
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: WsRLD4MIJJgHpSP5hovIHIHPiepQTyDsyYNMBnchv1M=
Subject key identifier: B4:BB:B5:04:25:D2:EC:62:F4:98:8D:0B:B1:B8:9C:0F:8B:78:25:5E
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019922FAF835204F6565FE21DBCF7A62566E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: DA
Signing time: Sun 07 Sep 2025 07:01:36 +0000
Manifest this update: Sun 07 Sep 2025 07:01:36 +0000
Manifest next update: Mon 08 Sep 2025 07:01:36 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: z3/RYwiiZ8dO2v2WtxQHeaG0uDDeWIyIv6xjxI7AbpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f8:35:20:4f:65:65:fe:21:db:cf:7a:62:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Sep 7 07:01:36 2025 GMT
Not After : Sep 8 07:01:36 2025 GMT
Subject: CN=b4bbb50425d2ec62f4988d0bb1b89c0f8b78255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:48:ef:a4:14:b6:9d:f1:ac:b1:74:49:c4:
36:37:73:dc:5f:56:f2:ed:4d:54:a0:01:83:6e:ea:
0a:8e:2a:cf:09:f5:18:6c:75:d8:90:01:99:aa:01:
22:a1:70:cd:ed:15:02:ef:7b:04:71:b7:11:79:47:
28:80:1e:2f:7a:a6:b8:06:93:b4:d8:84:ec:bc:b1:
74:5b:e3:05:fa:2c:ce:8f:bf:7c:ed:75:84:16:1d:
ae:f9:35:29:9c:c1:03:c3:a3:90:0e:69:c7:ba:2a:
d2:49:37:3a:10:6a:9f:8a:76:f1:e3:71:b2:ce:99:
2e:f6:11:b5:50:e0:b4:41:24:8d:e4:be:9f:6e:1f:
d8:25:fb:62:89:0c:38:c8:ff:20:91:bd:30:9f:76:
2c:b4:e1:a5:7c:80:99:3e:1c:30:bf:fa:78:50:bd:
c4:79:ad:2b:bc:62:d8:bd:a0:a8:40:30:30:3f:26:
08:90:33:42:47:70:b8:a4:a3:2a:41:6b:80:ed:2b:
cf:63:12:d4:d8:d1:8e:d2:55:d2:d8:81:77:be:d8:
0b:e9:ed:87:87:7a:f2:c5:e4:57:8f:14:de:02:d1:
f7:6f:7d:8e:32:bc:dd:ac:df:ac:91:d9:04:41:e9:
d8:3a:24:05:52:96:d7:92:77:ca:a3:5c:dd:d1:06:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:B5:04:25:D2:EC:62:F4:98:8D:0B:B1:B8:9C:0F:8B:78:25:5E
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:63:8d:0c:5e:d7:27:4f:b3:29:2d:63:8f:78:77:df:a1:
bb:cc:07:ff:05:02:39:b1:64:96:50:06:55:cd:6b:b8:f2:31:
8a:64:a7:5c:fe:e0:4e:43:8e:8d:05:94:89:60:42:6f:17:aa:
ae:37:0d:4c:0c:6e:e2:98:37:cb:88:fd:10:3b:35:a4:73:fa:
48:0c:35:09:d7:c5:93:c6:83:92:d6:2b:35:28:89:da:4b:b6:
af:39:d8:c9:34:ba:33:08:6b:65:05:f3:22:a1:73:90:37:fc:
19:19:f2:a0:b2:77:dd:bb:98:b2:0f:1f:a4:0e:39:1d:20:c9:
95:86:fb:81:45:62:75:8b:da:a1:85:df:1e:24:2c:e0:e3:bd:
b1:d1:42:89:e7:e2:5e:38:d6:2b:dd:f6:af:da:58:77:1a:bf:
4a:6a:d8:5f:8c:12:66:28:b0:4f:08:2f:29:07:bf:b0:a8:1c:
5d:62:4d:7d:73:01:21:96:6b:7f:72:a5:90:28:f6:12:d7:67:
23:9b:03:b9:2d:0c:19:a5:b9:74:93:f7:e8:36:fa:f0:ab:58:
b3:cf:e8:35:2b:26:85:74:d2:69:06:96:57:d9:14:9f:d8:68:
1e:0d:b2:74:c8:f6:2c:d8:f2:08:a0:f8:c6:4b:d6:0b:d4:b9:
2d:78:ce:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vg1IE9lZf4h2896YlZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm
MjYwZmYwHhcNMjUwOTA3MDcwMTM2WhcNMjUwOTA4MDcwMTM2WjAzMTEwLwYDVQQD
EyhiNGJiYjUwNDI1ZDJlYzYyZjQ5ODhkMGJiMWI4OWMwZjhiNzgyNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9JI76QUtp3xrLF0ScQ2N3PcX1by
7U1UoAGDbuoKjirPCfUYbHXYkAGZqgEioXDN7RUC73sEcbcReUcogB4veqa4BpO0
2ITsvLF0W+MF+izOj7987XWEFh2u+TUpnMEDw6OQDmnHuirSSTc6EGqfinbx43Gy
zpku9hG1UOC0QSSN5L6fbh/YJftiiQw4yP8gkb0wn3YstOGlfICZPhwwv/p4UL3E
ea0rvGLYvaCoQDAwPyYIkDNCR3C4pKMqQWuA7SvPYxLU2NGO0lXS2IF3vtgL6e2H
h3ryxeRXjxTeAtH3b32OMrzdrN+skdkEQenYOiQFUpbXknfKo1zd0QZIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS7tQQl0uxi9JiNC7G4nA+LeCVeMB8GA1UdIwQY
MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut
ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj
LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7FjjQxe
1ydPsyktY494d9+hu8wH/wUCObFkllAGVc1ruPIximSnXP7gTkOOjQWUiWBCbxeq
rjcNTAxu4pg3y4j9EDs1pHP6SAw1CdfFk8aDktYrNSiJ2ku2rznYyTS6MwhrZQXz
IqFzkDf8GRnyoLJ33buYsg8fpA45HSDJlYb7gUVidYvaoYXfHiQs4OO9sdFCiefi
XjjWK932r9pYdxq/SmrYX4wSZiiwTwgvKQe/sKgcXWJNfXMBIZZrf3KlkCj2Etdn
I5sDuS0MGaW5dJP36Db68KtYs8/oNSsmhXTSaQaWV9kUn9hoHg2ydMj2LNjyCKD4
xkvWC9S5LXjOsw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:18 2025 by rpki-client