Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: kv1UH4iFZJ73VfyGFbnfvnUR20cDwMFa8C/1mbOg81M=
Subject key identifier: BB:EF:BC:F3:42:65:EA:3A:43:13:30:2D:F1:22:83:A5:F1:9E:02:FE
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 0199FBEAEF1828382C8A8454930F831378C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 49
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: KQW+JeeuwrT/G6rh8AIr8slfEPN/yk6znszBIt0O1so=)
2: QhmGkcRygSZ5ihQLsVW91SIUW9s.roa (hash: YN0HNJUwhKmoGvr9Z1SSlKCl4sVnuUTF191h7YfoZmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ef:18:28:38:2c:8a:84:54:93:0f:83:13:78:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=bbefbcf34265ea3a4313302df12283a5f19e02fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:5d:d0:6b:c1:2c:02:6e:1a:b2:a5:ee:e4:
35:ef:d8:a8:80:52:28:88:7b:6e:75:4c:cd:7d:e9:
4a:ad:46:f7:a5:f9:12:0b:57:2b:62:32:0f:32:dd:
fd:8c:36:c2:db:37:f1:ad:9c:3e:c7:7f:83:74:52:
cc:6d:e4:a3:f0:6c:a2:f3:4e:2c:49:e7:6d:56:d7:
8c:9f:64:1a:d2:c0:03:fa:c8:7f:c6:41:41:04:02:
9e:60:48:da:0a:9a:73:84:fd:f3:1d:d2:e4:a4:72:
55:20:8a:36:29:c0:11:a5:0b:a5:9a:45:15:6e:cc:
97:ea:7b:2b:11:f3:18:19:e7:72:aa:f4:f8:23:e5:
36:db:a4:19:2d:5e:04:85:d0:90:87:fb:db:c2:35:
1e:1e:7c:29:86:4a:c4:cb:f1:b9:7c:6a:33:ae:fa:
13:41:01:eb:52:7d:3b:ac:7a:63:2b:82:82:8f:3f:
a7:b1:8b:58:ba:67:09:01:a6:85:ad:a3:b6:60:42:
93:fd:6c:00:85:34:24:06:fc:a7:71:63:83:d1:39:
e3:4d:f8:58:ff:1e:dd:ec:d1:fd:4e:54:20:ac:e2:
05:3f:b2:c3:45:ed:8a:93:df:b1:94:d2:2b:88:17:
66:95:77:bb:c5:e3:79:a3:54:d6:35:b3:7c:80:39:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:BC:F3:42:65:EA:3A:43:13:30:2D:F1:22:83:A5:F1:9E:02:FE
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:04:3b:95:bf:e8:d9:12:3b:c9:53:78:e0:0a:7e:c3:58:
f6:8b:27:9b:d7:97:25:ef:9e:7d:54:a4:99:6e:e0:77:9a:7e:
a8:d1:f5:6a:74:9f:ee:12:c1:f7:53:4d:aa:12:0e:e2:49:b4:
fb:5b:f0:b8:a9:ac:cc:e5:c0:19:6f:29:eb:e3:f0:b2:2e:24:
f8:69:b4:0c:1c:03:2c:df:89:16:93:9a:f3:59:fa:d2:e6:26:
2a:d5:1f:69:7e:d0:87:ab:00:91:c9:4f:93:09:9c:9e:e3:82:
28:de:60:1d:96:c4:a4:d6:d3:c5:d5:33:cc:24:05:85:c4:5b:
1d:aa:34:6b:0d:95:1d:d5:35:34:ad:4b:c1:90:14:23:4d:97:
27:6e:d3:2c:1c:2c:8b:f9:7b:73:f0:bb:f0:16:f0:63:ca:db:
0d:17:5d:a0:50:64:46:2c:9e:e9:27:18:a9:7a:04:8b:52:b7:
b2:08:dd:bb:fe:99:e8:92:7a:76:20:de:c5:67:cf:47:82:c7:
8b:c4:78:e7:f3:44:92:af:30:97:d2:08:1d:86:50:ad:ae:7a:
9c:e1:d6:7b:ea:dd:fa:a1:8a:f9:ea:00:3f:5d:c2:a9:b6:52:
af:fc:fe:63:e4:67:0d:b6:6e:e6:ac:d3:b0:e1:65:88:c3:e1:
7c:98:47:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76u8YKDgsioRUkw+DE3jCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0
NTYwMjgwHhcNMjUxMDE5MTAwMTQxWhcNMjUxMDIwMTAwMTQxWjAzMTEwLwYDVQQD
EyhiYmVmYmNmMzQyNjVlYTNhNDMxMzMwMmRmMTIyODNhNWYxOWUwMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWxd0GvBLAJuGrKl7uQ179iogFIo
iHtudUzNfelKrUb3pfkSC1crYjIPMt39jDbC2zfxrZw+x3+DdFLMbeSj8Gyi804s
SedtVteMn2Qa0sAD+sh/xkFBBAKeYEjaCppzhP3zHdLkpHJVIIo2KcARpQulmkUV
bsyX6nsrEfMYGedyqvT4I+U226QZLV4EhdCQh/vbwjUeHnwphkrEy/G5fGozrvoT
QQHrUn07rHpjK4KCjz+nsYtYumcJAaaFraO2YEKT/WwAhTQkBvyncWOD0TnjTfhY
/x7d7NH9TlQgrOIFP7LDRe2Kk9+xlNIriBdmlXe7xeN5o1TWNbN8gDk2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvvvPNCZeo6QxMwLfEig6XxngL+MB8GA1UdIwQY
MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt
MzcxYjE2ZTUxNzkwLzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw
LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmwEO5W/
6NkSO8lTeOAKfsNY9osnm9eXJe+efVSkmW7gd5p+qNH1anSf7hLB91NNqhIO4km0
+1vwuKmszOXAGW8p6+Pwsi4k+Gm0DBwDLN+JFpOa81n60uYmKtUfaX7Qh6sAkclP
kwmcnuOCKN5gHZbEpNbTxdUzzCQFhcRbHao0aw2VHdU1NK1LwZAUI02XJ27TLBws
i/l7c/C78BbwY8rbDRddoFBkRiye6ScYqXoEi1K3sgjdu/6Z6JJ6diDexWfPR4LH
i8R45/NEkq8wl9IIHYZQra56nOHWe+rd+qGK+eoAP13CqbZSr/z+Y+RnDbZu5qzT
sOFliMPhfJhHLg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:51 2025 by rpki-client