Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: hgQ/cG5I8ejmNMWQWJCIp2UL5D1oCNAwLBQV4WiqESU=
Subject key identifier: 4C:52:93:66:11:53:10:26:A4:8D:D6:A2:38:A7:88:63:2D:1E:49:04
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019A7301C853F69EDE18EBF2021BE9CBC744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 064D
Signing time: Tue 11 Nov 2025 13:01:27 +0000
Manifest this update: Tue 11 Nov 2025 13:01:27 +0000
Manifest next update: Wed 12 Nov 2025 13:01:27 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: rSpEQX2ZVZPslc/varprDohM2DejEO9oaYR6hVAk+bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c8:53:f6:9e:de:18:eb:f2:02:1b:e9:cb:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Nov 11 13:01:27 2025 GMT
Not After : Nov 12 13:01:27 2025 GMT
Subject: CN=4c52936611531026a48dd6a238a788632d1e4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:5a:56:e8:f6:72:30:f2:32:b3:d6:0d:ab:
9d:4b:cf:7c:e0:f6:48:1f:fa:f5:39:54:4b:24:f8:
f8:e0:aa:14:9a:af:96:ae:69:80:a6:0f:54:88:07:
45:db:21:ff:5e:5b:46:1b:5f:d1:4a:c8:a9:1f:bf:
8e:e3:cb:22:6d:e5:36:a3:83:04:bc:11:10:2c:ba:
49:78:93:32:8f:b4:a1:47:76:10:f2:8d:70:15:d0:
f0:ae:b2:ce:66:64:94:94:0d:bb:51:42:36:d1:82:
30:d2:4a:40:ab:be:b2:e2:c7:da:4f:b7:2d:9f:f9:
85:f6:c2:16:67:58:d5:ec:2a:29:17:9d:99:ad:76:
25:97:7a:f7:7f:d5:d3:12:2b:93:69:eb:1c:58:4a:
e6:01:a0:2f:4e:56:02:c0:f7:3e:15:ec:da:72:fa:
dd:89:78:17:c1:ad:25:93:9d:65:01:17:5d:18:69:
36:94:10:5c:6b:21:94:a1:e6:9e:e5:7f:4f:86:aa:
65:09:c1:8f:31:99:2b:2c:e9:53:11:50:59:e6:2c:
27:12:e3:46:c2:01:95:ab:f7:25:57:12:85:b8:90:
f8:df:e7:94:f8:93:13:b1:c2:58:79:a0:b3:b0:e5:
09:03:36:93:e6:b2:03:5d:c0:1d:8a:8e:3e:59:55:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:93:66:11:53:10:26:A4:8D:D6:A2:38:A7:88:63:2D:1E:49:04
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:35:66:0e:19:6d:99:56:d1:fb:ba:64:51:e8:4c:af:4f:25:
c8:f9:91:7b:e0:00:bf:6f:9c:98:a8:22:1d:f0:2e:1b:d7:d6:
63:62:8d:e4:1b:0b:43:3f:3e:36:3c:e1:8a:ec:de:3d:41:c1:
83:9b:70:5f:77:34:11:ab:e4:1a:15:ab:d0:25:52:28:f8:e3:
c0:38:62:fe:66:b1:0e:2e:f6:c0:25:13:94:92:79:a2:af:8b:
21:fa:19:ce:37:ef:1a:19:3c:ce:a5:e9:f8:4d:0d:b4:c4:a2:
98:be:f9:5e:6a:ce:a2:d7:2a:20:24:85:df:e4:68:a4:a4:85:
f4:85:6f:9c:17:43:a2:e1:e8:6b:bf:0e:05:39:11:10:da:f2:
fb:28:06:65:79:50:14:fb:fb:b9:cf:eb:51:fe:db:a1:bb:b7:
1f:27:f3:57:ce:98:3f:d1:41:3e:e7:15:34:6c:53:0b:fe:f8:
b6:fa:c2:33:13:a8:c4:86:80:f6:7c:5d:c4:41:81:79:ba:63:
79:d2:cf:3d:fb:19:ec:58:06:71:3b:4f:94:8d:17:74:f5:d7:
00:b5:a1:42:a9:e2:c1:19:e6:d1:d3:f5:6a:7e:b5:a5:27:00:
78:5e:6c:4a:ee:02:61:34:5d:2e:74:04:01:65:5c:9b:49:93:
70:2f:0c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAchT9p7eGOvyAhvpy8dEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjUxMTExMTMwMTI3WhcNMjUxMTEyMTMwMTI3WjAzMTEwLwYDVQQD
Eyg0YzUyOTM2NjExNTMxMDI2YTQ4ZGQ2YTIzOGE3ODg2MzJkMWU0OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h1aVuj2cjDyMrPWDaudS8984PZI
H/r1OVRLJPj44KoUmq+WrmmApg9UiAdF2yH/XltGG1/RSsipH7+O48sibeU2o4ME
vBEQLLpJeJMyj7ShR3YQ8o1wFdDwrrLOZmSUlA27UUI20YIw0kpAq76y4sfaT7ct
n/mF9sIWZ1jV7CopF52ZrXYll3r3f9XTEiuTaescWErmAaAvTlYCwPc+Fezacvrd
iXgXwa0lk51lARddGGk2lBBcayGUoeae5X9PhqplCcGPMZkrLOlTEVBZ5iwnEuNG
wgGVq/clVxKFuJD43+eU+JMTscJYeaCzsOUJAzaT5rIDXcAdio4+WVXs9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExSk2YRUxAmpI3WojiniGMtHkkEMB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjVmDhlt
mVbR+7pkUehMr08lyPmRe+AAv2+cmKgiHfAuG9fWY2KN5BsLQz8+NjzhiuzePUHB
g5twX3c0EavkGhWr0CVSKPjjwDhi/maxDi72wCUTlJJ5oq+LIfoZzjfvGhk8zqXp
+E0NtMSimL75XmrOotcqICSF3+RopKSF9IVvnBdDouHoa78OBTkRENry+ygGZXlQ
FPv7uc/rUf7bobu3HyfzV86YP9FBPucVNGxTC/74tvrCMxOoxIaA9nxdxEGBebpj
edLPPfsZ7FgGcTtPlI0XdPXXALWhQqniwRnm0dP1an61pScAeF5sSu4CYTRdLnQE
AWVcm0mTcC8MEA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client