Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: So+FV/2IfAiEjBRN8Iz8SJZCp1I7j3CMWELYmL+rEFw=
Subject key identifier: 46:D1:EF:99:68:0B:F7:EE:09:60:57:F4:9D:B7:94:83:75:16:86:72
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019A72933327AF5C9208366835D9C594D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 10F3
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: jxU2GBDHFVOxjMA2RBu+dVRtuimbq2FVilFzTw/ffzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:33:27:af:5c:92:08:36:68:35:d9:c5:94:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=46d1ef99680bf7ee096057f49db7948375168672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:27:51:c9:fa:8f:1f:56:ba:a2:e5:95:92:
7c:29:f2:25:a6:5a:b9:a7:36:53:b0:72:05:03:3b:
37:da:24:86:26:bb:ed:8a:59:fc:cf:e3:e7:4c:ff:
d2:c5:85:dd:bd:7e:f5:dc:14:ee:53:58:da:e2:65:
95:ca:e1:45:f4:b5:31:cd:8e:65:7b:d5:b7:30:56:
a2:b5:1c:66:f7:72:d2:cc:b9:ca:12:8d:71:05:98:
70:15:17:46:e2:06:15:14:b2:13:ed:51:e5:ae:c5:
7d:5f:45:3d:9e:bc:c4:b8:7b:39:d6:36:3f:9c:e3:
66:0d:e5:26:06:a5:d2:11:97:84:08:7d:4d:99:2d:
49:13:3d:7c:1f:1c:83:05:b5:05:fd:22:af:76:7c:
60:0b:cd:90:a6:f9:1f:3c:c4:28:bc:c8:66:af:47:
af:33:e6:2d:b1:54:9e:3e:7f:14:e7:9f:5e:51:84:
b0:ff:79:34:16:b8:80:76:1d:b2:9b:16:50:cf:8a:
b5:b7:26:99:87:b9:2f:7d:9e:cf:c2:3f:50:cb:a4:
58:3e:ad:cd:2d:59:99:79:88:b9:37:71:ad:1b:db:
0d:d7:10:3d:ce:a2:1a:cf:56:b2:e4:78:6f:6a:5d:
1e:c1:e2:b2:49:16:ec:80:a8:ba:e8:18:8f:ca:30:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:EF:99:68:0B:F7:EE:09:60:57:F4:9D:B7:94:83:75:16:86:72
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:33:f2:1f:32:60:0d:d5:01:89:a9:27:b5:af:49:ea:11:a2:
45:20:79:01:77:71:97:ee:66:18:e5:43:df:98:40:f1:22:b3:
5a:ed:c7:7c:fb:45:eb:78:48:fd:60:8a:35:aa:00:94:f7:43:
06:0d:af:3c:34:3d:77:dd:9b:77:38:c5:f3:27:2f:e4:19:e4:
6c:df:5a:da:4c:6e:4c:aa:02:b7:f2:fc:eb:ee:8e:c7:9c:75:
0b:1f:c5:97:bb:3d:b0:ea:21:67:58:86:62:d8:09:27:92:cf:
7e:cf:f4:69:28:8b:01:24:7b:37:d7:8c:01:8b:d4:fd:4c:e0:
e4:fb:25:44:83:c7:a5:fb:b9:a3:a8:1d:78:e5:17:8a:ae:e7:
ed:d5:56:14:d2:b9:09:6b:35:c8:b6:ff:d7:a1:d8:78:a4:f2:
25:8b:9a:ca:ba:2e:67:43:54:9b:ce:cd:0e:d1:6d:69:b0:ce:
96:7d:a9:55:f3:6c:71:a7:62:e9:52:58:bb:2f:80:98:d2:99:
df:7e:66:3f:8b:b7:ed:21:47:9f:02:28:fa:7e:14:ea:f9:88:
38:60:fa:ec:e9:41:43:4f:81:b5:ec:80:b5:97:25:21:f6:3a:
94:9d:c3:a1:89:93:8f:7b:ca:6a:a3:48:21:53:46:59:e1:d7:
b9:c7:59:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzMnr1ySCDZoNdnFlNeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5
ZTIzNDEwHhcNMjUxMTExMTEwMDQwWhcNMjUxMTEyMTEwMDQwWjAzMTEwLwYDVQQD
Eyg0NmQxZWY5OTY4MGJmN2VlMDk2MDU3ZjQ5ZGI3OTQ4Mzc1MTY4NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqMnUcn6jx9WuqLllZJ8KfIlplq5
pzZTsHIFAzs32iSGJrvtiln8z+PnTP/SxYXdvX713BTuU1ja4mWVyuFF9LUxzY5l
e9W3MFaitRxm93LSzLnKEo1xBZhwFRdG4gYVFLIT7VHlrsV9X0U9nrzEuHs51jY/
nONmDeUmBqXSEZeECH1NmS1JEz18HxyDBbUF/SKvdnxgC82QpvkfPMQovMhmr0ev
M+YtsVSePn8U559eUYSw/3k0FriAdh2ymxZQz4q1tyaZh7kvfZ7Pwj9Qy6RYPq3N
LVmZeYi5N3GtG9sN1xA9zqIaz1ay5Hhval0eweKySRbsgKi66BiPyjAsjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbR75loC/fuCWBX9J23lIN1FoZyMB8GA1UdIwQY
MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt
OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx
LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzPyHzJg
DdUBiaknta9J6hGiRSB5AXdxl+5mGOVD35hA8SKzWu3HfPtF63hI/WCKNaoAlPdD
Bg2vPDQ9d92bdzjF8ycv5BnkbN9a2kxuTKoCt/L86+6Ox5x1Cx/Fl7s9sOohZ1iG
YtgJJ5LPfs/0aSiLASR7N9eMAYvU/Uzg5PslRIPHpfu5o6gdeOUXiq7n7dVWFNK5
CWs1yLb/16HYeKTyJYuayrouZ0NUm87NDtFtabDOln2pVfNscadi6VJYuy+AmNKZ
335mP4u37SFHnwIo+n4U6vmIOGD67OlBQ0+BteyAtZclIfY6lJ3DoYmTj3vKaqNI
IVNGWeHXucdZ1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:02 2025 by rpki-client