Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File: mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier: i+RKNACIbAuRtDydWwe2K+JQoNjmBZkpMmIo+Nzw2K4=
Subject key identifier: 92:B7:31:4E:E9:30:21:91:CD:ED:F1:1B:75:0A:E1:CF:FB:EF:DB:D4
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer: /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial: 0199FC5890C0F007AE17DC6D0B9C57FAC5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number: 0507
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: zLRIvjvOeJuU4HwD5YK2V0I0OBVpy3jaKvDtvwweaJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:c0:f0:07:ae:17:dc:6d:0b:9c:57:fa:c5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=92b7314ee9302191cdedf11b750ae1cffbefdbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:91:92:b4:8c:33:19:b0:76:62:8d:6c:29:
f0:c6:08:94:79:0d:2c:34:5c:f4:b1:62:45:bf:de:
73:c6:5e:df:3e:5a:bb:1c:27:95:6b:db:fe:54:ad:
8e:62:14:a1:79:a4:04:6d:a0:42:4d:a4:f8:62:3e:
dd:ff:7d:36:0a:f5:34:26:46:a2:dd:02:b9:53:45:
c7:06:b3:5a:0d:49:1c:8e:bf:e0:f8:ae:ac:b5:1b:
96:63:1f:48:2e:38:38:e1:55:a9:63:f1:c5:c5:d5:
80:d1:36:3c:95:4b:d6:2d:be:f6:3c:b2:ec:aa:02:
e7:cc:ea:26:d9:a2:9f:90:81:ae:4e:3c:05:67:cd:
06:5c:87:66:21:27:ef:9a:6b:40:2e:72:9a:c9:b8:
d9:07:aa:79:dc:06:7c:16:24:79:34:7e:f5:09:ac:
77:05:1a:55:43:64:b9:32:55:35:80:d6:1c:4f:22:
61:ce:09:b8:4c:57:b0:ca:38:3b:29:f5:db:6f:60:
09:d8:7d:44:d9:13:8c:6c:0b:39:63:cd:67:00:d0:
fc:4b:b8:a2:a9:11:33:0d:98:67:dc:9f:25:a3:de:
a2:7c:26:f3:16:fd:22:80:13:ca:c9:4b:ae:e3:91:
dc:11:9b:70:10:22:d6:93:d3:5f:2d:eb:74:78:6f:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:31:4E:E9:30:21:91:CD:ED:F1:1B:75:0A:E1:CF:FB:EF:DB:D4
X509v3 Authority Key Identifier:
keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:61:ca:32:b3:3b:57:2f:8d:8b:5c:3c:88:68:f2:29:cd:19:
47:4d:29:4e:11:61:47:72:26:0e:c3:5d:ca:a2:89:32:e2:8a:
88:15:72:f8:23:65:f8:a6:35:41:3e:2c:66:9b:ea:ba:ee:7f:
da:a2:39:33:c4:4a:1d:e8:31:36:f1:f3:f6:34:6e:b0:90:c4:
09:c7:04:3b:ea:2a:ca:be:7a:cc:f7:0e:cd:d9:c6:5a:f3:08:
09:c2:3f:4b:cf:a5:09:93:10:f6:86:5c:e7:7a:e1:b5:77:98:
dc:e4:72:76:88:74:78:0a:ed:f1:c6:f3:b0:fc:5c:5e:d2:e2:
59:2d:c9:23:9f:fa:68:ec:fc:04:16:45:cb:2b:31:08:95:0c:
c2:7d:91:31:57:28:f7:52:f1:32:98:75:f8:a4:ca:0b:7a:7c:
7e:0c:9a:c1:c3:b3:91:de:13:af:f2:af:eb:29:2e:4b:48:84:
3e:25:14:ef:38:d0:2a:43:f6:c5:78:44:b2:64:11:44:ac:a9:
df:46:5d:64:3b:7f:c0:67:38:33:49:89:61:45:3a:e0:c0:23:
de:da:c6:8d:d9:b7:2a:13:a4:2d:e6:10:63:2f:7f:50:b1:07:
5f:62:83:40:7f:ad:bc:4f:22:78:30:94:62:19:a5:9e:2c:6a:
b9:2a:44:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJDA8AeuF9xtC5xX+sWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWZlOTY5Y2YwZWE5M2EwZThlNTdlZTk1ODhjYWY1NTcy
YjNiMjIwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
Eyg5MmI3MzE0ZWU5MzAyMTkxY2RlZGYxMWI3NTBhZTFjZmZiZWZkYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzaRkrSMMxmwdmKNbCnwxgiUeQ0s
NFz0sWJFv95zxl7fPlq7HCeVa9v+VK2OYhSheaQEbaBCTaT4Yj7d/302CvU0Jkai
3QK5U0XHBrNaDUkcjr/g+K6stRuWYx9ILjg44VWpY/HFxdWA0TY8lUvWLb72PLLs
qgLnzOom2aKfkIGuTjwFZ80GXIdmISfvmmtALnKaybjZB6p53AZ8FiR5NH71Cax3
BRpVQ2S5MlU1gNYcTyJhzgm4TFewyjg7KfXbb2AJ2H1E2ROMbAs5Y81nAND8S7ii
qREzDZhn3J8lo96ifCbzFv0igBPKyUuu45HcEZtwECLWk9NfLet0eG/wJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK3MU7pMCGRze3xG3UK4c/779vUMB8GA1UdIwQY
MBaAFJiv6WnPDqk6Do5X7pWIyvVXKzsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYt
Yjg0N2ViNzdhZmM4LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYtYjg0N2ViNzdhZmM4
LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWHKMrM7
Vy+Ni1w8iGjyKc0ZR00pThFhR3ImDsNdyqKJMuKKiBVy+CNl+KY1QT4sZpvquu5/
2qI5M8RKHegxNvHz9jRusJDECccEO+oqyr56zPcOzdnGWvMICcI/S8+lCZMQ9oZc
53rhtXeY3ORydoh0eArt8cbzsPxcXtLiWS3JI5/6aOz8BBZFyysxCJUMwn2RMVco
91LxMph1+KTKC3p8fgyawcOzkd4Tr/Kv6ykuS0iEPiUU7zjQKkP2xXhEsmQRRKyp
30ZdZDt/wGc4M0mJYUU64MAj3trGjdm3KhOkLeYQYy9/ULEHX2KDQH+tvE8ieDCU
YhmlnixquSpE+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:04 2025 by rpki-client