Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: iYZkda9WxDIgMfo/RJtqx4RK0kauoNVO5+z+w91aE88=
Subject key identifier: B6:A3:16:B0:BD:2E:16:CE:E3:3F:F4:1E:94:01:30:EA:D8:DE:2E:20
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019A00A350BB88523767223B5B7F1BA4AC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 08:01:34 +0000
Manifest this update: Mon 20 Oct 2025 08:01:34 +0000
Manifest next update: Tue 21 Oct 2025 08:01:34 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: PppSmOVwjHLCqQibSup2cg4UCPuvI7hUj8W14UgzTwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:50:bb:88:52:37:67:22:3b:5b:7f:1b:a4:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Oct 20 08:01:34 2025 GMT
Not After : Oct 21 08:01:34 2025 GMT
Subject: CN=b6a316b0bd2e16cee33ff41e940130ead8de2e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:36:db:aa:f2:a4:33:31:67:ce:0d:6a:7d:
e0:1d:a9:2c:d4:62:fe:f6:a5:da:ad:e6:7d:90:71:
d6:5b:31:72:1a:05:e1:42:f9:dc:fb:5a:5e:73:cd:
ca:0d:f5:b2:53:33:e6:89:1a:30:23:ee:2b:03:24:
a6:21:ed:1e:47:88:cb:af:34:59:e8:66:35:0c:b5:
57:a8:fb:21:98:12:3a:18:ea:ee:c0:d0:ff:6e:c8:
85:98:0c:b2:99:95:ca:d0:b4:6e:54:88:27:79:06:
d5:05:2c:65:18:08:7c:0b:92:25:9d:67:8f:e0:fa:
56:10:71:35:6e:6c:2b:ba:af:90:34:fe:57:d8:d2:
22:7d:c0:e3:0b:81:f0:5f:99:74:27:70:39:3a:d3:
8f:f7:da:f4:39:15:ff:a1:35:fe:ee:61:3d:0c:42:
4e:92:0a:33:2e:60:1f:e8:69:9f:1e:24:4b:a4:3c:
26:d8:42:ae:2b:ee:a2:2d:33:8c:db:4d:1c:34:a2:
8f:64:7e:3b:06:61:b4:9c:8e:b6:ad:66:01:db:cc:
7a:ff:43:3b:e5:4f:65:90:a7:24:42:dd:cf:23:50:
ed:95:85:e7:70:02:91:d7:89:25:af:03:4f:66:e2:
6e:d2:6e:dd:d2:39:33:ff:3b:6f:28:bd:a7:de:6d:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:16:B0:BD:2E:16:CE:E3:3F:F4:1E:94:01:30:EA:D8:DE:2E:20
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:45:29:3a:db:bf:ea:da:c5:cf:1e:44:1c:c7:24:fb:6a:fb:
56:8b:b8:94:37:05:55:5a:ce:9b:cb:5d:20:66:20:c1:b9:31:
89:80:c1:7e:8d:4d:a2:53:91:44:e8:db:4a:5a:4a:5e:5f:49:
54:24:9a:d1:58:93:91:d3:fe:e9:d8:f6:ea:11:4b:a4:bf:99:
e8:fc:ef:ec:d9:02:ad:96:ee:8c:89:d8:fb:dd:58:23:1c:29:
8b:52:72:b1:e5:ea:34:30:b9:33:dc:35:5c:78:ab:2d:b9:ae:
f3:5b:09:2e:7b:cc:e1:32:9a:c6:b0:f7:e7:c3:8f:1f:d3:ef:
5a:2d:46:6f:0f:20:a1:25:4f:e6:4e:f0:d9:85:40:d5:92:a2:
00:74:44:9b:da:c4:4a:72:8b:c6:98:56:e5:e9:90:90:59:46:
3a:8f:63:a0:96:6b:fb:59:55:f8:70:33:dd:67:d7:d0:eb:bb:
62:09:b0:2a:17:0c:7f:a2:22:86:ac:72:c5:19:cd:84:ca:4c:
88:59:fb:a5:c0:f3:8a:6a:ed:74:15:78:84:42:a6:28:97:83:
5d:1a:7d:82:b7:b9:1b:05:3a:c3:ee:4e:17:86:e3:d8:4f:98:
6b:44:6f:18:de:4a:26:8c:44:61:37:e8:bd:e0:54:e3:2f:29:
bf:f2:1a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo1C7iFI3ZyI7W38bpKyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4
MzRlMGYwHhcNMjUxMDIwMDgwMTM0WhcNMjUxMDIxMDgwMTM0WjAzMTEwLwYDVQQD
EyhiNmEzMTZiMGJkMmUxNmNlZTMzZmY0MWU5NDAxMzBlYWQ4ZGUyZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHA226rypDMxZ84Nan3gHaks1GL+
9qXareZ9kHHWWzFyGgXhQvnc+1pec83KDfWyUzPmiRowI+4rAySmIe0eR4jLrzRZ
6GY1DLVXqPshmBI6GOruwND/bsiFmAyymZXK0LRuVIgneQbVBSxlGAh8C5IlnWeP
4PpWEHE1bmwruq+QNP5X2NIifcDjC4HwX5l0J3A5OtOP99r0ORX/oTX+7mE9DEJO
kgozLmAf6GmfHiRLpDwm2EKuK+6iLTOM200cNKKPZH47BmG0nI62rWYB28x6/0M7
5U9lkKckQt3PI1DtlYXncAKR14klrwNPZuJu0m7d0jkz/ztvKL2n3m11iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLajFrC9LhbO4z/0HpQBMOrY3i4gMB8GA1UdIwQY
MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct
ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1
LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukUpOtu/
6trFzx5EHMck+2r7Vou4lDcFVVrOm8tdIGYgwbkxiYDBfo1NolORROjbSlpKXl9J
VCSa0ViTkdP+6dj26hFLpL+Z6Pzv7NkCrZbujInY+91YIxwpi1JyseXqNDC5M9w1
XHirLbmu81sJLnvM4TKaxrD358OPH9PvWi1Gbw8goSVP5k7w2YVA1ZKiAHREm9rE
SnKLxphW5emQkFlGOo9joJZr+1lV+HAz3WfX0Ou7YgmwKhcMf6IihqxyxRnNhMpM
iFn7pcDzimrtdBV4hEKmKJeDXRp9gre5GwU6w+5OF4bj2E+Ya0RvGN5KJoxEYTfo
veBU4y8pv/IamQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:13 2025 by rpki-client