Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: 9DqSg0YzJR+XkIGppN0rIEww36wvYfnQEXmp5pwtox4=
Subject key identifier: EF:FD:55:50:21:DC:C1:0F:67:CF:BB:14:DB:48:C1:CF:57:0C:D6:3E
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019A210967E0EFA7DE040166AA1B92A2E361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 164C
Signing time: Sun 26 Oct 2025 15:00:55 +0000
Manifest this update: Sun 26 Oct 2025 15:00:55 +0000
Manifest next update: Mon 27 Oct 2025 15:00:55 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: jKV/jQxvusw8FOURNIi4N0+HhjTMYWO2xSs4aB4oCos=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:67:e0:ef:a7:de:04:01:66:aa:1b:92:a2:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Oct 26 15:00:55 2025 GMT
Not After : Oct 27 15:00:55 2025 GMT
Subject: CN=effd555021dcc10f67cfbb14db48c1cf570cd63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:6a:8b:ed:57:22:19:12:1a:9e:a2:26:d7:
cd:0f:18:05:88:39:85:5d:30:3e:20:9a:3f:48:f6:
96:3d:f3:6c:34:62:9a:01:e8:14:28:ba:26:bf:91:
d8:58:db:24:cf:45:34:c7:07:05:34:7c:f4:de:17:
7a:15:d5:74:9b:01:ae:ed:f9:96:f9:dc:a3:0d:a7:
2b:91:98:5f:0d:60:a2:e9:a9:c0:18:52:21:38:0f:
ee:6a:93:ff:7d:39:2f:28:33:50:7e:a7:49:93:fd:
49:48:8e:1f:10:db:5d:e8:05:2a:4b:e7:98:22:1b:
b7:61:3a:37:6f:b6:bb:ad:70:d2:17:fb:ef:69:2b:
84:de:51:da:37:cf:18:de:22:eb:58:a5:35:d3:89:
30:95:c6:50:37:b6:59:3e:30:8a:04:10:75:f7:6e:
7e:16:74:42:d6:2f:00:1f:7e:25:93:37:5a:22:a9:
17:5a:74:f3:95:76:47:3c:2f:c0:8b:cd:8a:f0:fe:
1b:8a:f1:5b:dc:07:69:41:7e:30:92:3e:5a:4b:b3:
a0:2e:a4:14:e0:29:f6:f1:ce:30:30:f4:22:0a:55:
d0:06:74:f3:b2:81:e5:ae:9e:e5:58:93:c3:94:9b:
e3:c6:62:91:27:13:67:8b:65:b8:a8:c6:55:82:10:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:55:50:21:DC:C1:0F:67:CF:BB:14:DB:48:C1:CF:57:0C:D6:3E
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b3:1a:55:4b:41:97:c3:d3:7f:8c:14:39:b5:6a:84:f4:f9:
b7:fe:50:69:df:86:85:c8:82:b0:3b:ca:8b:2c:a1:53:79:61:
00:e0:41:21:ab:0c:20:72:dd:be:11:7b:73:5a:60:2c:a7:f7:
34:8c:df:cb:ec:c3:31:9c:0a:bf:3e:22:29:ad:6e:fe:68:6e:
a7:1f:8e:2f:4d:59:e9:d0:62:86:ed:ee:a8:97:30:2b:b0:ee:
63:b8:5b:9c:96:10:2c:3a:59:ba:26:df:bd:8a:ec:53:1c:01:
4f:44:89:72:22:8e:f5:fb:f0:9f:fc:3f:7f:f5:09:34:81:0b:
99:49:99:b3:e4:31:be:2a:03:3f:a8:fc:36:12:12:3f:4c:7f:
ab:ad:a6:92:61:db:d8:a1:39:4b:94:a6:51:20:39:68:8a:87:
e9:42:9e:01:4a:25:9a:4d:3a:7a:69:3b:e5:0a:72:43:ed:1f:
09:42:ee:a9:d2:31:a2:b8:09:70:b6:12:ae:6d:3f:89:04:d6:
55:12:bc:8d:27:92:60:a6:64:2e:fc:91:7e:b4:b1:13:ec:59:
43:17:9d:f1:d7:45:af:61:d8:6b:48:22:22:37:62:43:22:4a:
ad:d4:29:0b:b2:bc:ed:74:4e:d6:e5:2b:3a:cb:4f:4f:cb:c5:
61:f8:7c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCWfg76feBAFmqhuSouNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUxMDI2MTUwMDU1WhcNMjUxMDI3MTUwMDU1WjAzMTEwLwYDVQQD
EyhlZmZkNTU1MDIxZGNjMTBmNjdjZmJiMTRkYjQ4YzFjZjU3MGNkNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGVqi+1XIhkSGp6iJtfNDxgFiDmF
XTA+IJo/SPaWPfNsNGKaAegUKLomv5HYWNskz0U0xwcFNHz03hd6FdV0mwGu7fmW
+dyjDacrkZhfDWCi6anAGFIhOA/uapP/fTkvKDNQfqdJk/1JSI4fENtd6AUqS+eY
Ihu3YTo3b7a7rXDSF/vvaSuE3lHaN88Y3iLrWKU104kwlcZQN7ZZPjCKBBB1925+
FnRC1i8AH34lkzdaIqkXWnTzlXZHPC/Ai82K8P4bivFb3AdpQX4wkj5aS7OgLqQU
4Cn28c4wMPQiClXQBnTzsoHlrp7lWJPDlJvjxmKRJxNni2W4qMZVghDO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/9VVAh3MEPZ8+7FNtIwc9XDNY+MB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbMaVUtB
l8PTf4wUObVqhPT5t/5Qad+GhciCsDvKiyyhU3lhAOBBIasMIHLdvhF7c1pgLKf3
NIzfy+zDMZwKvz4iKa1u/mhupx+OL01Z6dBihu3uqJcwK7DuY7hbnJYQLDpZuibf
vYrsUxwBT0SJciKO9fvwn/w/f/UJNIELmUmZs+QxvioDP6j8NhISP0x/q62mkmHb
2KE5S5SmUSA5aIqH6UKeAUolmk06emk75QpyQ+0fCULuqdIxorgJcLYSrm0/iQTW
VRK8jSeSYKZkLvyRfrSxE+xZQxed8ddFr2HYa0giIjdiQyJKrdQpC7K87XRO1uUr
OstPT8vFYfh8mw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:49:43 2025 by rpki-client