Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: lgm3yzkjShbIOty4JA3GXjgtUBuyXvdTfnIBqZnbBUk=
Subject key identifier: 98:C4:BD:90:7A:45:EF:DA:8F:86:48:77:77:6E:81:67:19:09:45:A4
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 019A722634187C6D8B7785503556ECB18EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 0337
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: YStBP7XH5J+js9KyfJchNHtWupgO+JXW8IAIMIWo/G8=)
3: YCOxnrJZzRohN18jKfSDMAOgQUI.roa (hash: /PrVwAluwlwegI08mKBtFGWqwyRlaqAj4wNKvuzMcSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:34:18:7c:6d:8b:77:85:50:35:56:ec:b1:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=98c4bd907a45efda8f864877776e8167190945a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:f5:7e:80:03:57:42:15:a7:97:c5:d6:21:
b7:48:b9:b8:48:5d:67:1f:5b:39:af:63:b2:f8:77:
91:1a:97:2e:46:a0:82:48:3e:b0:f1:1a:bf:75:db:
a6:39:87:ae:85:8e:7c:e4:88:0e:f4:29:5f:f1:a2:
bb:fe:74:94:b2:d8:f3:fe:3c:8b:cc:ae:1f:70:5b:
2c:ee:a9:61:b8:8c:5f:14:1f:b3:7b:66:8b:6b:1d:
e7:3f:64:b6:66:4a:33:17:3a:17:0a:4d:26:b2:39:
77:ae:3a:31:76:c8:a7:e7:03:ad:c9:b6:39:82:2e:
30:c5:ec:46:0d:4c:9a:06:bc:c7:76:a7:b4:a9:e1:
e1:4c:16:58:cc:a3:04:41:67:eb:7b:de:68:43:29:
e8:4f:69:14:70:39:79:15:67:99:18:83:da:7e:8b:
99:ab:8a:03:b0:3e:48:5a:05:a0:71:37:e1:c1:aa:
db:f0:05:1d:05:17:d5:34:63:ca:d7:dc:02:e2:e6:
f7:55:93:19:c4:13:73:ca:8a:62:ac:29:d7:82:33:
ef:f6:ad:a4:4e:91:3a:4f:63:ed:88:59:9f:e3:a3:
72:f3:55:b6:7d:29:90:58:a8:10:3a:33:06:d5:b0:
b1:16:61:9c:b8:0f:df:91:a4:b1:59:8b:84:1c:02:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:BD:90:7A:45:EF:DA:8F:86:48:77:77:6E:81:67:19:09:45:A4
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:01:de:1e:b6:fe:0c:cf:a9:9e:ff:1f:1a:26:87:75:88:2e:
44:38:ee:18:aa:7f:2e:11:cc:77:15:a4:91:53:77:de:ee:ff:
a2:b3:84:92:33:b8:43:cd:0d:32:36:ce:f7:bb:af:87:9b:be:
5f:37:be:20:92:9c:fb:41:6b:8e:f4:6c:88:60:7c:df:a2:51:
cd:ca:3a:fb:32:a9:c3:f6:27:0f:17:75:fe:ff:15:fe:f7:71:
5a:03:59:55:02:ce:81:c0:b6:bc:eb:75:5a:91:9c:58:8a:67:
66:0f:65:2f:7f:e1:35:bd:62:cc:66:40:bf:4f:7f:dd:d4:9f:
24:5b:4e:f5:90:a5:39:88:ee:32:a3:b1:62:98:d6:2a:08:1f:
cb:60:f6:95:12:9b:44:8d:bd:8b:da:2a:ff:c2:6f:a8:8c:9a:
f1:e3:b1:dc:0c:36:e5:ca:c7:ec:75:dc:9b:f4:db:61:28:ee:
d1:79:10:20:2e:ac:28:5a:79:23:4a:07:da:e2:40:b8:98:40:
b4:8c:5a:03:cd:d6:53:36:9a:27:fe:ea:96:0f:e7:84:a9:98:
e5:e6:ee:09:be:24:b7:77:09:99:42:08:e6:00:45:f3:7a:04:
2d:22:7d:b5:39:00:20:2d:d4:4e:07:2c:88:17:9b:84:b4:22:
34:8d:20:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjQYfG2Ld4VQNVbssY7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi
MjFiMDMwHhcNMjUxMTExMDkwMTM3WhcNMjUxMTEyMDkwMTM3WjAzMTEwLwYDVQQD
Eyg5OGM0YmQ5MDdhNDVlZmRhOGY4NjQ4Nzc3NzZlODE2NzE5MDk0NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0z1foADV0IVp5fF1iG3SLm4SF1n
H1s5r2Oy+HeRGpcuRqCCSD6w8Rq/ddumOYeuhY585IgO9Clf8aK7/nSUstjz/jyL
zK4fcFss7qlhuIxfFB+ze2aLax3nP2S2ZkozFzoXCk0msjl3rjoxdsin5wOtybY5
gi4wxexGDUyaBrzHdqe0qeHhTBZYzKMEQWfre95oQynoT2kUcDl5FWeZGIPafouZ
q4oDsD5IWgWgcTfhwarb8AUdBRfVNGPK19wC4ub3VZMZxBNzyopirCnXgjPv9q2k
TpE6T2PtiFmf46Ny81W2fSmQWKgQOjMG1bCxFmGcuA/fkaSxWYuEHAJeDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjEvZB6Re/aj4ZId3dugWcZCUWkMB8GA1UdIwQY
MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt
ZDU0NzE4NTUxMmRlLzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl
LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgHeHrb+
DM+pnv8fGiaHdYguRDjuGKp/LhHMdxWkkVN33u7/orOEkjO4Q80NMjbO97uvh5u+
Xze+IJKc+0FrjvRsiGB836JRzco6+zKpw/YnDxd1/v8V/vdxWgNZVQLOgcC2vOt1
WpGcWIpnZg9lL3/hNb1izGZAv09/3dSfJFtO9ZClOYjuMqOxYpjWKggfy2D2lRKb
RI29i9oq/8JvqIya8eOx3Aw25crH7HXcm/TbYSju0XkQIC6sKFp5I0oH2uJAuJhA
tIxaA83WUzaaJ/7qlg/nhKmY5ebuCb4kt3cJmUII5gBF83oELSJ9tTkAIC3UTgcs
iBebhLQiNI0gpw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:36 2025 by rpki-client