Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: Aeu70b0zemmwHz+vsRNNsy7N7HXygCVs6U8mzYjWxsc=
Subject key identifier: DE:A9:A1:A9:AE:67:A7:A2:99:68:0B:2A:50:45:68:97:A8:7C:A7:D6
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019A3534D02860EF7858919C7439D736E62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 176D
Signing time: Thu 30 Oct 2025 13:00:44 +0000
Manifest this update: Thu 30 Oct 2025 13:00:44 +0000
Manifest next update: Fri 31 Oct 2025 13:00:44 +0000
Files and hashes: 1: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=)
2: 8SwD2syCQhmofhgov7byX9Itmmw.roa (hash: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=)
3: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
4: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
5: JHPfdmZ9_Y7nWvY0D-d0lDb96Vg.roa (hash: gf2XByKnGE8jJhVC4HR5cPA59ppt1RRzDD6FJs3YMQ0=)
6: L11MfC00IadNU5XgawmN2wnKwdo.roa (hash: jZ99VqRuYxCWhKR+R/9uDouzzoMMKEkhyiSFy81qZNA=)
7: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 0tLolX+4BxFdPR4m0Eeg/5AmAE3n9vVuuPD0ZmyCZJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:d0:28:60:ef:78:58:91:9c:74:39:d7:36:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Oct 30 13:00:44 2025 GMT
Not After : Oct 31 13:00:44 2025 GMT
Subject: CN=dea9a1a9ae67a7a299680b2a50456897a87ca7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:7d:e6:fd:b2:82:33:28:c8:e2:c6:38:98:
c9:2b:98:19:fa:c7:c6:dc:46:01:4e:8a:d5:70:80:
c0:14:1b:43:7e:e2:f9:50:95:81:f5:2f:b2:5a:52:
88:cc:f0:64:99:20:cb:87:5f:09:04:cd:09:bc:21:
12:c9:79:d9:f1:6f:84:c8:af:0a:37:68:2b:f5:f0:
0c:4e:9b:e0:37:b4:9a:14:4a:f2:7b:d1:18:07:5d:
30:89:f0:6b:19:fc:07:0f:d2:ea:61:f1:66:3a:5a:
8a:7c:40:fa:ae:25:99:af:3a:e2:41:5b:04:4e:df:
05:d2:92:28:e4:a1:6c:84:fa:6f:ad:6c:7f:58:2b:
b8:93:ad:1f:61:6c:f5:d3:07:c9:da:5e:e1:a3:e4:
69:90:cb:9a:b4:98:96:04:d8:9b:fe:ce:35:18:15:
ad:4f:df:98:83:cd:c2:a2:12:17:25:d2:24:a5:ff:
0f:14:c4:d2:a4:f3:90:fb:81:aa:d5:f6:24:bb:6c:
6b:77:02:92:4c:08:8a:aa:31:41:44:d3:4e:4c:f8:
c4:7c:83:ee:a6:1b:6a:82:d9:ea:2c:71:d5:f6:d4:
b4:5d:8e:58:ca:67:00:46:d9:6b:0c:0c:f8:19:69:
0c:e9:94:4d:3e:66:63:a7:28:2e:a4:1a:5d:52:a9:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:A1:A9:AE:67:A7:A2:99:68:0B:2A:50:45:68:97:A8:7C:A7:D6
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:f7:0a:c9:65:09:fc:6e:51:7b:b8:03:95:72:d3:c9:cd:
48:de:17:70:3d:80:f3:da:72:28:f1:64:2e:27:2e:6f:aa:77:
82:1e:8d:f8:ed:0c:25:bc:19:98:77:e4:d8:6e:6f:9c:3f:6c:
0b:13:68:89:2e:de:24:f7:11:16:a3:e4:eb:63:62:8e:4f:92:
11:1d:8f:ca:ba:78:b2:46:ed:b1:13:f7:7a:1c:b1:a4:ab:53:
1f:55:e3:f9:f4:b6:6f:e0:5b:74:d6:9a:9a:50:47:28:83:18:
5b:09:85:76:5a:2a:34:cf:13:a2:8a:21:8b:e3:cb:cc:3c:c4:
0c:38:e4:d1:58:fc:1f:47:97:8c:8f:ea:ce:b0:6e:04:eb:92:
79:fc:1e:7e:2c:1e:11:7c:85:bb:a1:64:12:02:a9:d7:ff:cf:
82:2a:f9:ad:62:26:11:a8:c5:16:85:b3:23:e7:0a:3a:ef:4e:
15:6e:ca:db:1f:53:21:e0:f4:76:02:28:01:7c:2a:84:75:46:
8d:fa:ad:e9:3a:2a:e4:09:b9:83:e7:4a:3c:8c:44:31:0a:73:
15:ff:49:cb:48:47:64:45:40:21:76:a3:20:2a:6b:0c:e1:de:
c6:d9:66:2a:81:71:90:42:06:0a:18:ab:ea:e3:2e:2a:c1:23:
7b:00:53:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo1NNAoYO94WJGcdDnXNuYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjUxMDMwMTMwMDQ0WhcNMjUxMDMxMTMwMDQ0WjAzMTEwLwYDVQQD
EyhkZWE5YTFhOWFlNjdhN2EyOTk2ODBiMmE1MDQ1Njg5N2E4N2NhN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9x95v2ygjMoyOLGOJjJK5gZ+sfG
3EYBTorVcIDAFBtDfuL5UJWB9S+yWlKIzPBkmSDLh18JBM0JvCESyXnZ8W+EyK8K
N2gr9fAMTpvgN7SaFErye9EYB10wifBrGfwHD9LqYfFmOlqKfED6riWZrzriQVsE
Tt8F0pIo5KFshPpvrWx/WCu4k60fYWz10wfJ2l7ho+RpkMuatJiWBNib/s41GBWt
T9+Yg83CohIXJdIkpf8PFMTSpPOQ+4Gq1fYku2xrdwKSTAiKqjFBRNNOTPjEfIPu
phtqgtnqLHHV9tS0XY5YymcARtlrDAz4GWkM6ZRNPmZjpygupBpdUqlIwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6poamuZ6eimWgLKlBFaJeofKfWMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwr3Csll
CfxuUXu4A5Vy08nNSN4XcD2A89pyKPFkLicub6p3gh6N+O0MJbwZmHfk2G5vnD9s
CxNoiS7eJPcRFqPk62Nijk+SER2Pyrp4skbtsRP3ehyxpKtTH1Xj+fS2b+BbdNaa
mlBHKIMYWwmFdloqNM8Tooohi+PLzDzEDDjk0Vj8H0eXjI/qzrBuBOuSefwefiwe
EXyFu6FkEgKp1//Pgir5rWImEajFFoWzI+cKOu9OFW7K2x9TIeD0dgIoAXwqhHVG
jfqt6Toq5Am5g+dKPIxEMQpzFf9Jy0hHZEVAIXajICprDOHextlmKoFxkEIGChir
6uMuKsEjewBTAg==
-----END CERTIFICATE-----
Generated at Thu Oct 30 16:18:46 2025 by rpki-client