
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File: mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier: YbVGlJomKRxdJbr/L98nr7841WexJm99z5Cg36Heplw=
Subject key identifier: 04:37:75:BE:00:E1:E0:15:C4:78:E2:8F:22:18:A1:6C:4A:36:DB:B7
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 019A725C6525E790FE17B4C6367F3A5C8453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number: 0771
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: 5XZJncXp7T3hCQRHkCBW2md8Uf4.roa (hash: 6z/vYzC9DEkIupIAEvIVTnWvgDDhq1Ndyu2N9VsrLA4=)
2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: N51QaZA7gV+bjCzXQ7uxyv77W6lQdzt4SaLX9+QldUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:65:25:e7:90:fe:17:b4:c6:36:7f:3a:5c:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=043775be00e1e015c478e28f2218a16c4a36dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:53:fc:40:5c:ff:45:81:83:c3:2e:db:fc:
b1:6d:46:34:6c:52:34:e5:09:8e:e0:47:94:2f:d8:
ff:5b:4f:54:6d:b1:1e:76:a4:9e:97:09:a1:83:83:
cf:99:97:35:c3:e7:b5:9d:98:fc:32:c9:97:09:de:
f0:e9:ec:45:1f:d0:9d:ad:76:64:b2:45:88:c8:9d:
df:39:e7:05:ec:58:5c:56:06:14:09:6e:7b:d4:30:
3e:08:7b:af:c5:8f:a4:ee:1d:5a:1e:fd:43:a3:21:
0d:c4:9a:15:50:04:f9:b8:12:6d:bd:cb:d8:55:94:
7c:85:ba:87:14:db:fe:cb:5f:4d:a4:5b:0e:64:0b:
b0:8e:ae:e3:e4:cb:89:a5:8f:40:ab:e1:ce:10:74:
fe:20:b8:ea:4a:98:bc:f3:2c:ee:83:39:a2:3f:f4:
0e:06:da:c7:6c:3f:cd:45:55:1b:ca:80:4c:97:48:
10:67:a0:e0:61:d4:6e:83:47:93:a3:d0:27:b7:c9:
ef:6e:c1:c0:99:41:ca:43:25:47:f4:1c:67:1a:7a:
81:d8:cb:36:93:20:16:9f:9f:22:99:1d:43:a9:a9:
b2:da:f8:31:7a:c7:94:71:e5:94:01:6b:02:fe:eb:
09:85:6d:33:22:4e:e3:2e:22:69:51:5e:5f:23:19:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:75:BE:00:E1:E0:15:C4:78:E2:8F:22:18:A1:6C:4A:36:DB:B7
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:7e:98:36:cc:d9:6c:a7:d5:2e:78:de:31:a5:4e:5d:4e:
13:b4:60:40:4b:45:72:8d:80:c9:86:0e:3f:2b:09:1e:f6:e5:
02:8e:35:86:8a:ae:bb:6a:c9:b7:29:bb:ff:95:a6:2e:18:2c:
30:52:95:92:33:75:d0:c9:1e:a8:09:ac:72:5e:61:3d:29:33:
e9:4b:d9:c7:53:56:ed:8b:e3:67:a1:4b:20:01:78:e9:82:85:
13:5d:40:b3:dc:3f:2c:d7:f7:33:22:c5:24:c0:79:b0:63:63:
13:89:a1:d1:57:30:5f:14:34:3e:eb:48:5b:24:0a:56:49:99:
f8:f2:b0:8f:b3:33:62:a5:fd:ce:f9:20:5f:40:eb:de:26:c5:
fe:b9:b5:a1:40:37:ff:05:f5:77:2b:79:0a:84:5a:03:1c:39:
36:58:be:96:fc:a9:c6:30:f3:a9:70:b2:02:e5:5f:e5:63:a6:
dc:98:ed:ca:dd:06:a3:c3:64:a6:75:35:41:86:97:7c:a9:ce:
19:02:a3:74:dd:5d:de:27:6d:e7:d1:8a:be:7b:e3:43:37:da:
18:0c:cf:43:f5:a4:d0:5e:79:3d:22:50:b2:68:e1:88:f8:b2:
3e:38:54:90:55:6a:f0:94:70:b3:74:5f:5d:27:bf:0b:6f:c5:
28:f7:c2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGUl55D+F7TGNn86XIRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMDU0ZmVjMjU1ZDBjZGM2YmEzYWJhOTZhYjI2MDM2NjMy
NzJkYjMwHhcNMjUxMTExMTAwMDQ5WhcNMjUxMTEyMTAwMDQ5WjAzMTEwLwYDVQQD
EygwNDM3NzViZTAwZTFlMDE1YzQ3OGUyOGYyMjE4YTE2YzRhMzZkYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyNT/EBc/0WBg8Mu2/yxbUY0bFI0
5QmO4EeUL9j/W09UbbEedqSelwmhg4PPmZc1w+e1nZj8MsmXCd7w6exFH9CdrXZk
skWIyJ3fOecF7FhcVgYUCW571DA+CHuvxY+k7h1aHv1DoyENxJoVUAT5uBJtvcvY
VZR8hbqHFNv+y19NpFsOZAuwjq7j5MuJpY9Aq+HOEHT+ILjqSpi88yzugzmiP/QO
BtrHbD/NRVUbyoBMl0gQZ6DgYdRug0eTo9Ant8nvbsHAmUHKQyVH9BxnGnqB2Ms2
kyAWn58imR1Dqamy2vgxeseUceWUAWsC/usJhW0zIk7jLiJpUV5fIxnJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ3db4A4eAVxHjijyIYoWxKNtu3MB8GA1UdIwQY
MBaAFJsFT+wlXQzca6OrqWqyYDZjJy2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzct
ZjgwYTQ4YWQwYTJjLzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzctZjgwYTQ4YWQwYTJj
LzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGB+mDbM
2Wyn1S543jGlTl1OE7RgQEtFco2AyYYOPysJHvblAo41hoquu2rJtym7/5WmLhgs
MFKVkjN10MkeqAmscl5hPSkz6UvZx1NW7YvjZ6FLIAF46YKFE11As9w/LNf3MyLF
JMB5sGNjE4mh0VcwXxQ0PutIWyQKVkmZ+PKwj7MzYqX9zvkgX0Dr3ibF/rm1oUA3
/wX1dyt5CoRaAxw5Nli+lvypxjDzqXCyAuVf5WOm3Jjtyt0Go8NkpnU1QYaXfKnO
GQKjdN1d3idt59GKvnvjQzfaGAzPQ/Wk0F55PSJQsmjhiPiyPjhUkFVq8JRws3Rf
XSe/C2/FKPfC3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client