
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: I+qKdVvktQHQTGtxjC5jNp/iPU+HthB0VZppsuo8/os=
Subject key identifier: D9:A3:53:FB:77:C4:91:97:7B:A7:33:36:07:2B:A6:79:2D:AC:F4:C6
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 0199FD6AE00B61D19F58C790B823494EA382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 04F7
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: 2Waz4fuByyC45iobA2aWrS9k9npgtG6PinBRiqywRzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e0:0b:61:d1:9f:58:c7:90:b8:23:49:4e:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=d9a353fb77c491977ba73336072ba6792dacf4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:66:29:d1:a0:00:8d:d3:61:66:b2:92:64:
26:b0:f9:92:be:8a:e4:d6:39:f5:56:e1:25:a9:47:
cb:61:f6:c5:0f:a1:8d:30:c6:5c:e3:a3:bf:5f:4a:
5d:a3:b1:fd:0c:e1:c3:c5:7d:7a:1c:0e:f3:d8:d8:
46:c1:63:7e:73:cb:03:d3:6c:b4:4b:2b:43:d7:2f:
15:15:52:1c:43:9b:59:8e:6f:ae:7e:69:fa:aa:22:
50:7c:5a:dd:10:1a:0e:1d:bd:96:3e:a5:ee:ec:d3:
c6:65:10:32:4f:4a:d7:34:70:85:2d:96:fc:01:4c:
0a:af:19:8a:22:ae:39:8e:b5:41:fd:7c:2e:40:be:
fd:0c:2b:26:5d:76:55:8d:1e:8c:1e:7e:9a:41:d2:
cb:f2:05:fc:b4:8a:89:a3:36:4a:99:d8:f8:85:d3:
ef:18:8f:43:20:7a:2b:d8:6b:c9:d4:05:db:eb:25:
a4:e1:f3:db:77:20:65:85:68:f8:b4:f2:bc:97:47:
ca:32:ec:ea:90:81:e9:88:96:79:8e:e4:f6:e4:e2:
53:96:b2:36:81:8f:a5:c2:06:47:1a:67:a7:03:4a:
24:ee:3a:7a:eb:7f:82:bd:f1:e7:17:f1:93:f5:87:
55:75:f3:34:e7:0e:d6:1d:08:a1:a2:cb:1f:23:53:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:53:FB:77:C4:91:97:7B:A7:33:36:07:2B:A6:79:2D:AC:F4:C6
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:51:d9:72:e1:e0:71:5d:e7:13:12:6d:28:10:f0:9d:39:
b7:77:ee:6b:c8:b4:c1:78:a7:e4:31:95:1c:0e:ab:20:ec:14:
b2:dd:c5:05:c6:bb:23:7e:13:75:36:bb:41:ff:ab:2a:54:b8:
49:17:59:96:01:f2:6b:26:dc:40:56:97:55:94:46:89:ad:d7:
ef:8d:53:46:3e:fe:b9:80:0a:56:6f:e8:f8:bd:f1:be:fe:78:
08:50:dc:0e:e9:bc:fe:22:b7:59:5d:c1:e2:35:3e:a9:70:9e:
b6:dd:88:7c:02:2d:ec:9b:db:45:53:1d:b8:9e:9a:00:b7:f4:
11:6a:4c:c2:28:07:f7:dd:4f:e8:ed:44:00:f7:37:fd:aa:ec:
c6:de:ed:ea:2b:f7:68:a6:51:29:37:2d:ed:95:83:a1:5e:55:
e9:b8:83:5f:fb:14:4e:16:1d:21:b3:ae:d9:0d:59:67:4c:63:
f2:b1:00:d4:45:7e:05:2f:5d:66:8f:49:39:0c:b0:8e:31:61:
67:5d:84:d4:75:19:6b:27:00:81:5b:38:b3:cb:ab:92:2c:8e:
e3:a5:ab:74:b4:9a:99:3f:3f:c3:c0:a6:c6:38:05:a6:5a:e6:
0b:37:60:c2:96:f6:7c:d7:65:46:2f:76:1e:bf:86:6a:b6:d5:
0b:cb:4c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9auALYdGfWMeQuCNJTqOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YWNhNDAxNmFmODVkNTk2OTU0ODRjZDYxM2NmMTg5NmRm
ZDU5YTEwHhcNMjUxMDE5MTcwMTAzWhcNMjUxMDIwMTcwMTAzWjAzMTEwLwYDVQQD
EyhkOWEzNTNmYjc3YzQ5MTk3N2JhNzMzMzYwNzJiYTY3OTJkYWNmNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0dmKdGgAI3TYWaykmQmsPmSvork
1jn1VuElqUfLYfbFD6GNMMZc46O/X0pdo7H9DOHDxX16HA7z2NhGwWN+c8sD02y0
SytD1y8VFVIcQ5tZjm+ufmn6qiJQfFrdEBoOHb2WPqXu7NPGZRAyT0rXNHCFLZb8
AUwKrxmKIq45jrVB/XwuQL79DCsmXXZVjR6MHn6aQdLL8gX8tIqJozZKmdj4hdPv
GI9DIHor2GvJ1AXb6yWk4fPbdyBlhWj4tPK8l0fKMuzqkIHpiJZ5juT25OJTlrI2
gY+lwgZHGmenA0ok7jp663+CvfHnF/GT9YdVdfM05w7WHQihossfI1MLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmjU/t3xJGXe6czNgcrpnktrPTGMB8GA1UdIwQY
MBaAFJmspAFq+F1ZaVSEzWE88Ylt/VmhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAt
Y2JiYWM2ZTRhZDcxLzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAtY2JiYWM2ZTRhZDcx
LzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWVR2XLh
4HFd5xMSbSgQ8J05t3fua8i0wXin5DGVHA6rIOwUst3FBca7I34TdTa7Qf+rKlS4
SRdZlgHyaybcQFaXVZRGia3X741TRj7+uYAKVm/o+L3xvv54CFDcDum8/iK3WV3B
4jU+qXCett2IfAIt7JvbRVMduJ6aALf0EWpMwigH991P6O1EAPc3/arsxt7t6iv3
aKZRKTct7ZWDoV5V6biDX/sUThYdIbOu2Q1ZZ0xj8rEA1EV+BS9dZo9JOQywjjFh
Z12E1HUZaycAgVs4s8urkiyO46WrdLSamT8/w8CmxjgFplrmCzdgwpb2fNdlRi92
Hr+GarbVC8tMXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:00 2025 by rpki-client