Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: va2FG4brXqvQ+jJbgPGLE/rZ5izjklmTWnPk6ZHxYww=
Subject key identifier: 99:31:29:A5:11:23:11:0A:C1:09:69:FD:BD:84:53:43:78:6E:0D:7E
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 0199616CB5924ACFDE8F9BE4935EF188AA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 033E
Signing time: Fri 19 Sep 2025 10:02:18 +0000
Manifest this update: Fri 19 Sep 2025 10:02:18 +0000
Manifest next update: Sat 20 Sep 2025 10:02:18 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: hLCCo+4FvofUpzAzquM7lBUIJmrCZypcNLxXtFcnTBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6c:b5:92:4a:cf:de:8f:9b:e4:93:5e:f1:88:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Sep 19 10:02:18 2025 GMT
Not After : Sep 20 10:02:18 2025 GMT
Subject: CN=993129a51123110ac10969fdbd845343786e0d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:87:34:f5:1c:b4:cf:90:37:76:6c:f9:c0:
0b:cf:25:7b:9c:06:85:6e:e5:31:6d:67:ec:8e:d1:
19:c7:58:d0:11:f5:d1:1e:48:c5:80:3c:2c:b7:fe:
db:b3:45:7c:90:ab:d3:85:e8:36:58:e8:2b:31:d8:
0f:b9:1b:47:6b:d3:de:d1:7e:ea:54:da:4d:d6:00:
5f:98:dd:e4:b7:2b:f6:84:eb:ac:43:14:4d:68:0d:
f6:e2:e6:49:f5:31:f5:67:fe:9b:fc:a2:96:e3:cf:
e6:b7:06:28:5a:36:92:9e:f5:d2:1a:4a:42:a2:8b:
bb:39:5e:ab:d8:a9:84:5e:bd:a9:20:3e:96:c4:94:
20:94:20:82:70:58:45:d4:b5:e8:7c:90:a0:c6:a3:
1e:11:62:45:c2:1d:8d:d8:d3:91:e6:bf:cd:ca:0a:
8e:f4:35:4a:21:fd:5e:50:8f:3b:a1:30:4a:c3:2b:
6a:b1:01:e3:39:44:3b:39:34:1f:2f:07:64:2a:cc:
b2:49:a6:cd:79:44:d5:ad:11:24:ab:aa:b9:aa:13:
35:a8:e6:e3:c2:13:2a:fc:f6:46:12:c3:73:9e:8b:
b5:1a:b9:ef:72:ce:0b:2e:6b:f8:ef:21:df:ee:30:
5d:40:d3:f5:be:9d:bf:c4:9b:e5:df:6b:f0:c9:d1:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:29:A5:11:23:11:0A:C1:09:69:FD:BD:84:53:43:78:6E:0D:7E
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d2:b0:6e:d4:27:a0:46:ad:57:60:ec:31:77:39:72:9c:b7:
25:7f:bf:c4:fe:8f:93:9b:00:bd:e7:70:50:24:48:e9:aa:ec:
9d:0d:6d:3f:a5:82:42:b3:2f:ba:c0:87:3e:01:60:72:41:19:
ed:e7:84:d8:c9:47:5e:10:ee:cb:90:e8:3a:a4:70:00:01:36:
ff:5f:c5:00:98:a6:54:53:cc:98:33:02:27:1a:98:73:4c:8b:
79:9c:f2:47:95:cb:3b:98:ba:06:34:1d:f3:80:9b:54:8c:7d:
86:fa:52:8f:bd:e5:bb:70:dc:8e:98:dc:4d:a0:82:ad:d6:a4:
8f:49:f4:02:92:f0:3c:9b:8f:97:e4:43:f8:9f:a3:35:ae:0a:
9f:30:6a:69:8e:ac:f9:59:be:99:c1:20:3b:00:2d:41:b2:20:
ed:03:27:93:f3:3e:0f:c1:da:6c:4c:38:d8:a2:67:b1:60:a0:
7b:0d:dc:1a:f3:11:bd:fe:16:6c:d1:71:d2:7f:aa:fd:36:af:
8b:16:3c:76:88:64:bc:f9:01:11:ac:e3:e8:37:c2:d2:2e:b3:
67:34:43:10:b8:ee:ca:96:97:22:a7:1e:82:86:04:39:6e:59:
f8:bb:07:a2:5f:fe:e9:31:40:fd:29:59:c9:82:b6:9d:86:7b:
6b:9d:04:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlhbLWSSs/ej5vkk17xiKqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh
ZGQzNmYwHhcNMjUwOTE5MTAwMjE4WhcNMjUwOTIwMTAwMjE4WjAzMTEwLwYDVQQD
Eyg5OTMxMjlhNTExMjMxMTBhYzEwOTY5ZmRiZDg0NTM0Mzc4NmUwZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdOHNPUctM+QN3Zs+cALzyV7nAaF
buUxbWfsjtEZx1jQEfXRHkjFgDwst/7bs0V8kKvTheg2WOgrMdgPuRtHa9Pe0X7q
VNpN1gBfmN3ktyv2hOusQxRNaA324uZJ9TH1Z/6b/KKW48/mtwYoWjaSnvXSGkpC
oou7OV6r2KmEXr2pID6WxJQglCCCcFhF1LXofJCgxqMeEWJFwh2N2NOR5r/NygqO
9DVKIf1eUI87oTBKwytqsQHjOUQ7OTQfLwdkKsyySabNeUTVrREkq6q5qhM1qObj
whMq/PZGEsNznou1Grnvcs4LLmv47yHf7jBdQNP1vp2/xJvl32vwydHCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxKaURIxEKwQlp/b2EU0N4bg1+MB8GA1UdIwQY
MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt
YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi
LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtKwbtQn
oEatV2DsMXc5cpy3JX+/xP6Pk5sAvedwUCRI6arsnQ1tP6WCQrMvusCHPgFgckEZ
7eeE2MlHXhDuy5DoOqRwAAE2/1/FAJimVFPMmDMCJxqYc0yLeZzyR5XLO5i6BjQd
84CbVIx9hvpSj73lu3DcjpjcTaCCrdakj0n0ApLwPJuPl+RD+J+jNa4KnzBqaY6s
+Vm+mcEgOwAtQbIg7QMnk/M+D8HabEw42KJnsWCgew3cGvMRvf4WbNFx0n+q/Tav
ixY8dohkvPkBEazj6DfC0i6zZzRDELjuypaXIqcegoYEOW5Z+LsHol/+6TFA/SlZ
yYK2nYZ7a50E8Q==
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:09:06 2025 by rpki-client