Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: La0/r7NlQaOBBi0xxEYCDaS2pBxNOhbO2QpUgq7nknE=
Subject key identifier: 50:99:7E:1C:E8:63:CC:22:9D:1C:2C:9A:43:55:9D:56:CD:39:D1:CA
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 0199FC58E3663909DF57DCE50038309B7C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 11F7
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: 5o4UUznxbAYLrwhaR/n4kpqSjYSP6tvFXVOROWzFxYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e3:66:39:09:df:57:dc:e5:00:38:30:9b:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=50997e1ce863cc229d1c2c9a43559d56cd39d1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:ce:6b:87:ce:33:9b:b6:a2:73:4a:d4:61:
6e:23:86:c9:90:4a:2d:1f:1c:cc:43:14:ea:9c:bd:
cc:aa:b0:c1:1b:73:ab:e0:6d:3c:8f:bb:bf:e4:10:
06:21:7c:7c:ed:f1:1d:34:84:1d:e4:f6:45:e7:6b:
74:7d:74:50:66:0f:cb:03:79:84:4f:9a:99:93:73:
c4:50:77:e5:f7:a1:e1:f9:96:c7:73:98:8a:e1:65:
30:cc:13:1a:40:c4:0d:ef:2a:83:55:74:f3:60:06:
df:0b:10:b0:38:a8:84:28:a3:01:b2:cb:20:4e:86:
5f:b1:a7:8a:20:8b:71:5e:9c:fa:d8:fa:c2:09:43:
49:fb:1c:dc:24:31:1b:68:3d:50:b7:8d:68:f1:91:
f0:ff:70:43:ca:96:f1:14:c6:55:d5:5e:ce:76:03:
58:c4:97:90:03:b0:c5:4d:d6:4d:c8:76:cc:b3:43:
97:a2:fa:ba:cb:58:48:17:9d:eb:58:fd:a5:0e:93:
0d:ae:20:5b:70:6a:7d:fd:ca:20:6b:ad:9f:b0:a2:
b5:22:31:b8:e4:b3:77:92:9a:92:6d:12:09:fa:c6:
71:1d:65:fb:22:bf:9a:ca:8a:5b:90:5f:66:31:5b:
4e:79:d9:63:0f:4b:9e:e0:78:45:e4:25:90:bd:ed:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:7E:1C:E8:63:CC:22:9D:1C:2C:9A:43:55:9D:56:CD:39:D1:CA
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ee:b9:9f:ea:c6:44:aa:e1:c9:8d:d4:75:22:2d:4e:29:68:
56:52:ad:a1:d3:d6:95:d3:fe:4c:4d:3d:41:19:7e:f8:c9:07:
b6:97:54:b9:0e:44:c9:b6:b9:6d:ea:75:c6:4e:d9:10:a4:5a:
1a:47:2d:00:2a:a7:fd:07:18:05:bd:ac:bf:67:b1:18:ce:56:
95:b9:ad:72:e4:13:2b:9d:18:15:b9:f1:24:fd:58:9a:3b:9f:
00:6f:9a:a3:97:f6:ba:e3:f2:00:0f:d5:67:fd:e1:37:cd:68:
df:01:94:10:18:28:4d:db:bc:09:98:37:62:53:40:5f:b2:b2:
d7:98:99:9b:94:df:91:18:9e:c1:4e:3c:8d:68:d2:6b:7b:8d:
39:3d:c7:c2:56:12:af:cf:c4:4f:55:55:63:fb:09:f1:76:b9:
ba:65:a1:d4:be:03:1a:74:72:1d:c0:5f:c0:b9:9c:89:8e:d7:
8c:24:4f:c7:f2:72:b9:b9:89:2b:d0:ee:fb:1e:50:88:9b:ba:
59:e9:a6:6d:32:c6:ee:59:c8:79:ff:4d:9a:2a:93:d9:ec:65:
0e:cc:07:9f:88:35:7e:06:66:f2:13:44:87:a9:6a:16:b5:dc:
c5:52:5c:dc:ec:8c:a5:81:a3:b4:0e:39:f7:ac:99:26:e0:85:
e1:1a:6d:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WONmOQnfV9zlADgwm3xuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmQxMWU4NTI2MTU3NDAwNzZiMzI4MWI4YWZmMGZhYzVj
YTJmMzMwHhcNMjUxMDE5MTIwMTQ3WhcNMjUxMDIwMTIwMTQ3WjAzMTEwLwYDVQQD
Eyg1MDk5N2UxY2U4NjNjYzIyOWQxYzJjOWE0MzU1OWQ1NmNkMzlkMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7Oa4fOM5u2onNK1GFuI4bJkEot
HxzMQxTqnL3MqrDBG3Or4G08j7u/5BAGIXx87fEdNIQd5PZF52t0fXRQZg/LA3mE
T5qZk3PEUHfl96Hh+ZbHc5iK4WUwzBMaQMQN7yqDVXTzYAbfCxCwOKiEKKMBsssg
ToZfsaeKIItxXpz62PrCCUNJ+xzcJDEbaD1Qt41o8ZHw/3BDypbxFMZV1V7OdgNY
xJeQA7DFTdZNyHbMs0OXovq6y1hIF53rWP2lDpMNriBbcGp9/coga62fsKK1IjG4
5LN3kpqSbRIJ+sZxHWX7Ir+ayopbkF9mMVtOedljD0ue4HhF5CWQve0HgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCZfhzoY8winRwsmkNVnVbNOdHKMB8GA1UdIwQY
MBaAFDAtEehSYVdAB2sygbiv8PrFyi8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQt
ZTZkNmU4YWViZWY4LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQtZTZkNmU4YWViZWY4
LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu65n+rG
RKrhyY3UdSItTiloVlKtodPWldP+TE09QRl++MkHtpdUuQ5Eyba5bep1xk7ZEKRa
GkctACqn/QcYBb2sv2exGM5WlbmtcuQTK50YFbnxJP1YmjufAG+ao5f2uuPyAA/V
Z/3hN81o3wGUEBgoTdu8CZg3YlNAX7Ky15iZm5TfkRiewU48jWjSa3uNOT3HwlYS
r8/ET1VVY/sJ8Xa5umWh1L4DGnRyHcBfwLmciY7XjCRPx/JyubmJK9Du+x5QiJu6
WemmbTLG7lnIef9NmiqT2exlDswHn4g1fgZm8hNEh6lqFrXcxVJc3OyMpYGjtA45
96yZJuCF4Rpt+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:02 2025 by rpki-client