Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: FYu/d6UAz/uDrmbSZWSkIOisNVv1NOWcEv0ogVrOHAk=
Subject key identifier: FE:B8:D7:27:90:AE:3C:76:F4:BB:2E:D0:F4:E7:6F:7B:67:B0:24:EE
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 0199FBEA990D350FC7908E827C276A5AAFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 059C
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: Zkj4xXJUOB0m21/mY7phKdvR1Dajyi0CVDL2KJ0x9mw=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:99:0d:35:0f:c7:90:8e:82:7c:27:6a:5a:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=feb8d72790ae3c76f4bb2ed0f4e76f7b67b024ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:16:c9:3f:4e:aa:ea:5f:ef:f5:d1:9b:a0:
d1:c4:48:8b:99:f6:f1:f0:ca:95:e3:31:b0:13:20:
37:e7:5c:fa:14:a4:5f:0d:1d:52:83:74:e2:0e:28:
9c:4b:24:5b:f3:88:60:d5:5c:5f:05:06:fe:86:33:
04:f8:ca:16:97:7f:0f:37:87:d7:fb:30:c7:a4:18:
89:f5:ac:11:52:85:49:ef:dd:27:c7:9f:17:35:56:
4c:b0:9b:e0:e2:bf:f1:9b:ec:e9:6f:c3:a6:2c:b0:
d4:f3:92:cc:8e:bd:f2:d3:9e:9e:0d:e5:af:5a:3e:
aa:7e:2c:d0:b8:35:9f:56:6b:b9:91:81:85:73:aa:
3c:db:f9:42:c8:04:bd:d5:d8:29:88:29:a3:1b:6b:
d2:da:2f:ae:1f:fe:4a:d8:00:d4:2b:08:9b:a2:8c:
a3:65:e8:a5:00:4d:da:97:cb:13:e8:a7:8a:f3:b8:
33:f7:0f:b6:54:d9:af:aa:72:b0:e3:ff:33:36:8e:
53:6f:7a:65:a3:0f:dd:9d:72:0f:87:ec:1a:70:f5:
a2:3c:f6:7c:6d:3e:a6:a8:30:24:57:d4:cf:7e:95:
f7:2a:3f:90:85:39:72:2e:7c:4c:75:da:b1:27:d8:
32:ef:c9:07:fa:a1:cb:2b:63:b4:ad:dd:da:10:f8:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:D7:27:90:AE:3C:76:F4:BB:2E:D0:F4:E7:6F:7B:67:B0:24:EE
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:a6:aa:c5:cb:7a:1c:64:7a:a5:17:93:fd:63:81:cd:3c:
b5:f4:26:07:03:49:6f:b0:cf:a8:ec:e6:51:dc:fd:80:9b:af:
17:a7:ea:44:07:1d:b2:52:b9:9c:5a:18:67:d5:18:7d:53:cb:
51:2f:6a:a9:c8:a6:d8:e8:4e:58:57:ab:82:c9:c6:74:dc:47:
32:37:98:6c:65:b9:e9:63:1d:28:35:26:77:83:b4:c4:77:4a:
f8:6b:b2:d3:03:c8:ef:84:ca:7a:7a:70:7c:a8:84:c2:65:e4:
9c:66:3a:c9:d2:db:d2:e7:aa:57:37:2c:be:f2:f9:3b:eb:3f:
7b:8f:41:37:b6:60:c4:81:f3:f1:5b:e1:1c:c7:48:d5:7a:39:
d8:4e:bf:66:c1:5b:da:ca:9e:4f:d1:b2:51:c7:8f:3b:91:f1:
aa:c8:35:76:68:27:91:cb:20:de:8b:8d:e6:c8:de:05:bd:82:
92:79:d9:ab:26:a0:99:90:50:9d:97:85:b5:c5:14:bf:d0:5e:
0e:5f:2d:13:82:1d:96:7a:c6:94:e8:ed:82:ea:9d:5d:59:5c:
70:5f:7b:ae:00:42:c8:90:9f:2f:c3:e8:b5:72:12:9b:ac:d6:
8e:3c:74:8d:cd:c1:01:7c:2d:bf:41:3a:4c:00:86:dd:47:62:
10:07:80:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pkNNQ/HkI6CfCdqWq+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNThhOTM0MTg5Y2YwNTg5MWY4YzRlNTk5ZDBiOTg5NTdl
OTk3MjkwHhcNMjUxMDE5MTAwMTE5WhcNMjUxMDIwMTAwMTE5WjAzMTEwLwYDVQQD
EyhmZWI4ZDcyNzkwYWUzYzc2ZjRiYjJlZDBmNGU3NmY3YjY3YjAyNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V0WyT9Oqupf7/XRm6DRxEiLmfbx
8MqV4zGwEyA351z6FKRfDR1Sg3TiDiicSyRb84hg1VxfBQb+hjME+MoWl38PN4fX
+zDHpBiJ9awRUoVJ790nx58XNVZMsJvg4r/xm+zpb8OmLLDU85LMjr3y056eDeWv
Wj6qfizQuDWfVmu5kYGFc6o82/lCyAS91dgpiCmjG2vS2i+uH/5K2ADUKwibooyj
ZeilAE3al8sT6KeK87gz9w+2VNmvqnKw4/8zNo5Tb3plow/dnXIPh+wacPWiPPZ8
bT6mqDAkV9TPfpX3Kj+QhTlyLnxMddqxJ9gy78kH+qHLK2O0rd3aEPhPGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP641yeQrjx29Lsu0PTnb3tnsCTuMB8GA1UdIwQY
MBaAFDFYqTQYnPBYkfjE5ZnQuYlX6ZcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmIt
ZDM4NmQyMDQ5MDQyLzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmItZDM4NmQyMDQ5MDQy
LzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZqmqsXL
ehxkeqUXk/1jgc08tfQmBwNJb7DPqOzmUdz9gJuvF6fqRAcdslK5nFoYZ9UYfVPL
US9qqcim2OhOWFergsnGdNxHMjeYbGW56WMdKDUmd4O0xHdK+Guy0wPI74TKenpw
fKiEwmXknGY6ydLb0ueqVzcsvvL5O+s/e49BN7ZgxIHz8VvhHMdI1Xo52E6/ZsFb
2sqeT9GyUcePO5Hxqsg1dmgnkcsg3ouN5sjeBb2CknnZqyagmZBQnZeFtcUUv9Be
Dl8tE4IdlnrGlOjtguqdXVlccF97rgBCyJCfL8PotXISm6zWjjx0jc3BAXwtv0E6
TACG3UdiEAeA/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:54 2025 by rpki-client