Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier: FUxskdFAWI6pHLcxMEVTiZ8jfYFzX1O4Ll8ydQy4TwE=
Subject key identifier: 89:05:D1:09:8B:AE:3F:18:27:4C:89:3B:3E:5A:B0:AB:C5:A0:2E:C4
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 019A71B90BB7ADD7AA3C93C5CFEF207C0AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number: 0E7B
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: bbsmS9TK+fyD2DZjQKpn9Jsx9zlFMXluZW8mIJLXCtU=)
2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0b:b7:ad:d7:aa:3c:93:c5:cf:ef:20:7c:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=8905d1098bae3f18274c893b3e5ab0abc5a02ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:82:0e:e5:6c:6a:24:e7:1d:dc:1a:0e:92:
30:cf:8e:bb:d5:a3:6f:4c:9c:55:45:93:a0:45:bd:
c4:6b:53:b2:bf:b7:72:fa:ef:a8:e4:3c:85:24:ed:
48:ac:1b:a0:8f:89:f3:ed:98:c3:b5:81:26:40:7f:
a1:dc:8a:7b:22:86:ed:2c:39:c5:3b:27:25:df:52:
ad:db:e1:23:fe:e4:44:ce:af:4b:96:f5:43:02:5e:
27:97:14:b4:ce:a4:1a:9a:83:29:9f:2d:53:f3:4c:
ec:d5:10:c1:40:6b:78:28:58:0f:45:a5:4b:c0:1a:
2a:e8:d6:3c:22:58:8b:5a:3f:ad:96:85:75:4e:2e:
e2:f5:c6:95:3d:b4:09:da:6f:f5:bb:5e:3b:aa:66:
38:aa:5e:d5:d6:fa:8f:46:3d:8c:a7:a1:24:46:49:
2c:70:04:31:08:83:cc:e2:ad:4d:76:43:a6:4b:1e:
f2:4d:fd:4e:56:1e:13:36:f0:16:f5:f0:f4:15:1a:
1f:c0:59:c9:dc:07:e3:09:f9:02:08:cc:1f:7d:8a:
b3:70:b8:fa:9b:ad:e5:b0:cb:82:4a:e1:d8:f4:f8:
6a:0a:8f:3e:81:59:d8:87:a5:ee:cf:85:61:9d:e9:
d2:4d:7f:42:3b:76:c7:5f:1b:fe:c7:8e:cf:01:da:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:D1:09:8B:AE:3F:18:27:4C:89:3B:3E:5A:B0:AB:C5:A0:2E:C4
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:81:9c:fb:7c:ad:6f:03:46:a2:ae:d5:2c:04:cd:e2:3d:b2:
c1:55:13:d4:e2:9c:e7:3b:63:03:49:71:b9:74:ca:ae:f8:5d:
6a:ee:b8:7d:89:29:42:b5:f4:d4:ca:46:de:7a:8b:8a:01:e5:
b0:a1:43:4c:14:46:f2:1e:a2:e6:f2:51:f5:c2:ab:6f:ce:1e:
77:e9:3c:18:d6:69:aa:11:ac:a6:a1:37:c4:a6:eb:b3:1d:ee:
65:45:16:7d:f1:50:9c:d4:59:17:17:90:85:56:13:09:0d:13:
4a:6b:9a:47:f5:d1:8c:05:71:72:5b:93:7d:58:6a:91:02:30:
cc:54:83:be:d1:8f:15:66:d5:49:1a:b9:51:12:60:97:2b:13:
da:06:a4:95:86:ae:8f:51:6f:3b:cf:4b:4f:21:d8:1c:9e:53:
2d:b1:d1:57:1a:2d:85:c5:49:70:20:e2:90:6c:de:4c:54:60:
1d:49:bf:bc:16:a8:32:e1:14:ce:1d:23:13:2c:73:b5:a3:32:
e8:b8:65:d6:dd:d5:3e:8e:ca:5e:a9:db:47:1f:59:26:02:4d:
f2:96:3d:e7:eb:70:37:1d:4b:10:57:4e:47:8e:a3:3a:f0:07:
6e:77:98:ee:55:9f:8d:16:1f:2e:f1:fd:29:54:c5:e1:6f:5e:
2d:b1:eb:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQu3rdeqPJPFz+8gfAqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzE2Y2Q0ODgxNTYyZGEzYmYzOTI1YjQ5MThiNmUxMWQ3
NjUxNGMwHhcNMjUxMTExMDcwMjIzWhcNMjUxMTEyMDcwMjIzWjAzMTEwLwYDVQQD
Eyg4OTA1ZDEwOThiYWUzZjE4Mjc0Yzg5M2IzZTVhYjBhYmM1YTAyZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMWCDuVsaiTnHdwaDpIwz4671aNv
TJxVRZOgRb3Ea1Oyv7dy+u+o5DyFJO1IrBugj4nz7ZjDtYEmQH+h3Ip7IobtLDnF
Oycl31Kt2+Ej/uREzq9LlvVDAl4nlxS0zqQamoMpny1T80zs1RDBQGt4KFgPRaVL
wBoq6NY8IliLWj+tloV1Ti7i9caVPbQJ2m/1u147qmY4ql7V1vqPRj2Mp6EkRkks
cAQxCIPM4q1NdkOmSx7yTf1OVh4TNvAW9fD0FRofwFnJ3AfjCfkCCMwffYqzcLj6
m63lsMuCSuHY9PhqCo8+gVnYh6Xuz4VhnenSTX9CO3bHXxv+x47PAdrQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkF0QmLrj8YJ0yJOz5asKvFoC7EMB8GA1UdIwQY
MBaAFDIxbNSIFWLaO/OSW0kYtuEddlFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2Yt
MjYyZGE4ODNjOGUyLzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2YtMjYyZGE4ODNjOGUy
LzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIGc+3yt
bwNGoq7VLATN4j2ywVUT1OKc5ztjA0lxuXTKrvhdau64fYkpQrX01MpG3nqLigHl
sKFDTBRG8h6i5vJR9cKrb84ed+k8GNZpqhGspqE3xKbrsx3uZUUWffFQnNRZFxeQ
hVYTCQ0TSmuaR/XRjAVxcluTfVhqkQIwzFSDvtGPFWbVSRq5URJglysT2gaklYau
j1FvO89LTyHYHJ5TLbHRVxothcVJcCDikGzeTFRgHUm/vBaoMuEUzh0jEyxztaMy
6Lhl1t3VPo7KXqnbRx9ZJgJN8pY95+twNx1LEFdOR46jOvAHbneY7lWfjRYfLvH9
KVTF4W9eLbHrnA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:20 2025 by rpki-client