Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: Q4IZmAE5TrwHj9yre07aco/+64QCroQAB33ZRBfEiK8=
Subject key identifier: 8C:CE:A4:50:51:EE:92:2B:65:6D:2B:11:9E:48:FF:3D:35:34:DF:55
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 019A71B77A3F7F2911251D778AA0BA31EBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 0A9F
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: HefK1Ei+54YA2wgJLWkP0dr/kpREipqrjua3VK6kIyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7a:3f:7f:29:11:25:1d:77:8a:a0:ba:31:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=8ccea45051ee922b656d2b119e48ff3d3534df55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:e3:d8:28:34:7f:e9:b6:ee:bc:ac:13:2e:
c2:89:73:cd:ff:e7:3d:6b:f5:72:c2:9c:d9:e8:ac:
df:7c:ba:a4:55:8e:44:f7:98:11:5e:e6:9d:c5:35:
7f:3b:31:77:db:72:de:08:5b:4c:84:8a:83:32:99:
3c:9a:ef:22:c0:d5:33:0d:f4:f9:f1:73:c4:fa:c3:
08:56:58:f7:64:39:f9:35:bc:6e:3d:e5:fd:bc:55:
09:c2:df:e5:a7:19:b2:7e:2b:3d:f5:ff:ac:e0:7a:
8d:37:f5:98:bc:d1:af:c1:99:94:3d:9e:83:6d:d4:
f4:46:a0:5f:5a:c8:c5:b9:1e:78:9d:0d:56:a2:35:
ee:3d:5d:bf:99:4e:98:a3:d7:27:cc:c2:79:67:21:
e7:45:2e:31:44:44:1c:40:d5:d0:b1:a2:b8:d6:dc:
79:d6:2d:ae:00:63:45:f2:5f:94:12:14:f5:01:e2:
75:b2:49:1a:35:1f:dd:3a:51:dc:cd:cf:8f:e6:4d:
a3:d4:01:27:74:9a:71:d1:24:4e:61:2a:15:1c:6b:
68:c0:f7:5f:2f:2b:d6:b0:bb:c0:a9:68:25:5e:a8:
0a:10:fd:72:9a:9c:d8:e9:12:7a:38:ec:c3:aa:9b:
23:e6:61:f3:2b:4b:06:c4:b5:96:af:b1:c6:71:e3:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:A4:50:51:EE:92:2B:65:6D:2B:11:9E:48:FF:3D:35:34:DF:55
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:e6:c7:61:10:d8:6c:98:83:e7:1a:68:77:29:18:54:28:
f6:75:cd:79:a4:06:fd:91:17:58:dd:df:92:74:c4:be:8f:59:
4d:55:6e:68:8c:97:15:27:68:78:59:fb:94:35:8a:7f:ad:e6:
ac:7b:e1:93:01:80:4d:0b:35:ee:4d:08:10:39:79:46:ac:08:
d4:b3:76:10:a3:28:f7:17:7e:a9:db:10:30:87:df:02:bd:50:
8a:c4:89:ac:97:26:e7:94:f3:79:d4:97:5d:03:8e:9e:6a:0e:
3a:90:09:ea:67:c0:bc:70:fa:73:ee:e7:da:ea:00:85:ad:98:
8b:eb:25:e0:fc:3b:7c:36:95:e1:ca:6e:83:2a:41:30:c2:6a:
c0:22:b3:d3:a2:25:17:39:86:68:1d:a2:25:bf:15:80:a2:8d:
89:d8:65:cc:87:b7:9c:71:09:b7:0e:32:10:42:cc:12:a2:4b:
60:d7:b7:bf:4a:ed:fd:e7:6c:0c:f7:e6:f1:db:82:64:54:a6:
44:0e:dd:71:e8:ac:10:13:1a:11:65:90:fc:40:cf:b6:bd:b2:
1e:02:e6:ea:9d:2a:34:ac:cd:af:63:15:a0:2f:50:41:b4:01:
51:d8:b2:4d:bc:36:99:9d:00:7b:18:3a:a1:36:ce:19:75:f2:
2b:75:04:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3o/fykRJR13iqC6MeveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk
YWNmN2MwHhcNMjUxMTExMDcwMDQwWhcNMjUxMTEyMDcwMDQwWjAzMTEwLwYDVQQD
Eyg4Y2NlYTQ1MDUxZWU5MjJiNjU2ZDJiMTE5ZTQ4ZmYzZDM1MzRkZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrrj2Cg0f+m27rysEy7CiXPN/+c9
a/VywpzZ6KzffLqkVY5E95gRXuadxTV/OzF323LeCFtMhIqDMpk8mu8iwNUzDfT5
8XPE+sMIVlj3ZDn5NbxuPeX9vFUJwt/lpxmyfis99f+s4HqNN/WYvNGvwZmUPZ6D
bdT0RqBfWsjFuR54nQ1WojXuPV2/mU6Yo9cnzMJ5ZyHnRS4xREQcQNXQsaK41tx5
1i2uAGNF8l+UEhT1AeJ1skkaNR/dOlHczc+P5k2j1AEndJpx0SROYSoVHGtowPdf
LyvWsLvAqWglXqgKEP1ympzY6RJ6OOzDqpsj5mHzK0sGxLWWr7HGcePQXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzOpFBR7pIrZW0rEZ5I/z01NN9VMB8GA1UdIwQY
MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt
OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5
LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3jmx2EQ
2GyYg+caaHcpGFQo9nXNeaQG/ZEXWN3fknTEvo9ZTVVuaIyXFSdoeFn7lDWKf63m
rHvhkwGATQs17k0IEDl5RqwI1LN2EKMo9xd+qdsQMIffAr1QisSJrJcm55TzedSX
XQOOnmoOOpAJ6mfAvHD6c+7n2uoAha2Yi+sl4Pw7fDaV4cpugypBMMJqwCKz06Il
FzmGaB2iJb8VgKKNidhlzIe3nHEJtw4yEELMEqJLYNe3v0rt/edsDPfm8duCZFSm
RA7dceisEBMaEWWQ/EDPtr2yHgLm6p0qNKzNr2MVoC9QQbQBUdiyTbw2mZ0Aexg6
oTbOGXXyK3UESA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client