
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: YzZ3MD+ixphcDnWg6rDKTRBSCSQu33G5+aMt5R/SbqI=
Subject key identifier: 17:53:1D:62:6C:EA:23:EA:B8:F9:43:69:B8:ED:C0:BF:31:71:66:02
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 0199FC2177D284DFF277EB8C2E1953FCE9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: Znm5iGxrp6o9wUzbV3Z+G9K08pqrk5bEVhywLLARvXw=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:77:d2:84:df:f2:77:eb:8c:2e:19:53:fc:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=17531d626cea23eab8f94369b8edc0bf31716602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:9e:87:da:22:ab:8b:c2:b3:4c:a6:8d:55:
da:39:93:b4:ed:06:8f:c7:c2:3e:f3:ab:12:f6:bb:
8c:3c:80:94:75:fe:3a:8d:0d:d5:b5:f3:86:51:1d:
80:ed:35:6f:b0:d5:dd:f5:c1:d6:f5:b9:f2:ac:7f:
30:6c:2e:4a:34:18:f4:a7:e3:0e:53:41:e7:c3:0f:
3f:17:b7:6f:65:5b:e1:36:ab:95:37:d5:16:85:ff:
24:b1:e0:e3:e7:e7:f5:47:2c:e2:96:98:7e:22:34:
04:95:3f:ab:ea:96:93:1a:0f:dc:e8:6b:7d:7a:42:
7c:07:b4:e6:97:1a:85:64:08:c7:cc:f9:f9:4a:6a:
67:78:08:63:8a:4f:12:02:d4:66:eb:49:fc:64:61:
8d:90:27:b7:d6:10:3a:59:6a:15:08:b4:c8:ad:ce:
7f:6e:6a:98:0a:90:97:15:da:bd:fe:c5:18:84:80:
86:96:d6:e0:48:ce:a9:3e:a6:f4:99:39:d9:f8:48:
ff:f2:cc:0c:86:87:e9:72:7f:81:af:ae:31:f8:60:
9f:8e:42:f2:0e:2d:2c:b8:8b:dc:ff:26:b8:d8:8d:
ac:87:e1:10:57:fb:4e:85:ea:96:c9:6c:e2:ca:b2:
eb:51:89:be:8e:1b:2b:cc:56:81:ea:f0:b1:92:77:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:53:1D:62:6C:EA:23:EA:B8:F9:43:69:B8:ED:C0:BF:31:71:66:02
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d1:41:61:16:e4:47:ec:8d:78:4c:d0:71:a1:91:30:0a:d1:
3e:90:ee:3f:67:aa:d8:3a:c3:ca:6c:8f:85:44:99:87:e8:c2:
85:11:29:9c:7e:b1:b3:7c:f7:40:cc:f6:0b:5a:9f:04:fb:9d:
b4:91:d4:9e:04:d2:85:e9:56:ca:51:38:36:8b:61:5f:b8:13:
1b:b8:9d:7d:24:48:56:bd:09:eb:f2:d4:3e:8b:23:cc:56:4c:
3c:0c:3f:97:54:7a:e5:86:65:3a:ce:ea:a7:af:29:5a:69:21:
66:bd:f9:db:eb:c1:11:b5:de:d8:f4:43:28:23:0c:83:75:86:
e4:bb:e3:59:fb:29:4d:7c:2f:5f:d2:8c:eb:2f:51:8c:18:a3:
69:98:a2:32:24:79:7f:90:a3:63:4b:11:54:a4:4d:ad:7d:c1:
bd:3c:0e:75:f4:6a:30:86:c0:d8:af:01:2d:df:bc:51:12:d0:
6c:44:23:99:9f:f9:b3:64:54:4c:01:66:67:6d:fb:2d:b5:0c:
b2:2a:24:76:b1:c4:2d:91:33:83:d0:4b:49:d2:b7:14:af:9f:
cf:32:89:a0:a2:3d:d4:2c:15:80:fa:a0:d4:fe:50:0d:dd:2b:
e9:5d:9d:6b:65:90:aa:04:fe:15:b4:d8:29:c5:dc:fc:31:2b:
73:d9:e9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXfShN/yd+uMLhlT/OnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx
YzFhZWYwHhcNMjUxMDE5MTEwMTE1WhcNMjUxMDIwMTEwMTE1WjAzMTEwLwYDVQQD
EygxNzUzMWQ2MjZjZWEyM2VhYjhmOTQzNjliOGVkYzBiZjMxNzE2NjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mieh9oiq4vCs0ymjVXaOZO07QaP
x8I+86sS9ruMPICUdf46jQ3VtfOGUR2A7TVvsNXd9cHW9bnyrH8wbC5KNBj0p+MO
U0Hnww8/F7dvZVvhNquVN9UWhf8kseDj5+f1Ryzilph+IjQElT+r6paTGg/c6Gt9
ekJ8B7TmlxqFZAjHzPn5SmpneAhjik8SAtRm60n8ZGGNkCe31hA6WWoVCLTIrc5/
bmqYCpCXFdq9/sUYhICGltbgSM6pPqb0mTnZ+Ej/8swMhofpcn+Br64x+GCfjkLy
Di0suIvc/ya42I2sh+EQV/tOheqWyWziyrLrUYm+jhsrzFaB6vCxkneD/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdTHWJs6iPquPlDabjtwL8xcWYCMB8GA1UdIwQY
MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt
MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj
LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9FBYRbk
R+yNeEzQcaGRMArRPpDuP2eq2DrDymyPhUSZh+jChREpnH6xs3z3QMz2C1qfBPud
tJHUngTShelWylE4NothX7gTG7idfSRIVr0J6/LUPosjzFZMPAw/l1R65YZlOs7q
p68pWmkhZr352+vBEbXe2PRDKCMMg3WG5LvjWfspTXwvX9KM6y9RjBijaZiiMiR5
f5CjY0sRVKRNrX3BvTwOdfRqMIbA2K8BLd+8URLQbEQjmZ/5s2RUTAFmZ237LbUM
siokdrHELZEzg9BLSdK3FK+fzzKJoKI91CwVgPqg1P5QDd0r6V2da2WQqgT+FbTY
KcXc/DErc9npfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:05 2025 by rpki-client