Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: JtFxH4O/lms7dQDF30gtYoUISB5yqgPx5weL/i4a0tk=
Subject key identifier: 24:91:A8:07:8A:AD:9D:B0:A9:FD:5F:AC:CC:68:24:5E:56:EF:A9:60
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0199FC8F4982ECD28F1215BFF77465E427F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 14D9
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: 77AAyZa7nIkn5r/G6exuq6dh16H0QjvSTcixNeDUhns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:49:82:ec:d2:8f:12:15:bf:f7:74:65:e4:27:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=2491a8078aad9db0a9fd5faccc68245e56efa960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:4e:91:30:f2:fe:00:3d:b4:c5:9b:a1:69:
b6:5d:81:c4:40:ac:15:0e:f1:3f:c3:a9:2d:b3:78:
b7:a6:29:77:cd:ef:b1:9f:57:e1:8e:62:de:02:ea:
a4:6c:de:f9:bd:71:b5:c9:5f:bb:01:8c:74:49:b9:
a3:2a:b2:bc:d5:14:b9:85:40:b0:b9:2a:16:ca:f2:
4f:9c:76:4b:4d:37:7f:31:d7:ec:25:97:88:db:08:
c0:43:a7:e1:26:ce:ab:ff:11:6f:92:3a:bd:61:57:
06:70:b8:cb:e4:70:f9:b7:2f:9b:65:ed:08:92:0c:
9a:54:b5:ab:b6:e8:58:c8:24:b5:a7:86:8d:67:6b:
1b:2b:dd:88:44:70:3b:06:c8:27:aa:96:35:e4:89:
00:d1:02:f5:57:fc:b9:6a:f9:b8:61:79:7e:e6:31:
33:0b:51:ed:ef:01:ce:21:ef:21:31:9c:60:2a:30:
6d:6b:72:25:97:82:c7:13:c2:66:fe:0c:ed:c6:95:
4b:79:d2:16:3c:6e:4d:0c:93:60:e3:99:b8:5f:39:
aa:5e:1c:b0:52:3f:eb:32:21:64:4d:8d:41:fd:bc:
60:72:b0:73:cf:a0:b0:eb:49:8a:a5:82:54:90:6d:
b8:ab:5a:13:c9:89:33:95:fe:47:b3:e2:ab:e1:7a:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:A8:07:8A:AD:9D:B0:A9:FD:5F:AC:CC:68:24:5E:56:EF:A9:60
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:62:e8:ec:b3:69:92:60:14:6e:d1:9c:d3:f4:b7:27:bd:cd:
54:07:99:94:34:81:de:ed:7f:ff:65:f7:de:4a:91:e9:de:88:
9c:ab:48:fd:3e:e1:79:ec:07:1c:92:7d:59:e6:16:5f:70:7b:
b8:50:03:a0:80:13:47:92:82:80:17:f8:9e:92:08:74:56:c1:
6c:73:85:16:14:87:a3:76:3e:35:0c:88:4e:54:65:7f:5f:40:
24:b0:e1:a8:55:ed:03:26:38:44:39:0e:63:95:60:3e:33:38:
ee:37:96:21:5a:ec:53:8c:10:e5:e9:cc:14:7b:ed:74:4d:ed:
9a:f1:9c:52:5b:58:8a:29:6b:ec:27:f2:b9:96:c6:9b:2e:45:
b7:24:df:c4:b0:25:d1:cf:25:34:b2:9b:bb:51:1c:e4:53:7d:
dd:f8:6a:b3:c6:54:85:70:ab:26:15:45:ca:89:f7:8a:1b:12:
fc:29:72:c8:79:d0:44:40:26:82:a0:34:9a:18:cd:a4:e1:f5:
73:af:dc:15:7a:24:5d:65:20:c6:18:fe:7d:ff:0f:b2:14:3a:
62:97:47:c8:6e:a2:8f:05:1a:23:cc:91:93:90:c4:50:44:6a:
64:81:50:67:79:5e:b8:8d:7a:2c:3e:f2:fb:55:17:3b:f4:a2:
25:ed:79:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0mC7NKPEhW/93Rl5CfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmU2ZmQ1MGRkYzgxN2FiYmFjNWE2NGY3YzZhMTI1NDY4
NTljZTIwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD
EygyNDkxYTgwNzhhYWQ5ZGIwYTlmZDVmYWNjYzY4MjQ1ZTU2ZWZhOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14JOkTDy/gA9tMWboWm2XYHEQKwV
DvE/w6kts3i3pil3ze+xn1fhjmLeAuqkbN75vXG1yV+7AYx0SbmjKrK81RS5hUCw
uSoWyvJPnHZLTTd/MdfsJZeI2wjAQ6fhJs6r/xFvkjq9YVcGcLjL5HD5ty+bZe0I
kgyaVLWrtuhYyCS1p4aNZ2sbK92IRHA7BsgnqpY15IkA0QL1V/y5avm4YXl+5jEz
C1Ht7wHOIe8hMZxgKjBta3Ill4LHE8Jm/gztxpVLedIWPG5NDJNg45m4XzmqXhyw
Uj/rMiFkTY1B/bxgcrBzz6Cw60mKpYJUkG24q1oTyYkzlf5Hs+Kr4XrxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSRqAeKrZ2wqf1frMxoJF5W76lgMB8GA1UdIwQY
MBaAFJsub9UN3IF6u6xaZPfGoSVGhZziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2Yt
N2NiMDcyM2RhMGJkLzEvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2YtN2NiMDcyM2RhMGJk
LzEvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGLo7LNp
kmAUbtGc0/S3J73NVAeZlDSB3u1//2X33kqR6d6InKtI/T7heewHHJJ9WeYWX3B7
uFADoIATR5KCgBf4npIIdFbBbHOFFhSHo3Y+NQyITlRlf19AJLDhqFXtAyY4RDkO
Y5VgPjM47jeWIVrsU4wQ5enMFHvtdE3tmvGcUltYiilr7CfyuZbGmy5FtyTfxLAl
0c8lNLKbu1Ec5FN93fhqs8ZUhXCrJhVFyon3ihsS/ClyyHnQREAmgqA0mhjNpOH1
c6/cFXokXWUgxhj+ff8PshQ6YpdHyG6ijwUaI8yRk5DEUERqZIFQZ3leuI16LD7y
+1UXO/SiJe157A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:36 2025 by rpki-client