Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: Qvy6y2U2buhEthYVKR+QrIviT/ev023Q4/m02iAJQP8=
Subject key identifier: 0A:36:16:19:2A:EE:64:DF:F2:BE:A9:57:A1:D6:09:E7:1E:7D:33:46
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 019A72260BE04F7B539E222069AE17798F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 0714
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: P+Z2g6leRkBumS5FHz/yp5pHCGmNp9mgBo8S4BNTLtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0b:e0:4f:7b:53:9e:22:20:69:ae:17:79:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=0a3616192aee64dff2bea957a1d609e71e7d3346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:37:43:dc:50:a8:b5:69:e6:9e:e6:e1:c1:
52:71:28:eb:06:8d:1a:0e:76:97:d9:d1:32:0a:83:
9a:19:fa:28:1e:34:61:a0:e1:9d:0f:60:c3:26:e9:
ee:73:b5:11:bd:5f:2d:f6:d2:47:12:ff:2d:5a:a2:
38:4f:4d:42:e5:04:7f:41:e9:85:61:32:b4:ab:e4:
22:88:7a:c5:65:b2:72:77:4e:92:c1:5e:29:69:f3:
89:d1:0a:9f:9f:6e:ec:cd:73:f1:f2:7e:f0:4a:1b:
98:d7:10:3f:db:bd:e3:eb:8a:a5:47:4c:18:5e:68:
ba:9b:6f:b9:87:e5:82:09:af:e1:32:d2:a0:50:5c:
ae:99:52:d0:d7:33:ae:eb:db:2f:a4:67:ae:d1:72:
83:13:27:df:02:f7:cd:3f:c4:19:4d:d1:01:82:c6:
74:9b:fc:5f:03:4d:32:06:5d:30:c9:00:d4:9a:33:
9c:03:19:fa:f9:9f:8e:03:bf:cd:b7:fc:09:81:19:
4b:e3:28:6f:3d:4b:92:e0:1c:7e:05:74:fc:98:e2:
f5:95:c8:75:13:f6:84:76:f2:28:aa:d4:b6:e2:35:
e6:0b:b9:3b:3d:ad:80:1f:a0:df:50:ad:c9:1e:b9:
b4:a9:49:dc:68:91:7d:51:73:ef:50:7e:dd:10:44:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:16:19:2A:EE:64:DF:F2:BE:A9:57:A1:D6:09:E7:1E:7D:33:46
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:e9:9a:a2:05:01:f4:b1:bf:c6:02:de:c3:59:15:8c:48:
0b:e1:e4:7b:80:81:e7:ac:38:fe:55:c2:ce:ba:74:a5:6c:32:
d1:e6:29:7a:a7:30:e0:36:a8:86:e6:dd:58:4b:db:ef:6c:25:
59:61:a1:1d:ba:c2:5a:39:6c:6f:b5:24:fc:c8:94:57:f6:48:
1d:ba:7b:5d:67:8b:40:49:8c:3f:14:1a:03:92:e4:3b:a0:7c:
ce:28:27:45:74:39:d4:c3:46:97:1a:6a:f2:7e:a5:77:f3:46:
63:2b:1f:96:9d:0f:7d:d7:ab:7d:73:c4:db:6b:59:91:52:a8:
7b:bb:b8:d4:d7:a2:53:ca:72:e0:36:f3:bc:c1:79:22:c0:8e:
3a:89:4f:6e:98:56:3d:88:e5:32:2c:35:0d:ee:02:ff:fc:f1:
cb:b3:43:59:7d:e9:ca:7c:cf:3d:a8:32:7d:17:2f:8c:65:46:
b6:76:bf:6c:0c:e6:ab:39:39:45:6b:9d:7f:e6:41:f6:b5:b6:
86:c6:2f:5e:a7:77:5e:d1:a3:74:bc:21:1e:8c:48:0e:36:2c:
2d:9c:3b:27:ed:cb:1e:39:fa:be:e8:c0:88:3e:9b:3d:c1:78:
7b:8a:8d:4f:ce:4d:92:13:df:b3:08:f0:d1:69:19:ff:5e:b1:
17:97:e8:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgvgT3tTniIgaa4XeY+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1
MDZiZWYwHhcNMjUxMTExMDkwMTI3WhcNMjUxMTEyMDkwMTI3WjAzMTEwLwYDVQQD
EygwYTM2MTYxOTJhZWU2NGRmZjJiZWE5NTdhMWQ2MDllNzFlN2QzMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Mg3Q9xQqLVp5p7m4cFScSjrBo0a
DnaX2dEyCoOaGfooHjRhoOGdD2DDJunuc7URvV8t9tJHEv8tWqI4T01C5QR/QemF
YTK0q+QiiHrFZbJyd06SwV4pafOJ0Qqfn27szXPx8n7wShuY1xA/273j64qlR0wY
Xmi6m2+5h+WCCa/hMtKgUFyumVLQ1zOu69svpGeu0XKDEyffAvfNP8QZTdEBgsZ0
m/xfA00yBl0wyQDUmjOcAxn6+Z+OA7/Nt/wJgRlL4yhvPUuS4Bx+BXT8mOL1lch1
E/aEdvIoqtS24jXmC7k7Pa2AH6DfUK3JHrm0qUncaJF9UXPvUH7dEETnKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo2Fhkq7mTf8r6pV6HWCecefTNGMB8GA1UdIwQY
MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt
NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh
LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxLpmqIF
AfSxv8YC3sNZFYxIC+Hke4CB56w4/lXCzrp0pWwy0eYpeqcw4DaohubdWEvb72wl
WWGhHbrCWjlsb7Uk/MiUV/ZIHbp7XWeLQEmMPxQaA5LkO6B8zignRXQ51MNGlxpq
8n6ld/NGYysflp0PfderfXPE22tZkVKoe7u41NeiU8py4DbzvMF5IsCOOolPbphW
PYjlMiw1De4C//zxy7NDWX3pynzPPagyfRcvjGVGtna/bAzmqzk5RWudf+ZB9rW2
hsYvXqd3XtGjdLwhHoxIDjYsLZw7J+3LHjn6vujAiD6bPcF4e4qNT85NkhPfswjw
0WkZ/16xF5foqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client