Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: GTmbdY5igR3uJWjphwr1PTwmYEenPN6w4NbvedNH7uM=
Subject key identifier: 94:74:A4:FE:6C:21:6E:45:A5:AB:02:06:88:93:5D:27:49:6C:96:0C
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 0199FC2150F5845217D91FF015354DD98B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: LH1ApL8375L67hRxS39S3aZUzsr9qiQp//A4H7s3oPg=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:50:f5:84:52:17:d9:1f:f0:15:35:4d:d9:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=9474a4fe6c216e45a5ab020688935d27496c960c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:cf:06:f0:c0:32:67:5c:8d:ab:e6:78:0d:
7e:f1:c8:f4:8a:20:fc:c9:15:b8:1d:5e:b7:af:55:
fd:a8:89:18:cf:d4:07:fe:e7:1d:d1:74:05:7b:3f:
6b:b8:09:21:d5:ef:ff:41:22:77:97:84:cd:c5:59:
ec:c2:4c:07:5f:7f:62:90:79:42:a6:4d:7d:c8:1c:
2c:10:33:92:8d:06:f5:4d:95:ce:96:20:ff:98:a6:
fa:4a:94:95:e3:7e:3a:81:04:d0:73:a9:a7:fa:b2:
ac:4f:3e:7d:3e:97:6d:66:fe:16:45:2a:2c:89:9b:
c1:af:3d:1e:f5:f4:e0:4f:60:cc:60:76:38:78:f2:
37:f1:d6:07:d5:10:13:cc:d5:2b:6d:98:6f:cf:68:
08:59:e6:88:f2:5f:73:3b:5d:17:c6:1e:81:4d:3c:
2e:30:26:65:be:e0:a6:83:f0:a8:c0:3a:6e:75:d8:
72:54:ed:c2:ae:7d:71:f0:6c:36:11:75:43:80:96:
1d:01:95:85:5d:44:0b:8a:48:0e:91:29:82:a9:64:
58:6b:02:cc:11:fd:8d:56:3c:41:53:26:44:09:60:
d3:93:b0:2e:e9:2a:f4:20:af:4d:f7:99:35:59:0b:
3c:d3:34:51:9a:c5:80:fe:1b:bd:a7:74:b9:35:8d:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:A4:FE:6C:21:6E:45:A5:AB:02:06:88:93:5D:27:49:6C:96:0C
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:29:8e:5f:d3:41:9a:79:b0:6e:02:45:ab:41:f3:62:49:
09:87:66:a5:e1:bd:40:14:41:d3:c3:48:97:46:52:e3:39:39:
e9:e2:0e:c1:61:cd:fe:7f:bf:f0:47:4b:58:99:2a:c7:53:37:
6a:d2:e4:51:f9:bf:b5:7f:85:95:e3:42:ae:7c:88:1e:f3:ef:
30:f8:3a:ec:a4:0d:0c:82:64:30:d7:a6:1a:14:0d:11:e2:f5:
2b:08:09:bf:c0:47:3e:47:16:4d:e8:bd:07:93:16:52:b5:3f:
59:61:97:08:15:05:70:c1:45:51:d4:d5:4d:41:fe:c4:47:23:
49:77:18:ee:10:56:35:59:ab:1d:c9:fc:66:a1:56:0e:92:c3:
b7:10:f2:71:92:79:32:45:f3:1a:5c:5b:4c:8d:24:ea:cf:de:
17:87:00:3a:66:41:56:c4:27:16:2d:bf:0b:6b:4d:da:7a:da:
f0:55:a1:85:65:e3:66:c3:76:64:39:4f:37:66:d8:eb:7a:a0:
be:bc:db:0d:00:2c:5c:44:9d:98:67:95:2e:aa:87:12:2b:b8:
0d:36:ac:9f:2f:85:53:db:0b:7a:9f:9f:6e:b9:c8:24:bc:9d:
f7:de:65:ad:d3:1c:b0:6d:8e:80:7a:c1:d0:09:11:22:d8:62:
de:7a:6a:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVD1hFIX2R/wFTVN2YsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg5NDc0YTRmZTZjMjE2ZTQ1YTVhYjAyMDY4ODkzNWQyNzQ5NmM5NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh/PBvDAMmdcjavmeA1+8cj0iiD8
yRW4HV63r1X9qIkYz9QH/ucd0XQFez9ruAkh1e//QSJ3l4TNxVnswkwHX39ikHlC
pk19yBwsEDOSjQb1TZXOliD/mKb6SpSV4346gQTQc6mn+rKsTz59PpdtZv4WRSos
iZvBrz0e9fTgT2DMYHY4ePI38dYH1RATzNUrbZhvz2gIWeaI8l9zO10Xxh6BTTwu
MCZlvuCmg/CowDpuddhyVO3Crn1x8Gw2EXVDgJYdAZWFXUQLikgOkSmCqWRYawLM
Ef2NVjxBUyZECWDTk7Au6Sr0IK9N95k1WQs80zRRmsWA/hu9p3S5NY2I4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR0pP5sIW5FpasCBoiTXSdJbJYMMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMEpjl/T
QZp5sG4CRatB82JJCYdmpeG9QBRB08NIl0ZS4zk56eIOwWHN/n+/8EdLWJkqx1M3
atLkUfm/tX+FleNCrnyIHvPvMPg67KQNDIJkMNemGhQNEeL1KwgJv8BHPkcWTei9
B5MWUrU/WWGXCBUFcMFFUdTVTUH+xEcjSXcY7hBWNVmrHcn8ZqFWDpLDtxDycZJ5
MkXzGlxbTI0k6s/eF4cAOmZBVsQnFi2/C2tN2nra8FWhhWXjZsN2ZDlPN2bY63qg
vrzbDQAsXESdmGeVLqqHEiu4DTasny+FU9sLep+fbrnIJLyd995lrdMcsG2OgHrB
0AkRIthi3npqzQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:04 2025 by rpki-client