Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: iGFoMVIlQJkiiEPCfBJtm2yv53C8DNqSC6M2yLL3Xpk=
Subject key identifier: D6:84:47:8E:78:C8:79:F2:15:7E:9E:41:1B:56:3D:F2:C4:8B:A9:96
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019A71B7C414BF446A372C154494F1A59BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1348
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: v0Da3TlihiAmJn34IdOgvaxJPDbsQ8RZKOGB4yTK8rQ=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c4:14:bf:44:6a:37:2c:15:44:94:f1:a5:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=d684478e78c879f2157e9e411b563df2c48ba996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:19:b1:76:50:56:4f:a7:3c:85:f2:a2:cd:
65:85:2b:05:d1:27:00:00:b7:49:b9:20:c6:d7:15:
52:76:ff:36:8f:38:b2:b3:62:61:77:db:68:2d:af:
88:b6:83:65:ea:ff:4e:63:81:d6:92:7b:88:1a:bb:
d7:ce:09:82:42:0e:a5:d5:84:71:ee:4b:38:69:ec:
5c:69:dc:1d:b3:40:2c:bd:a1:cc:02:bb:88:0f:6c:
ab:2f:a5:b3:4b:f2:7d:cb:20:80:c2:6c:f7:37:bc:
ec:e5:b1:d1:73:ac:5e:c5:df:a8:48:af:74:cc:a1:
b4:83:26:e5:b7:06:72:f0:f3:b2:07:8d:e0:2b:3e:
44:c0:2f:d5:79:ae:8c:4a:17:40:16:90:e5:0b:f2:
85:5a:0f:ff:a7:48:07:92:3c:2a:5a:43:bc:8f:82:
04:83:65:23:78:4b:10:78:c2:33:50:95:f2:25:17:
03:54:f3:9e:21:c1:ef:9d:bc:de:ca:60:d5:4d:99:
8e:2d:a7:ad:2a:52:72:cf:75:02:3d:a1:e1:27:65:
cb:fd:4b:b2:16:32:5e:50:6b:af:d5:0a:6e:07:8b:
1e:8b:3d:24:66:28:ee:ab:01:5b:bd:c3:78:53:96:
a8:17:af:25:53:88:ed:ad:cf:a7:61:3b:b3:e4:af:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:47:8E:78:C8:79:F2:15:7E:9E:41:1B:56:3D:F2:C4:8B:A9:96
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:82:2b:19:c5:12:a3:ab:77:7f:45:8c:dd:a0:df:f4:34:
c2:4e:60:ec:c1:29:27:5e:c6:66:59:33:39:94:b9:4a:5c:fb:
f5:44:c3:e0:a3:97:08:57:ed:3a:2c:1a:8f:0c:f8:0a:87:e9:
ea:fb:fd:60:19:79:76:c7:b9:35:00:e6:61:6d:f5:9e:89:74:
69:7d:f4:c8:99:5a:79:11:b6:09:e5:e7:69:39:5c:e7:ff:8c:
67:a5:a5:4a:8f:a1:0f:d2:11:6e:61:5b:3d:5e:f0:af:ba:44:
ba:8f:62:10:6b:c4:e0:9c:e6:7a:22:dc:49:48:d9:79:50:b5:
40:42:a1:7b:5f:5a:c4:ac:a6:73:0e:85:92:1b:4c:c0:bc:09:
fd:e2:1f:b1:0c:e9:69:dc:a7:36:ed:92:41:0c:72:24:14:d0:
99:8e:22:e8:5b:1c:81:e7:31:db:bc:05:90:e4:9a:38:db:0e:
a2:b1:1d:8a:d1:52:17:0d:85:cf:f0:0e:76:9a:fa:4a:5f:a7:
56:ff:8e:ea:88:30:60:ab:54:35:aa:b2:d2:b3:f4:34:72:47:
81:1a:09:f3:92:1d:76:7b:da:8d:ff:3e:78:68:18:b1:57:5e:
94:77:7c:2b:8f:31:1c:5a:54:12:6e:44:83:1d:09:86:e0:6e:
30:b7:b3:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8QUv0RqNywVRJTxpZu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
EyhkNjg0NDc4ZTc4Yzg3OWYyMTU3ZTllNDExYjU2M2RmMmM0OGJhOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtocZsXZQVk+nPIXyos1lhSsF0ScA
ALdJuSDG1xVSdv82jziys2Jhd9toLa+ItoNl6v9OY4HWknuIGrvXzgmCQg6l1YRx
7ks4aexcadwds0AsvaHMAruID2yrL6WzS/J9yyCAwmz3N7zs5bHRc6xexd+oSK90
zKG0gybltwZy8POyB43gKz5EwC/Vea6MShdAFpDlC/KFWg//p0gHkjwqWkO8j4IE
g2UjeEsQeMIzUJXyJRcDVPOeIcHvnbzeymDVTZmOLaetKlJyz3UCPaHhJ2XL/Uuy
FjJeUGuv1QpuB4seiz0kZijuqwFbvcN4U5aoF68lU4jtrc+nYTuz5K8P0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaER454yHnyFX6eQRtWPfLEi6mWMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOyCKxnF
EqOrd39FjN2g3/Q0wk5g7MEpJ17GZlkzOZS5Slz79UTD4KOXCFftOiwajwz4Cofp
6vv9YBl5dse5NQDmYW31nol0aX30yJlaeRG2CeXnaTlc5/+MZ6WlSo+hD9IRbmFb
PV7wr7pEuo9iEGvE4JzmeiLcSUjZeVC1QEKhe19axKymcw6FkhtMwLwJ/eIfsQzp
adynNu2SQQxyJBTQmY4i6Fscgecx27wFkOSaONsOorEditFSFw2Fz/AOdpr6Sl+n
Vv+O6ogwYKtUNaqy0rP0NHJHgRoJ85Iddnvajf8+eGgYsVdelHd8K48xHFpUEm5E
gx0JhuBuMLezaA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:02 2025 by rpki-client