Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: +UqatuvykvCBL7ge/vUaLPf5NT+SkSKvhLE9lXU9t3U=
Subject key identifier: 57:04:52:1F:90:A9:00:F4:BF:FD:A1:93:FC:02:BF:3A:17:44:A4:6A
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 019A02908E763D41FCC7B6BF8C8215E80A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 17:00:19 +0000
Manifest this update: Mon 20 Oct 2025 17:00:19 +0000
Manifest next update: Tue 21 Oct 2025 17:00:19 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: QTmB+EC1IwlVbuXBprOMGaNAkqNDhdtnuVKPGPi+J+M=)
2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:8e:76:3d:41:fc:c7:b6:bf:8c:82:15:e8:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Oct 20 17:00:19 2025 GMT
Not After : Oct 21 17:00:19 2025 GMT
Subject: CN=5704521f90a900f4bffda193fc02bf3a1744a46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:63:3a:03:fd:f7:91:0d:87:a1:ce:4c:54:
cb:79:0f:13:b7:50:af:eb:a3:b1:ee:82:3a:12:fe:
e7:63:99:a6:e3:53:78:1d:9f:49:74:ac:ee:37:ff:
68:aa:d4:09:87:09:6a:c2:18:7b:a4:f7:75:bb:88:
32:64:37:74:82:00:76:f5:d9:1a:d7:6e:1b:f4:04:
e7:bf:8a:6b:99:de:2f:04:80:26:45:7c:4d:75:b6:
d8:53:77:e1:42:a2:16:e3:2b:2f:06:e2:56:ce:8b:
10:42:77:af:e2:00:36:33:4a:c6:57:e6:3c:36:74:
69:b7:23:d6:52:96:98:9d:16:57:b6:67:a8:e7:b4:
97:99:06:5a:a1:7c:44:9e:0e:0b:bc:d9:91:4a:f6:
b8:a3:44:9e:88:9f:bb:1c:94:94:3e:6a:53:98:53:
16:03:e2:32:4c:c5:15:00:12:01:66:25:ec:b7:49:
64:ea:e9:29:86:10:1a:86:20:25:85:e0:bd:ea:76:
a9:92:80:7c:4d:f3:3c:21:bb:59:69:48:d9:fe:de:
8f:91:eb:23:76:24:35:98:24:fc:0e:e5:d0:fe:dd:
35:f3:b7:a0:1c:86:fa:d6:ac:ee:8c:64:bb:5a:7f:
74:9e:af:40:3c:a1:07:b2:b5:cf:04:5c:ad:a4:d0:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:52:1F:90:A9:00:F4:BF:FD:A1:93:FC:02:BF:3A:17:44:A4:6A
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:81:41:dd:21:21:18:08:1e:6f:6e:2f:17:05:ea:a0:f0:
0c:a7:1c:37:c1:ec:24:0c:a1:3c:05:a7:d0:ea:fc:f3:d6:ac:
70:6c:4d:0b:df:c6:cc:10:0d:8c:3b:c0:d3:b4:1f:29:32:c8:
e0:eb:ed:f6:c8:d0:09:60:69:bf:bf:34:36:a4:e2:bf:5d:4e:
dc:b1:3c:f6:e0:44:9a:8c:dc:1a:9e:02:77:86:fe:e0:e9:ef:
20:2e:e4:a2:93:83:fb:64:d2:36:20:d1:09:46:73:c0:d4:06:
f4:14:e4:a8:c1:f9:f7:59:cc:ec:ad:a0:8a:c6:ef:d3:f1:7d:
8f:e4:ac:fd:ae:53:71:5a:2a:98:27:b3:46:f7:50:be:9b:0e:
58:8d:20:86:4f:fe:8a:ff:01:34:5e:85:e3:3b:30:f3:c7:83:
ad:ca:d2:73:e1:9d:33:10:39:12:77:73:99:44:66:f4:ab:ed:
a4:9a:ee:b6:69:e4:94:e8:a2:d8:80:d9:68:b3:88:eb:5b:70:
b2:e5:48:4b:2f:1e:d3:84:d4:3d:13:2a:8d:5e:6a:41:1b:41:
93:a9:65:a9:45:27:b9:50:be:c7:0a:b4:16:4c:f8:11:4c:1b:
6a:c8:58:3b:e4:d8:12:54:99:50:14:c4:ba:11:a8:75:d0:c6:
86:07:25:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkI52PUH8x7a/jIIV6AoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2UxYjlmZmIyZTczZDJjOTdmMDg5MzA2M2NhYmIyY2I3
NDY3OTAwHhcNMjUxMDIwMTcwMDE5WhcNMjUxMDIxMTcwMDE5WjAzMTEwLwYDVQQD
Eyg1NzA0NTIxZjkwYTkwMGY0YmZmZGExOTNmYzAyYmYzYTE3NDRhNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xBjOgP995ENh6HOTFTLeQ8Tt1Cv
66Ox7oI6Ev7nY5mm41N4HZ9JdKzuN/9oqtQJhwlqwhh7pPd1u4gyZDd0ggB29dka
124b9ATnv4prmd4vBIAmRXxNdbbYU3fhQqIW4ysvBuJWzosQQnev4gA2M0rGV+Y8
NnRptyPWUpaYnRZXtmeo57SXmQZaoXxEng4LvNmRSva4o0SeiJ+7HJSUPmpTmFMW
A+IyTMUVABIBZiXst0lk6ukphhAahiAlheC96napkoB8TfM8IbtZaUjZ/t6Pkesj
diQ1mCT8DuXQ/t0187egHIb61qzujGS7Wn90nq9APKEHsrXPBFytpNDn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcEUh+QqQD0v/2hk/wCvzoXRKRqMB8GA1UdIwQY
MBaAFNDOG5/7LnPSyX8IkwY8q7LLdGeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgt
YjlmYjUzYTJmMDNjLzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgtYjlmYjUzYTJmMDNj
LzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCaBQd0h
IRgIHm9uLxcF6qDwDKccN8HsJAyhPAWn0Or889ascGxNC9/GzBANjDvA07QfKTLI
4Ovt9sjQCWBpv780NqTiv11O3LE89uBEmozcGp4Cd4b+4OnvIC7kopOD+2TSNiDR
CUZzwNQG9BTkqMH591nM7K2gisbv0/F9j+Ss/a5TcVoqmCezRvdQvpsOWI0ghk/+
iv8BNF6F4zsw88eDrcrSc+GdMxA5EndzmURm9KvtpJrutmnklOii2IDZaLOI61tw
suVISy8e04TUPRMqjV5qQRtBk6llqUUnuVC+xwq0Fkz4EUwbashYO+TYElSZUBTE
uhGoddDGhgclaw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:53 2025 by rpki-client