Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: HYhYBOJbs6QiSL3MhEILkT4b1KY1DYzgeN5MUtw+FU8=
Subject key identifier: F9:CE:FB:40:24:D8:5A:8E:BE:86:D1:2C:40:20:D1:91:F2:02:6C:AF
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0199FB7CE04E7042F3EB4BDA70187F032A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 1413
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: aQwCkOY51hbrHvM2gIjkq50bLz6auOXVhjx2LxLmMUY=)
2: sv4EXNYI7McAyTz9VxEmavOg_ZI.roa (hash: pthqg1S6F7UF6pnwC1X+wqv/djtBaR5pS3UCBYsUWnw=)
3: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e0:4e:70:42:f3:eb:4b:da:70:18:7f:03:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=f9cefb4024d85a8ebe86d12c4020d191f2026caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:7b:02:22:b9:f0:02:1d:86:dd:88:19:3b:
4d:14:e8:15:b8:45:6b:6d:c4:9f:e0:cf:bb:9b:e8:
f2:8e:5a:e9:2f:0c:75:46:5b:72:dd:4c:39:f2:c9:
b2:16:55:36:f6:e4:0d:c4:aa:81:10:88:fa:7f:75:
11:17:a1:19:c6:0c:09:b5:56:d9:ba:3e:5d:cb:f1:
9f:83:1e:ab:d0:c9:c4:17:af:8e:e4:e5:d9:81:53:
55:c3:3e:68:47:d7:ef:5c:e1:fb:70:91:35:36:70:
d0:d1:e9:23:7f:5f:de:f9:f6:bd:ea:4b:86:23:1b:
32:d1:19:3f:9b:46:04:f0:e7:75:11:9f:7c:d7:6f:
64:4d:d6:84:ea:16:bb:56:87:81:4b:a9:d5:7f:57:
4f:02:29:0c:86:40:e8:a0:a8:6b:80:88:44:2c:9c:
56:1b:bd:7e:e9:df:43:de:e4:34:b1:94:98:67:d5:
d3:c0:bc:16:af:7b:4e:eb:0e:c7:ac:f1:6e:f3:dc:
31:5e:5e:89:bb:7a:ff:fa:a9:37:08:c2:0f:64:10:
40:e6:d4:a4:de:a7:1e:fc:a7:bc:79:76:00:c5:69:
e0:c2:f5:1f:6c:87:b9:4f:64:4e:0d:89:c7:b1:06:
fd:c7:fe:85:43:c3:3e:29:5a:ec:b1:10:34:a6:2d:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:FB:40:24:D8:5A:8E:BE:86:D1:2C:40:20:D1:91:F2:02:6C:AF
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:0f:d5:4a:1a:7a:32:e1:db:ab:47:b3:ae:bb:df:c5:6e:
ad:12:15:9a:5c:38:06:af:b0:20:c5:ed:12:9d:27:d2:f1:24:
ae:40:72:4a:02:a8:d2:94:4f:e3:35:b8:26:0d:97:3d:4b:4c:
99:7e:ce:c2:02:87:25:ef:9a:7d:d8:36:24:7e:e5:57:87:65:
99:97:03:8d:45:79:ed:5a:b8:76:1d:73:f5:7a:89:f7:a5:29:
87:1f:13:ef:d1:f2:a8:73:d3:59:b4:e1:fc:41:bb:01:9c:6d:
a3:89:1f:c1:53:fe:86:a5:f4:4f:42:41:15:ec:a6:f1:3b:7a:
11:75:1c:90:56:86:b3:21:07:fa:fa:ee:e1:89:5a:b2:94:a7:
0b:a0:5f:11:01:4d:f7:b1:d6:2c:5a:1f:1c:85:69:3e:6a:df:
8e:30:2a:35:55:0e:90:4b:30:75:2e:a9:15:7d:2c:9a:b4:bc:
80:46:33:5b:04:3a:06:13:a5:75:b3:65:65:da:e4:37:1a:2e:
23:24:d8:e0:1d:3f:40:cf:40:bc:2f:9f:58:54:c5:1b:9c:fa:
4d:2d:50:34:aa:6e:a3:81:df:4e:1b:a8:19:f6:2e:7a:39:33:
4f:bf:77:27:c8:f7:27:d3:83:06:cd:73:fc:58:9d:ae:b3:e5:
75:67:ae:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOBOcELz60vacBh/Ayp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz
MTQ3ZDgwHhcNMjUxMDE5MDgwMTI5WhcNMjUxMDIwMDgwMTI5WjAzMTEwLwYDVQQD
EyhmOWNlZmI0MDI0ZDg1YThlYmU4NmQxMmM0MDIwZDE5MWYyMDI2Y2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZ7AiK58AIdht2IGTtNFOgVuEVr
bcSf4M+7m+jyjlrpLwx1Rlty3Uw58smyFlU29uQNxKqBEIj6f3URF6EZxgwJtVbZ
uj5dy/Gfgx6r0MnEF6+O5OXZgVNVwz5oR9fvXOH7cJE1NnDQ0ekjf1/e+fa96kuG
Ixsy0Rk/m0YE8Od1EZ98129kTdaE6ha7VoeBS6nVf1dPAikMhkDooKhrgIhELJxW
G71+6d9D3uQ0sZSYZ9XTwLwWr3tO6w7HrPFu89wxXl6Ju3r/+qk3CMIPZBBA5tSk
3qce/Ke8eXYAxWngwvUfbIe5T2RODYnHsQb9x/6FQ8M+KVrssRA0pi0AawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnO+0Ak2FqOvobRLEAg0ZHyAmyvMB8GA1UdIwQY
MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt
ZDQ5MzQ0OTNhNjc5LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5
LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUegP1Uoa
ejLh26tHs66738VurRIVmlw4Bq+wIMXtEp0n0vEkrkBySgKo0pRP4zW4Jg2XPUtM
mX7OwgKHJe+afdg2JH7lV4dlmZcDjUV57Vq4dh1z9XqJ96Uphx8T79HyqHPTWbTh
/EG7AZxto4kfwVP+hqX0T0JBFeym8Tt6EXUckFaGsyEH+vru4YlaspSnC6BfEQFN
97HWLFofHIVpPmrfjjAqNVUOkEswdS6pFX0smrS8gEYzWwQ6BhOldbNlZdrkNxou
IyTY4B0/QM9AvC+fWFTFG5z6TS1QNKpuo4HfThuoGfYuejkzT793J8j3J9ODBs1z
/FidrrPldWeuNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:10 2025 by rpki-client