Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: tty3VXgNtNEF8Z3nhpuzBsqkQrs6KWj3jGLTyCPkxMA=
Subject key identifier: DA:E8:7B:E2:3C:82:DA:31:59:E1:4C:CF:24:A1:50:E9:E0:2C:A1:33
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019A5DC35CA299BE7F6DDAEDE2F9D71CFDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1714
Signing time: Fri 07 Nov 2025 10:01:15 +0000
Manifest this update: Fri 07 Nov 2025 10:01:15 +0000
Manifest next update: Sat 08 Nov 2025 10:01:15 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: d5QMFeHrksMxErKGIIjvssmXc1BTqWf+Pz1PVq9414w=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c3:5c:a2:99:be:7f:6d:da:ed:e2:f9:d7:1c:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Nov 7 10:01:15 2025 GMT
Not After : Nov 8 10:01:15 2025 GMT
Subject: CN=dae87be23c82da3159e14ccf24a150e9e02ca133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:61:01:6d:c6:b9:c4:e5:13:9f:cf:ca:a0:
cc:7f:2f:cc:52:c2:fa:ec:82:da:41:37:6f:76:dd:
bb:3e:2d:b7:d5:5c:f8:f0:9a:eb:aa:e3:36:7c:86:
52:24:6c:8d:96:09:7e:35:03:85:2e:9e:22:50:9d:
32:f9:dd:f9:f2:90:25:88:56:c7:1c:d4:29:f5:ec:
24:62:e2:83:37:e6:73:95:03:fe:8d:b8:bd:79:a5:
8c:f2:c9:4a:b5:69:97:5c:07:a2:92:5a:81:38:a1:
4d:82:87:b9:1f:da:a5:34:e5:f0:a8:a7:10:c6:1f:
13:77:d6:8b:95:bf:82:4c:32:05:4b:97:53:14:30:
cb:82:ef:ff:58:2a:ab:d3:bb:39:57:d6:bb:26:48:
9d:e0:0b:09:c9:4c:d2:32:ce:59:00:55:5e:43:f8:
84:ff:20:82:d0:a6:7d:41:81:6d:af:87:ef:24:8e:
73:d0:ee:27:b1:be:4e:51:37:11:81:40:7b:78:a3:
91:33:5e:59:98:75:c6:e9:c5:86:80:3d:f4:72:e6:
1e:b7:d3:1c:62:69:28:67:15:ac:4d:d4:92:1e:9f:
49:24:8b:28:5a:87:ce:52:e7:8f:ba:3b:2f:d5:58:
49:ec:39:7d:66:cd:85:56:31:d0:e0:28:fd:dc:54:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:7B:E2:3C:82:DA:31:59:E1:4C:CF:24:A1:50:E9:E0:2C:A1:33
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:21:9e:2d:2f:a8:46:2a:8f:6c:14:91:bf:52:f0:70:77:
74:54:11:2a:78:26:0e:d2:33:6b:26:77:55:fe:b6:4b:5b:31:
c6:bf:78:c9:43:e5:54:fd:ae:42:01:ba:f5:51:18:cd:1f:2d:
f1:4a:c2:85:eb:55:2b:85:0f:a2:c4:42:a5:6f:56:de:6f:54:
5d:61:ad:23:59:b3:8e:60:74:41:51:23:44:5c:2a:19:de:71:
d2:72:45:92:e1:e1:23:b6:3a:91:19:b0:4f:d9:c7:1c:b2:99:
ea:ed:8a:c1:94:d8:66:1b:3b:ed:75:6f:86:a0:a0:e0:4f:cb:
71:1a:97:71:73:17:37:a0:f2:50:d2:a0:6a:e6:9d:ea:96:50:
41:40:72:2a:b1:78:22:0a:5d:9b:63:02:91:9a:c1:d1:04:0e:
6b:16:76:3c:3c:9d:45:a2:b2:f0:a3:db:58:f4:98:fa:8e:b3:
93:3d:dc:64:47:d9:2d:89:cd:f0:9b:d9:f1:2a:c6:7a:98:52:
52:06:5f:9e:9f:2d:52:6a:f7:c3:d1:88:ee:e9:8e:55:dd:93:
74:64:57:dc:64:51:30:aa:5f:46:db:37:00:a4:40:71:59:d8:
3f:7a:0e:1b:05:53:fd:1f:9e:d4:0e:fa:ee:10:dc:1a:01:87:
5e:13:f5:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdw1yimb5/bdrt4vnXHP3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjUxMTA3MTAwMTE1WhcNMjUxMTA4MTAwMTE1WjAzMTEwLwYDVQQD
EyhkYWU4N2JlMjNjODJkYTMxNTllMTRjY2YyNGExNTBlOWUwMmNhMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZxhAW3GucTlE5/PyqDMfy/MUsL6
7ILaQTdvdt27Pi231Vz48JrrquM2fIZSJGyNlgl+NQOFLp4iUJ0y+d358pAliFbH
HNQp9ewkYuKDN+ZzlQP+jbi9eaWM8slKtWmXXAeiklqBOKFNgoe5H9qlNOXwqKcQ
xh8Td9aLlb+CTDIFS5dTFDDLgu//WCqr07s5V9a7Jkid4AsJyUzSMs5ZAFVeQ/iE
/yCC0KZ9QYFtr4fvJI5z0O4nsb5OUTcRgUB7eKORM15ZmHXG6cWGgD30cuYet9Mc
YmkoZxWsTdSSHp9JJIsoWofOUuePujsv1VhJ7Dl9Zs2FVjHQ4Cj93FT5vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNroe+I8gtoxWeFMzyShUOngLKEzMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Qhni0v
qEYqj2wUkb9S8HB3dFQRKngmDtIzayZ3Vf62S1sxxr94yUPlVP2uQgG69VEYzR8t
8UrChetVK4UPosRCpW9W3m9UXWGtI1mzjmB0QVEjRFwqGd5x0nJFkuHhI7Y6kRmw
T9nHHLKZ6u2KwZTYZhs77XVvhqCg4E/LcRqXcXMXN6DyUNKgauad6pZQQUByKrF4
Igpdm2MCkZrB0QQOaxZ2PDydRaKy8KPbWPSY+o6zkz3cZEfZLYnN8JvZ8SrGephS
UgZfnp8tUmr3w9GI7umOVd2TdGRX3GRRMKpfRts3AKRAcVnYP3oOGwVT/R+e1A76
7hDcGgGHXhP1eg==
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:28:31 2025 by rpki-client