Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: iYJQ0Y2BvPE9GI0IIAZZKVx+gUKKMEnzN/FmDoW6ox0=
Subject key identifier: 04:C3:0C:7A:6F:A0:39:34:94:D0:5C:CD:89:B7:40:60:17:40:D0:02
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019A04487053231614F8D78796016FC418CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 08A3
Signing time: Tue 21 Oct 2025 01:00:47 +0000
Manifest this update: Tue 21 Oct 2025 01:00:47 +0000
Manifest next update: Wed 22 Oct 2025 01:00:47 +0000
Files and hashes: 1: 3lMXvqEAcbLn_TGG01LICTbLW08.roa (hash: JLchOQ88ldGsLdqg4fteLfsJxI+Ai8g0uoHIiX7T5co=)
2: 6vvf0gyYCc5zR3uujS0xGb6b3n8.roa (hash: zngkJv70qUXqPNjBBuw0RYlE38iva+rkrXYPwV7JMdk=)
3: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
4: fyqlzqNhdNo_30Z-vFmbQ-nbTKY.roa (hash: iWvAjIMv+MY94DgZD12TggkG1vfalYVxgXLVuLLTUTM=)
5: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
6: jGHUr4dtMJtPdQnm6rKBFWpDnqk.roa (hash: IXZrukDzCtZWoqUtiWmwhZr/tPtODXzz2d61EaXSHtE=)
7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: 3mTejNj/ngHwux9rpHf4Ks5+4Gv0XOCWC0UbBytmrh0=)
8: xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa (hash: /zwCpAsX0Hsr+2gnOWP4YOqrQ5dGeSMwHT7AFOWoMJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:70:53:23:16:14:f8:d7:87:96:01:6f:c4:18:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Oct 21 01:00:47 2025 GMT
Not After : Oct 22 01:00:47 2025 GMT
Subject: CN=04c30c7a6fa0393494d05ccd89b740601740d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:6d:92:f9:2b:48:dc:e9:4d:a7:6a:95:60:
26:d5:10:a2:95:70:bb:a8:8e:30:10:fa:a6:1e:ee:
6a:70:c8:c4:48:4c:f0:0f:1d:8a:e0:e8:34:f7:c1:
a4:37:5c:3d:e7:7f:06:dc:b7:77:bf:64:63:35:34:
8b:de:f9:75:5d:8d:23:f4:53:32:64:41:23:85:ba:
cf:cc:bc:65:b5:21:bb:a5:12:3d:b2:6f:03:a7:31:
54:14:93:8d:7d:cd:fe:33:38:27:94:0c:cf:43:76:
ac:c1:4c:6e:34:e8:75:c0:25:ac:37:0c:dc:b3:23:
f0:f2:e7:5c:f2:0e:89:07:8f:78:2c:b5:84:9c:63:
83:bc:f2:81:12:55:2e:70:2f:83:42:9f:bb:3d:90:
a0:ec:5d:d8:36:85:ad:a3:e5:cc:84:f8:94:5d:86:
c0:2a:af:cc:9c:72:3f:50:37:f7:ea:3a:c4:d2:6d:
e4:56:97:b7:43:0c:8c:30:9b:ca:7d:09:e1:df:68:
0c:63:52:9a:cb:b0:bf:2a:3d:e3:e5:ac:bf:17:89:
8f:6c:31:6c:c4:23:6d:bc:c0:d5:ec:8b:61:15:d0:
5d:7b:48:2c:63:08:35:4b:5b:ee:e6:f2:f3:63:62:
e7:ef:c9:e1:b5:02:82:81:70:9d:01:93:f4:d0:f8:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C3:0C:7A:6F:A0:39:34:94:D0:5C:CD:89:B7:40:60:17:40:D0:02
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:3a:7b:04:49:7f:7f:38:c9:1d:64:ae:10:0c:5b:20:fe:
5b:eb:7c:b9:65:9c:3c:ca:2c:cf:b2:c8:08:74:03:eb:24:1b:
f2:d7:9c:d2:27:90:01:7d:b6:fb:08:d3:74:62:0d:ef:cb:1a:
20:0b:de:93:f6:63:a4:ea:59:3e:80:52:fd:a4:6a:84:61:22:
3e:d1:ca:ca:ad:f2:98:cb:23:ec:ef:c7:df:c0:11:1f:6d:a3:
5b:32:dc:6f:33:6e:89:d6:33:fc:12:25:a5:bc:7f:f3:b9:26:
4d:40:bc:7c:29:bc:a2:cc:c2:16:ba:72:3f:18:2e:b8:b1:82:
51:6c:c3:1d:f7:aa:97:81:7b:a9:a5:10:58:ef:fe:0a:cb:c6:
73:14:7d:5b:2e:11:41:6d:4b:13:6d:8a:df:3a:d5:38:f2:25:
f7:4d:7b:08:69:eb:2b:b4:0a:04:8a:27:5a:44:ef:a4:59:ca:
6c:47:7b:1a:1f:88:a7:aa:21:12:87:67:d2:65:75:43:2a:57:
1d:4f:31:70:73:ca:81:4b:96:16:54:2d:2c:22:9d:01:25:0e:
7d:0c:a9:c0:13:f0:a9:75:24:52:9e:1e:f0:6f:dd:f1:f9:d9:
96:3c:51:dc:ff:e4:13:71:2e:56:06:d4:21:f1:6f:5c:67:14:
76:23:60:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoESHBTIxYU+NeHlgFvxBjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjUxMDIxMDEwMDQ3WhcNMjUxMDIyMDEwMDQ3WjAzMTEwLwYDVQQD
EygwNGMzMGM3YTZmYTAzOTM0OTRkMDVjY2Q4OWI3NDA2MDE3NDBkMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50BtkvkrSNzpTadqlWAm1RCilXC7
qI4wEPqmHu5qcMjESEzwDx2K4Og098GkN1w9538G3Ld3v2RjNTSL3vl1XY0j9FMy
ZEEjhbrPzLxltSG7pRI9sm8DpzFUFJONfc3+MzgnlAzPQ3aswUxuNOh1wCWsNwzc
syPw8udc8g6JB494LLWEnGODvPKBElUucC+DQp+7PZCg7F3YNoWto+XMhPiUXYbA
Kq/MnHI/UDf36jrE0m3kVpe3QwyMMJvKfQnh32gMY1Kay7C/Kj3j5ay/F4mPbDFs
xCNtvMDV7IthFdBde0gsYwg1S1vu5vLzY2Ln78nhtQKCgXCdAZP00PitRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATDDHpvoDk0lNBczYm3QGAXQNACMB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSI6ewRJ
f384yR1krhAMWyD+W+t8uWWcPMosz7LICHQD6yQb8tec0ieQAX22+wjTdGIN78sa
IAvek/ZjpOpZPoBS/aRqhGEiPtHKyq3ymMsj7O/H38ARH22jWzLcbzNuidYz/BIl
pbx/87kmTUC8fCm8oszCFrpyPxguuLGCUWzDHfeql4F7qaUQWO/+CsvGcxR9Wy4R
QW1LE22K3zrVOPIl9017CGnrK7QKBIonWkTvpFnKbEd7Gh+Ip6ohEodn0mV1QypX
HU8xcHPKgUuWFlQtLCKdASUOfQypwBPwqXUkUp4e8G/d8fnZljxR3P/kE3EuVgbU
IfFvXGcUdiNgVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:33:15 2025 by rpki-client