Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier: WMbPJDjjdm1a75xJjCFyi3UUmIX9QgvMqauS66vYBJQ=
Subject key identifier: 98:EF:D2:F2:2E:BE:DA:6A:56:93:3B:C4:26:67:D7:80:4D:46:B2:42
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 019A39B5E53E947077BD391F41F6D3FE8A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number: 134B
Signing time: Fri 31 Oct 2025 10:00:13 +0000
Manifest this update: Fri 31 Oct 2025 10:00:13 +0000
Manifest next update: Sat 01 Nov 2025 10:00:13 +0000
Files and hashes: 1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=)
2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=)
3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=)
4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: 5/8h11l+YMGMFfyowA/jDIHPyO3SIE8XWH93DacQW/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b5:e5:3e:94:70:77:bd:39:1f:41:f6:d3:fe:8a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Oct 31 10:00:13 2025 GMT
Not After : Nov 1 10:00:13 2025 GMT
Subject: CN=98efd2f22ebeda6a56933bc42667d7804d46b242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:07:c9:82:5b:ef:19:53:38:15:8d:f9:2f:
7f:db:59:f4:83:47:1c:8a:f5:87:2d:46:36:94:10:
55:d1:a5:72:3c:54:70:51:af:59:51:d2:06:31:3a:
21:b2:87:f6:d7:9a:6d:3d:3d:16:1e:10:c0:53:bf:
cf:c3:14:c4:8a:ae:db:7e:88:d6:7c:3a:54:00:ec:
c2:c9:ea:62:eb:c6:fa:48:9c:05:02:10:35:b2:38:
08:ea:b8:ea:63:71:b6:73:8b:5d:21:ff:00:b8:65:
2a:33:2f:85:a2:dc:2e:91:f8:3d:da:f3:cd:13:02:
3e:00:e4:bf:73:23:84:82:b8:9f:c8:84:51:24:59:
8c:f8:3c:9d:ff:c2:34:f8:91:89:93:b8:b7:e2:b2:
70:48:39:77:29:76:e7:d3:61:92:d8:90:1c:8c:c3:
ff:c8:aa:79:7a:b6:4d:b8:9d:1d:a7:9d:97:e1:91:
01:a8:0f:41:a1:06:59:53:a0:2c:9f:8d:f9:2f:39:
15:be:45:6d:cc:bf:d8:65:e7:6f:46:c8:a9:90:dd:
6d:39:fc:1f:35:3a:72:0f:f3:f5:1f:56:95:95:eb:
ec:2f:ad:73:54:00:7b:f1:aa:92:1e:dc:74:62:2d:
b2:b1:b4:77:5e:d7:e4:ca:17:6d:c3:86:c2:4e:1f:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:D2:F2:2E:BE:DA:6A:56:93:3B:C4:26:67:D7:80:4D:46:B2:42
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:69:fa:92:70:66:4e:67:f5:9f:4a:7a:17:24:76:85:37:
9d:4c:b3:b4:0c:84:c5:a0:37:1b:51:34:f2:23:75:4f:39:af:
74:ed:20:5a:5b:01:6e:0c:d5:26:ea:d0:36:ae:18:1d:e2:3d:
91:e3:39:ae:71:7e:e8:9f:74:d7:40:bd:3a:34:b8:53:a4:23:
f5:2e:05:e1:43:fe:90:0f:e9:19:b9:5c:22:9a:e2:9a:e7:1d:
5b:c9:64:b7:68:f5:e6:5d:3e:c7:54:34:76:40:94:e6:f1:0d:
d7:b0:d4:97:46:64:ac:82:d4:a8:85:b9:90:55:27:d1:73:87:
a5:c3:db:02:34:53:2e:b5:17:a7:9e:64:79:bd:4a:d1:d6:dd:
e3:f5:fb:b4:ce:c8:df:93:eb:11:88:3a:4e:85:56:1d:ad:39:
a2:58:4d:37:6d:7b:75:db:41:40:ef:d5:11:28:f2:14:bf:70:
51:f9:88:97:96:7a:2f:08:68:10:36:96:3a:03:c3:10:1b:81:
c2:0f:53:8b:ad:ae:e0:c8:a3:18:aa:10:f7:d6:a4:c0:d3:6d:
ee:0a:78:19:f6:99:df:70:0b:3e:cf:47:6d:ed:4c:35:6e:32:
f7:5e:f8:10:93:e3:6c:49:53:ff:dc:81:12:ca:49:e8:c2:49:
02:43:8f:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo5teU+lHB3vTkfQfbT/oodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3
ZmYzNjQwHhcNMjUxMDMxMTAwMDEzWhcNMjUxMTAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg5OGVmZDJmMjJlYmVkYTZhNTY5MzNiYzQyNjY3ZDc4MDRkNDZiMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IIHyYJb7xlTOBWN+S9/21n0g0cc
ivWHLUY2lBBV0aVyPFRwUa9ZUdIGMTohsof215ptPT0WHhDAU7/PwxTEiq7bfojW
fDpUAOzCyepi68b6SJwFAhA1sjgI6rjqY3G2c4tdIf8AuGUqMy+Fotwukfg92vPN
EwI+AOS/cyOEgrifyIRRJFmM+Dyd/8I0+JGJk7i34rJwSDl3KXbn02GS2JAcjMP/
yKp5erZNuJ0dp52X4ZEBqA9BoQZZU6Asn435LzkVvkVtzL/YZedvRsipkN1tOfwf
NTpyD/P1H1aVlevsL61zVAB78aqSHtx0Yi2ysbR3Xtfkyhdtw4bCTh+3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjv0vIuvtpqVpM7xCZn14BNRrJCMB8GA1UdIwQY
MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt
YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi
LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrJp+pJw
Zk5n9Z9KehckdoU3nUyztAyExaA3G1E08iN1TzmvdO0gWlsBbgzVJurQNq4YHeI9
keM5rnF+6J9010C9OjS4U6Qj9S4F4UP+kA/pGblcIprimucdW8lkt2j15l0+x1Q0
dkCU5vEN17DUl0ZkrILUqIW5kFUn0XOHpcPbAjRTLrUXp55keb1K0dbd4/X7tM7I
35PrEYg6ToVWHa05olhNN217ddtBQO/VESjyFL9wUfmIl5Z6LwhoEDaWOgPDEBuB
wg9Ti62u4MijGKoQ99akwNNt7gp4GfaZ33ALPs9Hbe1MNW4y9174EJPjbElT/9yB
EspJ6MJJAkOPyA==
-----END CERTIFICATE-----
Generated at Fri Oct 31 19:21:37 2025 by rpki-client