Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: +sgICpqPJzR0M7Wr4JRy1QyYvR7TPTAO101CIyMcLsE=
Subject key identifier: 5E:6B:4B:5B:7D:7E:E6:EF:BA:CA:43:6D:F5:D3:B9:8A:0F:7D:B7:C2
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 0199FAD80935BEAA4B5F237352331ECE2DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 08F1
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: yXE8x+iw0KA6dqiWYfJ6TibDW/hRNOV8xREMaW9jUSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:09:35:be:aa:4b:5f:23:73:52:33:1e:ce:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=5e6b4b5b7d7ee6efbaca436df5d3b98a0f7db7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:65:66:dd:71:43:cb:7c:cf:70:f2:b1:ba:
ed:08:1d:d6:cd:44:bb:eb:cc:40:0a:c0:3f:a9:91:
93:53:4c:db:3e:1b:ff:58:dc:bd:36:5f:9e:8c:b6:
60:2d:bb:98:ea:03:e1:14:14:5f:08:1d:73:39:6e:
78:8c:13:0a:f1:d9:2f:bf:c0:2c:86:a2:fd:e0:bc:
8e:42:1c:b0:09:e4:21:fc:3f:a5:d3:c1:20:ef:5f:
df:d0:d0:d1:d9:1a:1c:f8:67:16:5e:34:da:0b:98:
b0:51:a7:c3:94:2a:d4:65:11:a3:7e:74:24:0f:c0:
42:22:43:d3:fa:d5:3d:c0:bf:04:af:05:21:98:26:
78:5e:d1:b0:3d:10:be:37:c2:d6:04:1a:97:52:3f:
50:34:3d:5c:9f:ff:ab:87:e4:3a:ae:2e:2f:6e:e0:
fb:09:cb:ef:ea:92:e9:50:04:9b:ee:4e:df:61:02:
e4:68:b9:e9:66:69:83:61:48:7e:32:c2:ae:f7:83:
5f:cd:71:ec:37:2c:5e:ba:f5:99:3c:a0:ae:a8:9d:
eb:f4:b3:2c:08:6e:2a:d1:bf:d0:24:68:0c:8b:5c:
d8:7e:7f:8b:f9:58:c5:72:ae:e8:4b:ff:73:c7:7e:
04:86:54:34:e6:e2:15:b1:40:39:55:8e:0f:c8:c4:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:4B:5B:7D:7E:E6:EF:BA:CA:43:6D:F5:D3:B9:8A:0F:7D:B7:C2
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a2:55:13:2b:dc:07:a7:d6:14:25:d5:70:ad:36:70:7e:14:
48:a6:e6:94:e7:f6:ee:20:05:97:81:25:b2:ab:63:ef:7a:12:
6e:ea:da:65:f0:f1:6b:5d:0b:43:87:e3:81:ed:f8:c7:4a:3b:
d0:91:2a:ef:2e:e2:24:1a:63:c2:0f:83:31:ed:68:3d:84:21:
ab:d3:c3:d6:71:c8:bd:c1:10:ed:8c:62:a7:dd:a7:6a:ad:41:
e4:21:22:61:c0:96:62:b7:69:29:d6:12:08:14:c2:3a:db:c6:
85:c2:78:07:a9:12:0d:8d:6b:d3:de:02:be:de:db:d1:1f:f4:
0e:cd:ff:ee:a4:49:be:19:70:f4:fb:6b:12:c1:df:41:ea:17:
89:2c:8e:7e:2b:63:b4:0e:fd:fe:b6:41:93:14:f1:2e:bc:85:
3e:7e:c4:be:1a:44:3a:87:8d:2f:0c:61:cb:a8:d4:eb:d4:ed:
73:78:64:5a:2e:13:64:e1:cb:87:9e:74:93:0c:98:74:56:31:
15:ba:7c:9f:83:3e:7c:43:d9:b1:9b:29:65:e5:87:5d:4e:7f:
a1:5e:b8:9d:bd:01:dc:9e:91:07:9b:e3:f4:51:d9:a3:00:18:
a5:7b:94:97:86:d8:c9:15:c9:01:a7:ba:55:de:6b:26:19:68:
1a:48:49:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Ak1vqpLXyNzUjMezi2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGIwZjg4M2NmOTQ0OTE0NTFlOTA4YzZlNjgyYWNlMzZi
MTM2MDIwHhcNMjUxMDE5MDUwMTI2WhcNMjUxMDIwMDUwMTI2WjAzMTEwLwYDVQQD
Eyg1ZTZiNGI1YjdkN2VlNmVmYmFjYTQzNmRmNWQzYjk4YTBmN2RiN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxlZt1xQ8t8z3DysbrtCB3WzUS7
68xACsA/qZGTU0zbPhv/WNy9Nl+ejLZgLbuY6gPhFBRfCB1zOW54jBMK8dkvv8As
hqL94LyOQhywCeQh/D+l08Eg71/f0NDR2Roc+GcWXjTaC5iwUafDlCrUZRGjfnQk
D8BCIkPT+tU9wL8ErwUhmCZ4XtGwPRC+N8LWBBqXUj9QND1cn/+rh+Q6ri4vbuD7
Ccvv6pLpUASb7k7fYQLkaLnpZmmDYUh+MsKu94NfzXHsNyxeuvWZPKCuqJ3r9LMs
CG4q0b/QJGgMi1zYfn+L+VjFcq7oS/9zx34EhlQ05uIVsUA5VY4PyMQUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5rS1t9fubvuspDbfXTuYoPfbfCMB8GA1UdIwQY
MBaAFDHbD4g8+USRRR6QjG5oKs42sTYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTIt
OTIxYTJlN2E1NjA4LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTItOTIxYTJlN2E1NjA4
LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6JVEyvc
B6fWFCXVcK02cH4USKbmlOf27iAFl4Elsqtj73oSburaZfDxa10LQ4fjge34x0o7
0JEq7y7iJBpjwg+DMe1oPYQhq9PD1nHIvcEQ7Yxip92naq1B5CEiYcCWYrdpKdYS
CBTCOtvGhcJ4B6kSDY1r094Cvt7b0R/0Ds3/7qRJvhlw9PtrEsHfQeoXiSyOfitj
tA79/rZBkxTxLryFPn7EvhpEOoeNLwxhy6jU69Ttc3hkWi4TZOHLh550kwyYdFYx
Fbp8n4M+fEPZsZspZeWHXU5/oV64nb0B3J6RB5vj9FHZowAYpXuUl4bYyRXJAae6
Vd5rJhloGkhJuw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:28 2025 by rpki-client