Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: yGoUWJ+kQMdaxJKBrn0eD9y6hxbkJxg8sse8Ahmuwiw=
Subject key identifier: 72:2B:9E:2C:C0:18:28:5B:1E:67:C2:C1:51:6B:82:E9:B0:6E:62:F0
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 0199FB7C7B332FF0F9AF0397D57D4A7366DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 159A
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: vMi0/+1TAJpfMk35fMdPISvW7XYU1VejYFMKf71CjxQ=)
2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7b:33:2f:f0:f9:af:03:97:d5:7d:4a:73:66:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=722b9e2cc018285b1e67c2c1516b82e9b06e62f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:e6:63:35:14:71:fa:3a:86:24:0d:f0:c5:
64:d3:6b:68:62:0d:e8:30:46:17:f7:fa:37:d1:04:
c3:c3:de:a5:d0:b0:5e:ba:d1:72:7d:73:1c:77:b8:
c7:d4:77:15:97:c3:bb:a7:99:34:27:ea:e5:7f:b4:
99:bd:db:7d:0c:b4:55:e9:31:57:91:5c:63:de:4c:
a9:a4:46:7e:3f:17:d1:c3:da:f9:82:e2:a8:7a:73:
e5:3b:9f:44:fa:32:71:07:58:4e:4c:1d:38:d2:23:
a1:12:d1:3c:09:52:2d:3b:60:67:bc:27:f9:48:b0:
19:8f:7d:c8:c7:39:cd:0a:41:4a:71:71:e5:ef:1a:
26:05:75:3f:70:ef:84:32:c7:df:54:4c:3c:24:6e:
19:f2:44:9f:0a:6b:a2:78:cd:1c:30:ab:c2:f2:1e:
d1:7a:9f:af:e0:13:12:13:3c:3c:41:75:4f:11:40:
ff:7d:98:07:eb:bc:d5:89:45:1d:37:f5:4b:3f:79:
44:f9:73:04:2d:ad:b5:70:1d:f1:43:c6:a5:40:fa:
05:1b:9f:04:27:9c:f9:8f:90:e4:52:a1:a5:00:bb:
d3:e5:f0:af:56:d3:c2:3a:90:e5:d8:52:9f:94:fd:
d6:65:85:21:dc:3b:c7:5a:6d:c7:42:bb:54:45:dc:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:9E:2C:C0:18:28:5B:1E:67:C2:C1:51:6B:82:E9:B0:6E:62:F0
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:6e:50:c8:46:84:bc:09:6e:6f:51:06:c7:86:78:eb:c7:
10:75:c5:37:0e:65:e0:57:59:21:46:cd:89:c3:76:19:22:b4:
a8:78:b6:8f:57:75:86:38:58:4e:cf:05:dd:e8:9f:23:e2:c3:
5e:7a:7e:ed:46:39:d9:e5:84:37:41:4c:87:af:ad:ff:52:b6:
e7:d6:dd:df:bc:4f:8d:ba:46:63:61:ae:97:27:87:49:bd:a9:
98:66:13:0f:28:56:5c:73:1b:0a:f3:1d:b7:ab:4a:eb:0a:1c:
ff:77:29:5e:7b:f1:97:91:9a:15:51:2b:22:d4:25:ac:f2:c7:
23:0a:2c:35:9b:8a:27:25:86:9c:66:48:e2:0c:1d:a1:82:f9:
cf:14:b1:35:b5:86:9d:3c:cf:db:6b:d8:04:17:2a:25:9f:84:
f6:6c:f2:3c:6b:67:a4:87:6e:eb:30:9a:a4:13:2c:cc:cd:f1:
6c:2a:5c:b5:e6:3e:8e:df:e4:94:f3:cc:55:b9:ce:a7:6f:4d:
8d:6b:a5:5f:e9:2e:2f:47:68:b8:4d:92:7b:b8:b7:ad:c3:aa:
73:7e:bd:e5:24:8e:89:07:4c:e5:e8:86:8a:68:2e:5f:e2:a2:
54:f5:fb:5f:92:d2:b9:7c:24:53:21:90:af:9e:77:16:0c:5e:
38:be:b5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHszL/D5rwOX1X1Kc2bfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0
ZWYyNTYwHhcNMjUxMDE5MDgwMTAzWhcNMjUxMDIwMDgwMTAzWjAzMTEwLwYDVQQD
Eyg3MjJiOWUyY2MwMTgyODViMWU2N2MyYzE1MTZiODJlOWIwNmU2MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxjmYzUUcfo6hiQN8MVk02toYg3o
MEYX9/o30QTDw96l0LBeutFyfXMcd7jH1HcVl8O7p5k0J+rlf7SZvdt9DLRV6TFX
kVxj3kyppEZ+PxfRw9r5guKoenPlO59E+jJxB1hOTB040iOhEtE8CVItO2BnvCf5
SLAZj33IxznNCkFKcXHl7xomBXU/cO+EMsffVEw8JG4Z8kSfCmuieM0cMKvC8h7R
ep+v4BMSEzw8QXVPEUD/fZgH67zViUUdN/VLP3lE+XMELa21cB3xQ8alQPoFG58E
J5z5j5DkUqGlALvT5fCvVtPCOpDl2FKflP3WZYUh3DvHWm3HQrtURdzzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIrnizAGChbHmfCwVFrgumwbmLwMB8GA1UdIwQY
MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt
ZTJkM2Q5NGNjMjM4LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4
LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMRuUMhG
hLwJbm9RBseGeOvHEHXFNw5l4FdZIUbNicN2GSK0qHi2j1d1hjhYTs8F3eifI+LD
Xnp+7UY52eWEN0FMh6+t/1K259bd37xPjbpGY2GulyeHSb2pmGYTDyhWXHMbCvMd
t6tK6woc/3cpXnvxl5GaFVErItQlrPLHIwosNZuKJyWGnGZI4gwdoYL5zxSxNbWG
nTzP22vYBBcqJZ+E9mzyPGtnpIdu6zCapBMszM3xbCpcteY+jt/klPPMVbnOp29N
jWulX+kuL0douE2Se7i3rcOqc3695SSOiQdM5eiGimguX+KiVPX7X5LSuXwkUyGQ
r553FgxeOL61dQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:22 2025 by rpki-client