Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: LNdER72h6gT01CCI3k1egCoTz0DZFvYDolPi1w2R0I8=
Subject key identifier: 0A:25:47:0F:99:2F:99:9B:BC:3D:CB:C8:07:82:B5:3D:6F:AF:29:E0
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 019A01115EA978BC859498CF19CD586A6F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0EFF
Signing time: Mon 20 Oct 2025 10:01:46 +0000
Manifest this update: Mon 20 Oct 2025 10:01:46 +0000
Manifest next update: Tue 21 Oct 2025 10:01:46 +0000
Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: QjcoDWZ2k+vOMyt4t/aXHUaLuc/rHbZ2A5eLTYfaXK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:5e:a9:78:bc:85:94:98:cf:19:cd:58:6a:6f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Oct 20 10:01:46 2025 GMT
Not After : Oct 21 10:01:46 2025 GMT
Subject: CN=0a25470f992f999bbc3dcbc80782b53d6faf29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:ab:b3:b1:3a:81:9d:16:82:6d:76:79:12:
6c:95:3d:23:d6:ac:f9:c5:f7:85:0c:cf:15:ad:8e:
a9:a3:e8:64:bd:e7:b6:29:4f:4a:6e:d4:cc:e9:9c:
fd:dc:0f:6d:75:dd:33:e2:86:79:73:43:78:10:47:
ca:5a:18:39:c8:7c:fd:f5:c3:6b:6f:6d:97:59:ee:
92:6a:8b:c0:39:6b:57:32:01:01:51:00:1c:55:b7:
b1:6e:a8:51:97:b4:5e:7d:df:27:5d:58:d7:78:78:
ed:f4:4c:22:dc:f6:8c:b0:bf:36:09:ce:dd:69:3c:
b7:fe:7c:d9:b2:43:c9:04:8e:3f:72:88:db:48:e6:
5d:ed:8d:9b:d9:8c:09:cd:93:39:0d:21:ac:db:11:
42:c4:25:ee:7c:fc:ee:93:80:c0:80:c5:01:9b:09:
6a:1a:bd:fc:f1:fb:ab:db:7e:97:a2:d0:ff:95:55:
23:90:d1:05:2e:4e:82:25:68:ab:8c:fa:98:8c:c0:
9d:dc:63:6a:2c:e1:fc:1a:91:be:4a:ae:c8:bd:23:
f8:7c:c8:40:79:11:ab:ed:be:91:32:2c:4d:41:44:
c1:4c:29:16:2b:0e:be:8f:95:82:c7:62:72:65:7b:
78:5a:92:99:1f:a1:62:bb:15:e9:8b:ba:0b:19:fa:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:47:0F:99:2F:99:9B:BC:3D:CB:C8:07:82:B5:3D:6F:AF:29:E0
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:b1:fa:2c:a6:21:69:66:39:ba:0a:b0:d5:b7:32:1c:0d:
23:d2:f8:5f:43:a6:d3:65:be:e2:b8:86:08:66:ba:93:5a:33:
a0:ac:41:d7:e5:3b:4d:fc:0b:58:58:46:3d:3f:db:22:af:49:
f9:83:b0:04:16:23:bd:eb:7d:64:a9:cc:3a:f8:b7:ec:2b:f9:
f0:08:e5:75:ec:3b:71:d5:0c:f1:e4:c5:2c:c0:6c:ff:da:11:
be:07:70:12:da:f5:02:aa:c9:17:f6:6e:b9:bb:3e:78:3b:6c:
de:52:15:fc:92:6a:fd:90:81:e2:9e:27:1c:2a:ef:6d:5e:45:
d9:b8:e1:df:e6:a0:ef:69:25:11:0d:16:aa:3a:03:05:e3:f4:
03:ed:47:41:0c:5b:39:70:09:23:7f:a0:22:92:36:aa:05:ec:
1a:42:f9:0b:10:e4:00:4d:82:4d:55:5f:fc:a9:09:2d:df:9f:
28:6a:4d:62:48:03:fa:b7:57:c4:0a:a9:2f:ce:5f:4d:64:d6:
35:37:73:f4:01:c4:01:b6:8e:83:c8:76:24:f1:9f:51:1d:6d:
56:2d:1f:c2:43:d6:27:96:66:c4:21:f5:f9:ee:07:ad:3d:54:
75:af:3f:0e:68:1a:41:15:e2:25:25:27:2b:a0:42:ee:18:8c:
25:2b:a9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEV6peLyFlJjPGc1Yam9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmRlY2YyYjFhNDEwZjY1MjNjMjBlNjMwODI2NzA5Y2I2
ZGFjMTkwHhcNMjUxMDIwMTAwMTQ2WhcNMjUxMDIxMTAwMTQ2WjAzMTEwLwYDVQQD
EygwYTI1NDcwZjk5MmY5OTliYmMzZGNiYzgwNzgyYjUzZDZmYWYyOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPers7E6gZ0Wgm12eRJslT0j1qz5
xfeFDM8VrY6po+hkvee2KU9KbtTM6Zz93A9tdd0z4oZ5c0N4EEfKWhg5yHz99cNr
b22XWe6SaovAOWtXMgEBUQAcVbexbqhRl7Refd8nXVjXeHjt9Ewi3PaMsL82Cc7d
aTy3/nzZskPJBI4/cojbSOZd7Y2b2YwJzZM5DSGs2xFCxCXufPzuk4DAgMUBmwlq
Gr388fur236XotD/lVUjkNEFLk6CJWirjPqYjMCd3GNqLOH8GpG+Sq7IvSP4fMhA
eRGr7b6RMixNQUTBTCkWKw6+j5WCx2JyZXt4WpKZH6FiuxXpi7oLGfrk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAolRw+ZL5mbvD3LyAeCtT1vryngMB8GA1UdIwQY
MBaAFDK97PKxpBD2Ujwg5jCCZwnLbawZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgt
Nzc4MzllYjVmODIwLzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgtNzc4MzllYjVmODIw
LzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5mx+iym
IWlmOboKsNW3MhwNI9L4X0Om02W+4riGCGa6k1ozoKxB1+U7TfwLWFhGPT/bIq9J
+YOwBBYjvet9ZKnMOvi37Cv58Ajldew7cdUM8eTFLMBs/9oRvgdwEtr1AqrJF/Zu
ubs+eDts3lIV/JJq/ZCB4p4nHCrvbV5F2bjh3+ag72klEQ0WqjoDBeP0A+1HQQxb
OXAJI3+gIpI2qgXsGkL5CxDkAE2CTVVf/KkJLd+fKGpNYkgD+rdXxAqpL85fTWTW
NTdz9AHEAbaOg8h2JPGfUR1tVi0fwkPWJ5ZmxCH1+e4HrT1Uda8/DmgaQRXiJSUn
K6BC7hiMJSupwQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:41:06 2025 by rpki-client