Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: BWg6HH7fUCB9uCVokN0jHMqGwuOAU2pu9fWl2REPaq4=
Subject key identifier: 33:04:F0:1C:A3:26:EA:F4:60:EA:9A:40:8F:0D:29:B3:B4:39:1B:50
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 0199FC58F8C5F7E8A44A17A7E63CBB5D2CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 141D
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: a20O6EdyFKTbxC3tJ0ujio6fCEKHItagPzpKZPp3T90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f8:c5:f7:e8:a4:4a:17:a7:e6:3c:bb:5d:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=3304f01ca326eaf460ea9a408f0d29b3b4391b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:0c:bf:45:33:ba:e0:75:6a:bf:0a:b6:e0:
5a:55:a2:26:b1:cd:11:2f:e2:8c:b0:93:8c:ff:5f:
92:96:5a:34:6f:5f:0a:e9:09:89:38:d7:6d:6a:75:
34:f6:0e:48:c6:e7:a5:2a:7f:76:d3:cd:35:83:db:
4b:c9:dd:cd:8d:fb:3a:5d:96:48:3c:fa:b1:af:4a:
63:e3:00:c2:d5:41:3d:3d:f4:af:31:94:c4:c4:d7:
eb:7e:b2:29:67:f9:ff:6d:db:13:ef:52:44:8f:25:
b0:d3:c4:13:7d:94:0e:b8:32:df:24:97:96:b7:67:
f3:00:76:75:78:4d:da:e7:55:23:a0:02:16:2f:27:
67:42:5c:39:55:23:88:4e:cd:de:92:ed:83:18:a0:
92:e9:d3:97:1a:75:74:fb:84:93:d6:a3:97:6b:f7:
e5:9f:b1:52:ba:b9:dc:78:f0:ce:d0:bb:c7:89:a6:
eb:59:39:0c:73:b7:b7:66:55:7a:07:82:78:7d:94:
36:cb:fb:04:dc:3c:32:0f:7f:e2:e1:72:9b:4f:d7:
e5:50:33:48:f6:e6:12:bc:2e:69:2c:41:06:90:43:
9b:ab:0a:de:98:9b:10:71:af:f1:da:7f:99:e4:11:
f0:f0:f3:91:b8:a5:ff:b8:dc:a0:fa:57:c8:23:95:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:F0:1C:A3:26:EA:F4:60:EA:9A:40:8F:0D:29:B3:B4:39:1B:50
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:fd:bc:7d:2a:33:8a:e2:4d:22:7a:fe:c0:ae:48:67:81:
07:97:7d:74:6e:da:f7:61:0e:23:4b:b6:1d:ab:82:c3:7b:ea:
b2:a2:7a:c3:e8:43:c5:93:71:2f:c8:c2:73:36:5f:fb:cc:ee:
f3:c9:4d:5f:74:84:1c:34:0e:1c:e3:97:a0:7e:a5:88:8f:ab:
28:bd:a3:a0:08:4c:74:69:2e:96:1f:29:6b:4a:15:50:24:49:
13:6f:3a:93:3e:db:63:f0:e1:ec:f3:e3:51:f2:52:b6:73:74:
4a:10:0b:3f:6e:62:cf:fc:87:eb:75:28:59:e8:4e:7e:cb:56:
ec:56:ff:8a:18:21:10:06:27:96:33:f7:20:d1:be:41:aa:92:
a6:d0:3e:07:c5:37:03:73:39:7f:6a:f6:8b:83:37:a6:c8:6e:
0f:af:c5:11:36:c6:18:a2:1d:1a:54:ca:5a:7a:6e:5f:8d:31:
e1:24:a9:28:07:77:41:5e:9f:dc:9e:4a:30:21:68:f5:b2:e3:
69:25:5f:e1:12:e5:34:ba:f1:cd:7d:e9:cf:dc:ba:fa:7c:b5:
d8:54:98:0c:ef:2c:7b:6d:ee:6e:4c:37:3b:03:73:dc:86:5d:
bd:86:49:95:93:9c:70:43:82:e8:e9:6b:a0:3b:33:e9:79:3b:
0c:e5:f9:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPjF9+ikShen5jy7XSyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjUxMDE5MTIwMTUzWhcNMjUxMDIwMTIwMTUzWjAzMTEwLwYDVQQD
EygzMzA0ZjAxY2EzMjZlYWY0NjBlYTlhNDA4ZjBkMjliM2I0MzkxYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1cMv0UzuuB1ar8KtuBaVaImsc0R
L+KMsJOM/1+Sllo0b18K6QmJONdtanU09g5IxuelKn920801g9tLyd3Njfs6XZZI
PPqxr0pj4wDC1UE9PfSvMZTExNfrfrIpZ/n/bdsT71JEjyWw08QTfZQOuDLfJJeW
t2fzAHZ1eE3a51UjoAIWLydnQlw5VSOITs3eku2DGKCS6dOXGnV0+4ST1qOXa/fl
n7FSurncePDO0LvHiabrWTkMc7e3ZlV6B4J4fZQ2y/sE3DwyD3/i4XKbT9flUDNI
9uYSvC5pLEEGkEObqwremJsQca/x2n+Z5BHw8PORuKX/uNyg+lfII5WnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDME8ByjJur0YOqaQI8NKbO0ORtQMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQj9vH0q
M4riTSJ6/sCuSGeBB5d9dG7a92EOI0u2HauCw3vqsqJ6w+hDxZNxL8jCczZf+8zu
88lNX3SEHDQOHOOXoH6liI+rKL2joAhMdGkulh8pa0oVUCRJE286kz7bY/Dh7PPj
UfJStnN0ShALP25iz/yH63UoWehOfstW7Fb/ihghEAYnljP3ING+QaqSptA+B8U3
A3M5f2r2i4M3pshuD6/FETbGGKIdGlTKWnpuX40x4SSpKAd3QV6f3J5KMCFo9bLj
aSVf4RLlNLrxzX3pz9y6+ny12FSYDO8se23ubkw3OwNz3IZdvYZJlZOccEOC6Olr
oDsz6Xk7DOX5rA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:31 2025 by rpki-client