Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: ZhJRVh+zpejwYqYqUc8wGnDdKyrLoBA9Qs0GpEuaxqs=
Subject key identifier: 25:EF:6B:2B:CF:E0:8A:CF:F3:CB:DC:5B:B3:03:75:1C:F4:E4:33:71
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 0199FC8FA89AFFC8A7A53FE3F2BEDA122176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0667
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
2: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
3: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: i0NZ1Yu1gBy/x/mOjgoW9suhl9OQqx0z3WsJps3pkhA=)
4: hyttk-VciYASeJhwhte3fbo6duo.roa (hash: 7BwJiVdV5v0GFak7++7KK6Hv1MdzUEXFe+dIhNvsD1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a8:9a:ff:c8:a7:a5:3f:e3:f2:be:da:12:21:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=25ef6b2bcfe08acff3cbdc5bb303751cf4e43371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:68:f8:44:3a:7a:bf:ee:78:34:f6:13:57:
66:bd:cf:79:13:20:cd:ae:6a:1b:76:5e:4f:7d:ae:
c0:65:8d:84:95:fb:7f:bd:65:06:7c:60:f2:0f:d3:
9e:4a:ba:93:7a:88:0a:57:17:fe:9e:8c:f5:33:4f:
ae:86:b4:b0:8b:03:46:21:77:81:88:29:91:7d:c4:
54:f0:29:48:df:5c:5c:48:c6:95:a0:8e:70:a5:eb:
4e:22:fd:46:81:76:f9:ef:59:fb:12:57:1b:ee:86:
42:f8:c8:5e:7d:1f:98:12:46:7c:e9:11:e6:0e:7a:
a9:f1:95:ff:46:4b:d4:b0:aa:5f:72:20:4d:c4:d8:
35:1b:57:80:18:4e:12:80:07:03:10:fe:28:4a:65:
d5:42:eb:25:36:2f:bd:dd:af:6c:cd:04:99:8a:45:
59:07:21:c1:7c:06:38:90:7e:6e:75:fa:fd:1b:b7:
83:13:1b:1d:68:00:f9:e1:5f:be:29:8a:85:4a:ff:
9b:92:6f:10:1c:aa:fa:6a:96:89:a4:4a:92:06:58:
e9:64:72:37:56:e0:45:fc:68:87:79:b0:66:c2:eb:
d4:46:d8:97:22:69:19:eb:6e:10:12:f7:4d:1e:ac:
52:4b:f6:22:f3:1f:dd:93:79:0e:10:5f:18:49:46:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:6B:2B:CF:E0:8A:CF:F3:CB:DC:5B:B3:03:75:1C:F4:E4:33:71
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:72:9c:80:dd:0e:cc:a6:d8:52:fb:70:2a:35:c0:63:a5:
09:8a:f6:24:d5:ff:8b:73:55:43:3b:5d:1c:88:34:e5:27:8f:
ef:85:73:b4:07:4b:c7:4d:81:c5:65:bc:47:04:64:c5:1d:e1:
88:c6:46:43:04:86:1c:06:1e:ef:5f:8b:69:2a:1d:3b:12:08:
f3:2f:ac:07:7d:33:fc:0e:b6:3b:9b:99:ac:e7:3f:12:20:00:
50:ef:86:bf:0e:b3:26:50:21:cb:ec:6c:c9:a1:8a:3d:cc:b0:
29:47:53:e2:fb:17:64:2d:db:fe:4e:37:71:64:27:7f:8d:27:
fd:d5:f1:d2:87:77:88:19:17:a7:e6:99:39:65:8c:1e:64:61:
70:95:83:70:39:da:62:8c:75:5c:13:e3:fb:bb:43:ca:ee:94:
d1:c2:4f:9e:30:7d:b6:6d:59:08:b4:64:32:f9:2f:80:32:d1:
de:1a:f0:4d:e0:1e:f6:e1:32:75:9f:53:12:12:43:8b:78:d3:
4f:dd:f6:79:e3:7a:63:5b:a7:7a:3f:10:01:cc:5a:bd:e9:85:
08:66:d1:68:8e:c0:94:25:8c:18:f4:db:b8:b7:28:7e:fb:f8:
a3:ec:8c:14:a6:b4:1b:9d:05:aa:c2:1d:45:29:bd:e9:50:ae:
6e:3c:28:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6ia/8inpT/j8r7aEiF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1
MWRkZjMwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
EygyNWVmNmIyYmNmZTA4YWNmZjNjYmRjNWJiMzAzNzUxY2Y0ZTQzMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscNo+EQ6er/ueDT2E1dmvc95EyDN
rmobdl5Pfa7AZY2Elft/vWUGfGDyD9OeSrqTeogKVxf+noz1M0+uhrSwiwNGIXeB
iCmRfcRU8ClI31xcSMaVoI5wpetOIv1GgXb571n7Elcb7oZC+MhefR+YEkZ86RHm
Dnqp8ZX/RkvUsKpfciBNxNg1G1eAGE4SgAcDEP4oSmXVQuslNi+93a9szQSZikVZ
ByHBfAY4kH5udfr9G7eDExsdaAD54V++KYqFSv+bkm8QHKr6apaJpEqSBljpZHI3
VuBF/GiHebBmwuvURtiXImkZ624QEvdNHqxSS/Yi8x/dk3kOEF8YSUbdhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXvayvP4IrP88vcW7MDdRz05DNxMB8GA1UdIwQY
MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt
ODBlNDI3NTk2YjVkLzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUtODBlNDI3NTk2YjVk
LzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV9ynIDd
Dsym2FL7cCo1wGOlCYr2JNX/i3NVQztdHIg05SeP74VztAdLx02BxWW8RwRkxR3h
iMZGQwSGHAYe71+LaSodOxII8y+sB30z/A62O5uZrOc/EiAAUO+Gvw6zJlAhy+xs
yaGKPcywKUdT4vsXZC3b/k43cWQnf40n/dXx0od3iBkXp+aZOWWMHmRhcJWDcDna
Yox1XBPj+7tDyu6U0cJPnjB9tm1ZCLRkMvkvgDLR3hrwTeAe9uEydZ9TEhJDi3jT
T932eeN6Y1unej8QAcxavemFCGbRaI7AlCWMGPTbuLcofvv4o+yMFKa0G50FqsId
RSm96VCubjwokQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:42 2025 by rpki-client