Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: MWkT8wnzS/rOSoyBW0vmncfo6feO81VvFkrtrupQ7xc=
Subject key identifier: A8:03:2B:0F:9C:70:BD:C1:73:56:7F:D8:0A:81:02:D5:3D:FE:61:DA
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 0199FCFDB9F3DCD2A5F00C9113496DED73EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0855
Signing time: Sun 19 Oct 2025 15:01:50 +0000
Manifest this update: Sun 19 Oct 2025 15:01:50 +0000
Manifest next update: Mon 20 Oct 2025 15:01:50 +0000
Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: 8BOTGMH7wWTmhV8EMgVa2+jxeFAa8HkmJSL9UZ2m2TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b9:f3:dc:d2:a5:f0:0c:91:13:49:6d:ed:73:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Oct 19 15:01:50 2025 GMT
Not After : Oct 20 15:01:50 2025 GMT
Subject: CN=a8032b0f9c70bdc173567fd80a8102d53dfe61da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:48:96:52:77:df:8d:b0:92:81:d8:b1:88:
7c:87:24:90:86:7c:02:18:0b:95:58:f4:39:e4:1e:
6d:69:c2:fa:34:8e:8a:a1:7f:dd:87:67:45:ae:0b:
ca:32:6a:dd:2b:4b:d6:d3:4f:19:23:72:73:3a:0b:
7c:ee:1b:2a:2a:ba:d3:e7:07:7a:66:13:17:cb:1c:
c8:1d:31:80:87:1d:ae:b3:71:26:24:8c:92:17:73:
5e:cc:62:74:e5:5c:80:c6:66:df:16:f1:cd:19:00:
13:d0:37:e2:85:10:78:be:18:d6:f5:86:8c:7b:d2:
79:c0:83:b9:b0:cf:80:1b:d1:c0:de:50:48:49:05:
b2:3e:06:aa:15:23:a8:9c:29:65:7e:3f:28:e4:77:
f8:25:10:f7:8f:b3:eb:aa:a2:ac:a2:50:5a:ba:6c:
59:3f:69:17:2a:31:db:5a:91:66:e3:73:d6:5e:ee:
43:ff:75:01:be:7b:a0:7c:57:bd:7c:5d:70:a9:0c:
0f:eb:78:46:a6:6b:2c:49:63:c0:11:bc:69:36:6b:
de:17:eb:c3:57:b9:82:74:3c:f0:5d:13:78:8e:1d:
3c:55:63:19:aa:5f:6a:d1:98:b5:b3:bf:57:d0:bb:
12:51:ec:ea:d3:ee:5a:60:58:0e:47:fc:8c:f0:89:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:2B:0F:9C:70:BD:C1:73:56:7F:D8:0A:81:02:D5:3D:FE:61:DA
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:98:23:05:bf:d7:7a:b9:ef:00:62:30:aa:4a:ef:e3:8d:
df:d3:f2:8a:95:ee:73:a2:86:52:86:b1:08:31:08:c2:e8:a9:
a3:6d:ec:2b:cf:e7:9b:51:31:82:00:a3:9b:7d:15:5e:be:6f:
0b:30:5b:27:33:37:1a:36:81:cc:c4:3b:64:23:af:87:e0:e4:
46:82:ba:e1:bc:fa:cf:e8:26:20:60:a9:e6:bd:19:a5:26:a6:
91:c5:ee:04:c3:a0:79:3c:4a:b5:ef:32:3d:5c:ac:16:4e:18:
4a:62:af:0d:76:b6:95:e1:be:48:a9:dc:72:10:c1:11:9d:6a:
0e:55:c6:d2:09:8c:38:d5:07:3a:7c:48:bf:41:35:16:65:c3:
45:48:b1:9d:98:08:b3:30:ca:a2:2d:5a:cc:3c:31:57:dc:66:
a8:0e:9b:23:2a:8f:66:64:4a:aa:f9:7f:86:d5:b8:cc:f8:86:
99:e5:81:78:97:ed:88:7e:ec:d6:32:33:0f:a8:aa:46:d5:a7:
a5:27:db:36:0b:7b:bc:45:84:8e:5d:9f:f1:69:6f:9e:3c:61:
71:37:6a:a6:34:04:a9:d4:46:7b:a7:2e:f0:93:87:e3:a7:98:
ae:28:1e:64:99:a1:5e:7c:bf:b3:7b:d7:2d:f5:5d:7f:e9:4b:
1f:ce:cf:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/bnz3NKl8AyRE0lt7XPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2NhZjBjYjZiMzMwMWNjMDg0YTI1ZDVjMjE0MTBhOTJj
YTdlMzYwHhcNMjUxMDE5MTUwMTUwWhcNMjUxMDIwMTUwMTUwWjAzMTEwLwYDVQQD
EyhhODAzMmIwZjljNzBiZGMxNzM1NjdmZDgwYTgxMDJkNTNkZmU2MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zpIllJ3342wkoHYsYh8hySQhnwC
GAuVWPQ55B5tacL6NI6KoX/dh2dFrgvKMmrdK0vW008ZI3JzOgt87hsqKrrT5wd6
ZhMXyxzIHTGAhx2us3EmJIySF3NezGJ05VyAxmbfFvHNGQAT0DfihRB4vhjW9YaM
e9J5wIO5sM+AG9HA3lBISQWyPgaqFSOonCllfj8o5Hf4JRD3j7PrqqKsolBaumxZ
P2kXKjHbWpFm43PWXu5D/3UBvnugfFe9fF1wqQwP63hGpmssSWPAEbxpNmveF+vD
V7mCdDzwXRN4jh08VWMZql9q0Zi1s79X0LsSUezq0+5aYFgOR/yM8IlucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgDKw+ccL3Bc1Z/2AqBAtU9/mHaMB8GA1UdIwQY
MBaAFJh8rwy2szAcwISiXVwhQQqSyn42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEt
MzYxNzBjZDgxMzMwLzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEtMzYxNzBjZDgxMzMw
LzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreCYIwW/
13q57wBiMKpK7+ON39PyipXuc6KGUoaxCDEIwuipo23sK8/nm1ExggCjm30VXr5v
CzBbJzM3GjaBzMQ7ZCOvh+DkRoK64bz6z+gmIGCp5r0ZpSamkcXuBMOgeTxKte8y
PVysFk4YSmKvDXa2leG+SKncchDBEZ1qDlXG0gmMONUHOnxIv0E1FmXDRUixnZgI
szDKoi1azDwxV9xmqA6bIyqPZmRKqvl/htW4zPiGmeWBeJftiH7s1jIzD6iqRtWn
pSfbNgt7vEWEjl2f8WlvnjxhcTdqpjQEqdRGe6cu8JOH46eYrigeZJmhXny/s3vX
LfVdf+lLH87PdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:17 2025 by rpki-client