Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: fq6c2E5JabGqvPnCBNipiFS43m1BP3ATN75r3DOP+XY=
Subject key identifier: 88:81:35:C7:62:74:C1:60:8A:4C:B1:2C:50:CD:7D:50:8A:DD:4B:1A
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 0199FD346845D40E2A49A50A578281F7A331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 014B
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: et7CtekCIzS5nSWsRzCf2TTscf6zKdUnjIcpRDGgrHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:68:45:d4:0e:2a:49:a5:0a:57:82:81:f7:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=888135c76274c1608a4cb12c50cd7d508add4b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:73:82:3e:c2:13:25:61:dd:2b:88:1c:d6:
66:65:f9:79:0b:7d:ab:8f:9d:ae:f4:48:d0:6d:b1:
be:de:cc:b1:d5:48:d3:92:5b:38:fd:d2:48:36:e6:
33:b7:f7:bc:e1:fa:15:50:79:79:4c:41:4d:95:06:
e1:7d:36:ee:f9:b1:53:55:31:f2:24:d8:20:c5:7a:
96:d3:59:3f:9c:db:1f:87:4a:6b:18:ab:d9:86:f4:
8c:a3:9e:18:5b:ef:1d:a4:ff:17:2b:c3:f1:30:92:
f5:0a:ca:c7:4f:10:02:72:52:e5:b7:fe:dc:77:76:
41:9d:a6:d0:33:1b:67:14:2f:cf:70:40:b4:2d:c5:
60:15:2a:7a:16:39:30:54:7f:87:e1:b3:c9:8d:00:
d0:4d:d0:ef:3b:af:1a:c7:72:99:13:c4:9d:de:99:
c6:5e:b3:3c:ac:3c:8c:25:84:4b:36:0a:28:20:99:
44:c6:cc:84:60:60:d2:3f:db:26:7f:67:0a:68:5c:
62:c4:30:c6:91:4f:52:a0:4f:52:54:a2:48:10:40:
cf:11:37:e1:f5:24:43:3c:e9:5c:6f:9b:0a:63:fa:
88:5f:ff:91:63:75:4f:ef:ae:e8:47:d9:bb:db:dc:
4d:87:c2:90:bd:d2:91:2c:98:64:5f:6e:48:ae:47:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:35:C7:62:74:C1:60:8A:4C:B1:2C:50:CD:7D:50:8A:DD:4B:1A
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4b:0f:c7:13:f0:a7:9e:79:1e:41:56:7b:17:81:b4:87:e2:
06:be:da:6c:83:25:a1:8c:95:d0:f1:c4:be:9b:92:49:8a:bd:
e1:97:0a:71:9a:44:b8:2e:26:b5:8d:c0:57:54:62:18:d3:2e:
8d:ba:25:a6:c7:89:76:9f:a7:d3:cb:44:18:3b:ab:88:d8:26:
a0:6d:6a:61:cd:00:6b:b0:5b:57:1d:83:9e:02:1d:8d:8d:2b:
00:9f:bc:f8:67:00:04:b6:21:eb:60:6c:96:ac:92:14:c1:08:
08:53:3b:58:60:d2:89:8a:fa:84:a3:12:1a:25:f4:58:4e:83:
0a:3d:a5:21:ca:45:ee:2a:20:00:cb:92:d8:d9:99:27:11:ca:
12:f0:de:21:67:2b:63:63:ec:1a:b3:be:9c:e4:12:f3:f4:33:
ec:20:87:d2:43:a7:f6:fb:77:c3:89:0e:42:1c:95:00:24:59:
05:7b:0c:48:35:f0:83:91:57:b8:a4:d4:92:98:1d:12:2c:43:
e3:3a:ad:4f:e5:4a:55:cd:8f:8a:21:ec:59:5d:77:a6:59:0d:
60:9a:b8:ca:85:e9:65:0e:f1:25:0d:ce:ed:99:0f:78:2b:4d:
5b:e2:2b:77:60:03:06:47:aa:0a:2a:82:4a:8a:c2:39:5e:e8:
e8:76:3a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGhF1A4qSaUKV4KB96MxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm
MjYwZmYwHhcNMjUxMDE5MTYwMTM0WhcNMjUxMDIwMTYwMTM0WjAzMTEwLwYDVQQD
Eyg4ODgxMzVjNzYyNzRjMTYwOGE0Y2IxMmM1MGNkN2Q1MDhhZGQ0YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqVzgj7CEyVh3SuIHNZmZfl5C32r
j52u9EjQbbG+3syx1UjTkls4/dJINuYzt/e84foVUHl5TEFNlQbhfTbu+bFTVTHy
JNggxXqW01k/nNsfh0prGKvZhvSMo54YW+8dpP8XK8PxMJL1CsrHTxACclLlt/7c
d3ZBnabQMxtnFC/PcEC0LcVgFSp6FjkwVH+H4bPJjQDQTdDvO68ax3KZE8Sd3pnG
XrM8rDyMJYRLNgooIJlExsyEYGDSP9smf2cKaFxixDDGkU9SoE9SVKJIEEDPETfh
9SRDPOlcb5sKY/qIX/+RY3VP767oR9m729xNh8KQvdKRLJhkX25IrkdwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiBNcdidMFgikyxLFDNfVCK3UsaMB8GA1UdIwQY
MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut
ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj
LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYksPxxPw
p555HkFWexeBtIfiBr7abIMloYyV0PHEvpuSSYq94ZcKcZpEuC4mtY3AV1RiGNMu
jbolpseJdp+n08tEGDuriNgmoG1qYc0Aa7BbVx2DngIdjY0rAJ+8+GcABLYh62Bs
lqySFMEICFM7WGDSiYr6hKMSGiX0WE6DCj2lIcpF7iogAMuS2NmZJxHKEvDeIWcr
Y2PsGrO+nOQS8/Qz7CCH0kOn9vt3w4kOQhyVACRZBXsMSDXwg5FXuKTUkpgdEixD
4zqtT+VKVc2PiiHsWV13plkNYJq4yoXpZQ7xJQ3O7ZkPeCtNW+Ird2ADBkeqCiqC
SorCOV7o6HY6gg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:44 2025 by rpki-client