Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: 8+Tt31uP6f37+7fBXrnMJKQYxu+JmXtg8kee0tQO++I=
Subject key identifier: 58:12:86:B9:2A:DE:F9:27:02:2F:9E:43:F2:1C:3C:5B:20:E9:81:36
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 0199FC58E767696E8D98CD7089B174988A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 0135
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: +B1HX7v7gy8XbUETn1iPROu1VyrrpehSY7tNR444Zz4=)
2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e7:67:69:6e:8d:98:cd:70:89:b1:74:98:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=581286b92adef927022f9e43f21c3c5b20e98136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:94:3d:31:ee:3f:65:e1:75:d5:52:05:b1:
20:00:51:eb:6d:1f:d2:74:55:d0:2f:58:10:a9:17:
33:23:3f:ef:dd:f5:fe:e4:cd:69:75:3e:fb:d7:bd:
db:5f:39:af:14:a4:38:18:2e:8d:92:d4:db:23:76:
34:1b:79:08:44:31:10:a4:26:da:ef:ff:cf:4d:54:
54:29:af:32:fc:7a:ae:ac:c1:35:b6:23:81:45:23:
1d:f5:75:61:96:0e:df:1c:1c:f6:69:e6:00:46:33:
62:7b:6f:d2:00:36:23:9b:d2:ef:c5:cd:f0:db:5b:
d1:f1:42:5b:af:db:fc:6d:f3:b3:2d:9c:02:76:e5:
82:47:79:5a:38:3a:06:70:c5:5f:7c:14:d8:b9:71:
3b:34:f4:cd:1f:5a:4c:fa:de:ab:7f:84:d2:89:7f:
d1:27:23:08:75:c6:3b:6c:c5:c2:ff:34:9f:6f:3d:
7f:3b:a7:7c:6c:fc:6c:4c:39:70:6a:77:56:0e:84:
de:af:b3:7d:d1:f8:34:10:16:17:16:83:8f:1c:b4:
83:aa:c5:d4:cc:05:dc:65:2e:87:7b:5e:92:38:2a:
9d:cb:03:5c:64:d1:8e:2d:c2:cd:03:ea:50:79:81:
ff:87:22:9b:c3:2d:28:65:1a:c9:37:1a:a5:92:fa:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:86:B9:2A:DE:F9:27:02:2F:9E:43:F2:1C:3C:5B:20:E9:81:36
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:36:2f:2e:24:5e:0a:bb:e2:eb:28:5d:c1:80:57:2e:48:
c6:0c:b0:7a:2c:85:e7:8e:19:e7:aa:f7:5a:2c:92:a1:00:9b:
62:4e:08:0f:dc:33:ce:31:a8:6b:f3:32:09:f8:39:f3:47:a4:
c0:92:83:31:92:3d:9d:13:15:3c:21:a4:0e:79:00:4a:79:af:
eb:09:35:19:3a:e8:2e:22:ca:80:83:95:89:cc:ad:04:fa:2f:
ae:3c:92:a3:33:4f:33:d5:bc:5b:7c:fe:d1:8c:67:92:ef:60:
b7:52:c1:e1:59:91:52:80:e3:ae:c8:bb:8e:1e:dd:e6:b1:15:
b1:89:79:23:b6:c1:b9:10:61:ee:14:1a:f9:9b:d6:68:55:dc:
10:68:92:83:a7:68:2a:c3:72:f4:5f:bf:68:69:8c:78:02:01:
82:58:bd:b0:1e:e8:5b:4a:49:c8:d5:f8:1e:f0:41:6f:59:08:
40:01:9b:3a:a9:f7:e3:10:04:45:ff:d7:e4:24:c0:2a:c5:e9:
9e:34:8f:65:79:a5:d1:b2:c7:be:a8:76:1e:2d:ba:bd:0f:91:
40:54:53:9d:b8:ca:9c:e6:6c:da:c3:35:c4:83:d8:63:99:33:
3c:f9:b9:8d:0e:b8:a8:c9:75:fc:a4:2a:3a:ba:ba:42:15:1f:
43:c0:eb:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOdnaW6NmM1wibF0mIoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmM2YTYwNDIwM2UxOWJkMjM2YzBlMzY0MWFlNjk2NDRk
NGFhNzQwHhcNMjUxMDE5MTIwMTQ4WhcNMjUxMDIwMTIwMTQ4WjAzMTEwLwYDVQQD
Eyg1ODEyODZiOTJhZGVmOTI3MDIyZjllNDNmMjFjM2M1YjIwZTk4MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoCUPTHuP2XhddVSBbEgAFHrbR/S
dFXQL1gQqRczIz/v3fX+5M1pdT77173bXzmvFKQ4GC6NktTbI3Y0G3kIRDEQpCba
7//PTVRUKa8y/HqurME1tiOBRSMd9XVhlg7fHBz2aeYARjNie2/SADYjm9Lvxc3w
21vR8UJbr9v8bfOzLZwCduWCR3laODoGcMVffBTYuXE7NPTNH1pM+t6rf4TSiX/R
JyMIdcY7bMXC/zSfbz1/O6d8bPxsTDlwandWDoTer7N90fg0EBYXFoOPHLSDqsXU
zAXcZS6He16SOCqdywNcZNGOLcLNA+pQeYH/hyKbwy0oZRrJNxqlkvrpiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgShrkq3vknAi+eQ/IcPFsg6YE2MB8GA1UdIwQY
MBaAFP5samBCA+Gb0jbA42Qa5pZE1Kp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMt
MzE4NjM2YzRkYzg2LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMtMzE4NjM2YzRkYzg2
LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg42Ly4k
Xgq74usoXcGAVy5IxgyweiyF544Z56r3WiySoQCbYk4ID9wzzjGoa/MyCfg580ek
wJKDMZI9nRMVPCGkDnkASnmv6wk1GTroLiLKgIOVicytBPovrjySozNPM9W8W3z+
0Yxnku9gt1LB4VmRUoDjrsi7jh7d5rEVsYl5I7bBuRBh7hQa+ZvWaFXcEGiSg6do
KsNy9F+/aGmMeAIBgli9sB7oW0pJyNX4HvBBb1kIQAGbOqn34xAERf/X5CTAKsXp
njSPZXml0bLHvqh2Hi26vQ+RQFRTnbjKnOZs2sM1xIPYY5kzPPm5jQ64qMl1/KQq
Orq6QhUfQ8DroQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:58 2025 by rpki-client