Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: LNpvVCadx3CnQz4OYPKsiTZyhSyaE0xrc+cxx7MKKLk=
Subject key identifier: 25:3E:22:15:2C:05:A6:72:1E:B0:B9:98:DB:71:9B:CD:31:D2:E4:4C
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 019922FA3ACB04ABC01F1136A7E2CE7EF2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:48 +0000
Manifest this update: Sun 07 Sep 2025 07:00:48 +0000
Manifest next update: Mon 08 Sep 2025 07:00:48 +0000
Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: vAwEeU+HaB4PdEveUXJYyANslqt3NcAs54pMlPsIuMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3a:cb:04:ab:c0:1f:11:36:a7:e2:ce:7e:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Sep 7 07:00:48 2025 GMT
Not After : Sep 8 07:00:48 2025 GMT
Subject: CN=253e22152c05a6721eb0b998db719bcd31d2e44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:f0:62:c4:13:c4:9a:56:4d:ea:e2:5d:22:
58:ba:92:4d:c3:e3:3c:87:2d:09:94:8b:16:9a:5d:
f1:ff:10:5f:36:7e:d2:1d:b4:9e:42:30:23:5e:73:
f6:82:b1:f8:db:9a:1a:90:9d:71:da:ea:f2:7c:b3:
dc:07:4d:36:4a:38:25:70:f8:42:fa:d3:c4:9d:0f:
5e:20:89:70:ff:cd:0c:a1:0c:4d:95:5c:5b:ff:9c:
dc:ff:64:73:3b:45:5c:b3:b5:5f:06:fa:b0:58:6c:
f5:df:ea:cb:7b:fa:68:cc:b0:95:39:c3:00:f4:25:
79:86:1e:c9:1e:cc:40:9a:9f:73:2c:59:1b:90:c0:
37:2e:62:1b:9e:1a:e0:5c:a8:89:23:b5:bd:86:16:
48:df:40:18:7a:f2:59:7c:7a:3d:4d:a6:95:3c:2f:
c4:ec:fb:17:9a:59:5c:a4:b2:9b:66:be:ce:72:97:
f7:b2:62:4e:93:db:a4:7f:94:29:ed:c0:a0:67:f6:
6e:4a:16:c8:a4:fd:9c:cd:33:1f:8b:1d:3e:1e:0d:
d8:35:21:57:8c:50:66:a4:df:a8:44:4d:8e:da:24:
75:89:10:78:07:86:d4:d5:a8:5b:56:fe:5e:6e:7b:
92:52:a3:25:24:fe:b9:ab:87:ea:22:32:ea:3a:2c:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:22:15:2C:05:A6:72:1E:B0:B9:98:DB:71:9B:CD:31:D2:E4:4C
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:42:43:ca:65:24:7b:6f:81:de:2c:9f:49:f1:1e:99:a6:ca:
45:cb:74:a6:4a:8e:c6:b1:49:a1:24:70:da:40:3d:b5:75:3e:
f0:f6:50:49:e7:2b:60:19:a4:e1:b9:96:34:7d:6a:76:16:88:
fb:a6:48:53:dd:b8:fb:51:da:fa:fa:20:49:1a:a8:27:0f:52:
76:c7:50:2b:a4:fe:0e:83:f3:df:58:3c:3e:5c:31:a5:98:85:
92:7e:00:df:b6:d0:04:77:fc:91:3c:78:14:87:40:68:5a:35:
43:85:3f:b2:e1:48:aa:37:3c:85:ee:5b:b1:c0:81:40:93:d8:
42:fc:9f:37:eb:cc:6f:ac:a1:ee:48:7b:5f:5a:65:c3:47:7d:
6b:41:ec:4c:51:bf:4e:b7:60:b6:94:e2:09:4d:51:76:d1:35:
7a:c3:3f:48:39:a6:eb:b2:b7:87:e0:92:af:71:d7:06:0e:48:
27:65:93:8f:35:aa:47:21:44:75:3e:55:e8:74:9a:e0:16:f2:
fc:5c:c8:40:e2:8d:4f:04:70:0d:5e:a6:be:fc:e7:89:49:65:
76:ac:63:fc:6b:fb:3c:8d:4b:54:7f:82:40:81:13:e1:95:97:
13:78:f7:59:02:b9:73:0e:55:2c:4a:e9:e5:02:cb:bc:43:5f:
83:49:b4:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jrLBKvAHxE2p+LOfvLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmU2N2Y0YmY0ZGQyNmFlMzE1YjMxYTdiNDcyY2U0ZDVj
MWFlNmEwHhcNMjUwOTA3MDcwMDQ4WhcNMjUwOTA4MDcwMDQ4WjAzMTEwLwYDVQQD
EygyNTNlMjIxNTJjMDVhNjcyMWViMGI5OThkYjcxOWJjZDMxZDJlNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGrwYsQTxJpWTeriXSJYupJNw+M8
hy0JlIsWml3x/xBfNn7SHbSeQjAjXnP2grH425oakJ1x2uryfLPcB002SjglcPhC
+tPEnQ9eIIlw/80MoQxNlVxb/5zc/2RzO0Vcs7VfBvqwWGz13+rLe/pozLCVOcMA
9CV5hh7JHsxAmp9zLFkbkMA3LmIbnhrgXKiJI7W9hhZI30AYevJZfHo9TaaVPC/E
7PsXmllcpLKbZr7Ocpf3smJOk9ukf5Qp7cCgZ/ZuShbIpP2czTMfix0+Hg3YNSFX
jFBmpN+oRE2O2iR1iRB4B4bU1ahbVv5ebnuSUqMlJP65q4fqIjLqOiyLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU+IhUsBaZyHrC5mNtxm80x0uRMMB8GA1UdIwQY
MBaAFJn+Z/S/TdJq4xWzGntHLOTVwa5qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzIt
YTA1YmQyMjgzMzdjLzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzItYTA1YmQyMjgzMzdj
LzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUJDymUk
e2+B3iyfSfEemabKRct0pkqOxrFJoSRw2kA9tXU+8PZQSecrYBmk4bmWNH1qdhaI
+6ZIU924+1Ha+vogSRqoJw9SdsdQK6T+DoPz31g8PlwxpZiFkn4A37bQBHf8kTx4
FIdAaFo1Q4U/suFIqjc8he5bscCBQJPYQvyfN+vMb6yh7kh7X1plw0d9a0HsTFG/
TrdgtpTiCU1RdtE1esM/SDmm67K3h+CSr3HXBg5IJ2WTjzWqRyFEdT5V6HSa4Bby
/FzIQOKNTwRwDV6mvvzniUlldqxj/Gv7PI1LVH+CQIET4ZWXE3j3WQK5cw5VLErp
5QLLvENfg0m04w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:43 2025 by rpki-client