0:a1:f8:de:8e:ff:18:1a:18:bb:eb:23:
ab:d1:2e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSZANP3vCKVKDQXJp/cnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw
YzE4ZGYwHhcNMjUxMTExMDUwMDM3WhcNMjUxMTEyMDUwMDM3WjAzMTEwLwYDVQQD
Eyg5MjE0MGUwZDU4OGNhZmFiN2RlNjZkOGZiMTQwZmNmOGI0ZjU1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXeHFWyzgeRBfG6PKLYLqVO1ulp9
ueTfJ3ZV0Ipp02bIeuQQllNkQxifh/KvUTAtykrv6wx1cZag0bF0P+yP0kgY83GI
DU0KSx/aK/hkYxakUMjurE95zPddy2f58FUCRE5UzXkYkMnnqY3LRBhmtMrB6ZXE
0AKdc1u0FONasPR/40LFA6wNCYQq5e20R6y1XC8Xgj+VCNNpQnCBZJ7bvJw1FEP3
J+8ptvkQMX8JDqmIdujchy1uwwMERdTw5yeUPHu10H3pdektUc7jBmTEPvZNptcn
JJA9kNsBI8Hp0Gqe1UnJov8hkneZdeCkUt/HtcB5icp5eBgRv8Z8TP9mswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIUDg1YjK+rfeZtj7FA/Pi09VNzMB8GA1UdIwQY
MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt
MWRhNGI5Mjc5OWY2LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2
LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzYGGDG+
r6mf20+LkdLII3Nn2cPkIOHyKdgHt0E+bCgFQ8yjj7xAU6Z0xqDNrG+Xq3IVPYH7
m9r5CADS/6Lesl/hOHjvKdI0QnB9Tw/VlFPQcygGWzycSvpkNTNhwT1O8WOOM2mD
+JVtwrbNC9zhYuOJXnsdOrL7VXk0Twp/RucInb9LE7KDINhuRi8uoEc1qOVj9+xo
C2SidBggsPZue+hOGy0qsy1pRU4pmT/Gg6VC5IkeC/3OboPhnNmzD65J3EDmR5S8
VmABZP44fnKZiceoO9rzyAhjx7IW10307S0KlxVtxIKpQKAF4p03hlI58KH43o7/
GBoYu+sjq9EuWg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:13 2025 by rpki-client