Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: z6PuLzTVSbodrSmAbgk5zJ3qZsjCcAgy2xcgpr1QJo8=
Subject key identifier: 16:23:D0:FA:A1:CB:74:FD:40:07:86:39:14:5E:65:AD:BC:45:C7:BB
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0199FBEB99B21EDFAB084CC7874F45D49084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 130B
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: EEK7vI0Mp+lvxI7GClVWFtBBqhQNlV+HlCppFduAJqI=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:99:b2:1e:df:ab:08:4c:c7:87:4f:45:d4:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=1623d0faa1cb74fd40078639145e65adbc45c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:81:5b:8b:80:68:20:96:47:f7:64:a3:6f:
d5:af:ec:78:20:ba:8d:fc:11:c3:46:12:a5:17:95:
46:82:19:eb:25:4c:69:6e:73:29:4b:c7:77:3d:39:
53:b2:65:e8:b1:fe:0d:33:b2:22:49:2d:f6:72:d4:
36:64:1b:28:fe:38:91:24:10:83:8a:ab:fb:54:b3:
08:6b:8e:d0:e6:fe:06:39:60:69:a3:a8:94:c4:ec:
fa:25:bd:45:6f:98:33:1e:29:d4:b3:d1:1a:b9:8f:
a6:7b:78:21:92:5b:8c:4f:43:70:06:31:82:c2:ba:
b9:22:fc:92:29:37:6c:a5:f7:f4:79:a8:e0:eb:17:
f3:28:0f:cd:cc:76:71:a9:ee:46:db:94:1c:0c:e7:
c6:c4:ff:8d:bb:19:20:ec:70:b7:42:1b:9a:68:7e:
47:32:73:1a:5f:41:9c:db:75:75:cb:7d:62:88:af:
fb:ec:8e:7f:4f:95:6b:61:6b:6a:2c:09:04:a7:a7:
bd:d8:42:73:81:2a:53:65:34:10:d7:29:44:62:7f:
4e:37:03:87:33:e0:14:dc:07:1a:22:92:1c:26:e2:
d8:0c:c4:d9:63:06:21:9d:d2:c3:25:ce:7f:12:20:
0c:c3:cf:6f:70:88:ea:10:f6:6a:19:a9:7b:95:36:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:D0:FA:A1:CB:74:FD:40:07:86:39:14:5E:65:AD:BC:45:C7:BB
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cf:60:b9:de:eb:36:eb:1f:7c:74:a9:01:53:94:95:da:1b:
0e:be:81:32:ae:70:99:b9:37:4c:87:a8:b7:83:46:75:8f:1f:
28:9b:13:09:2f:10:3a:e9:c1:c8:c8:f5:1f:f9:12:2b:4a:50:
af:16:d8:a9:70:f6:43:0d:ee:5b:55:58:89:ec:26:9f:43:33:
3f:a0:b3:ee:c1:53:70:47:a2:f7:50:74:69:dc:77:e3:ee:48:
9a:6c:33:00:ff:24:97:ea:c0:2b:c9:10:16:9c:69:6c:48:9d:
3e:43:10:df:61:23:81:6d:da:e2:c3:ab:67:2a:1f:1a:a3:eb:
ce:80:12:eb:67:fc:98:e8:1b:ad:d4:d3:9f:02:54:c2:e1:05:
dc:17:21:c5:cf:d1:17:37:48:4c:7b:c1:da:9f:62:4f:e4:d1:
1d:19:20:44:64:55:6f:ff:29:3b:5a:7a:84:c6:eb:9a:f8:76:
0f:fd:ba:80:93:06:b7:b0:a7:52:4f:b7:92:8a:61:de:0d:b4:
ef:fd:5c:3f:ef:2e:cb:e6:16:8b:a9:21:75:be:d8:44:0e:d7:
58:07:3c:5c:1e:e2:4e:e7:a3:fb:b3:be:13:f2:eb:5c:37:77:
4e:3a:70:e6:63:68:17:1f:27:6e:70:cf:b9:f2:b2:86:34:23:
39:7f:40:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765myHt+rCEzHh09F1JCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjUxMDE5MTAwMjI1WhcNMjUxMDIwMTAwMjI1WjAzMTEwLwYDVQQD
EygxNjIzZDBmYWExY2I3NGZkNDAwNzg2MzkxNDVlNjVhZGJjNDVjN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVWBW4uAaCCWR/dko2/Vr+x4ILqN
/BHDRhKlF5VGghnrJUxpbnMpS8d3PTlTsmXosf4NM7IiSS32ctQ2ZBso/jiRJBCD
iqv7VLMIa47Q5v4GOWBpo6iUxOz6Jb1Fb5gzHinUs9EauY+me3ghkluMT0NwBjGC
wrq5IvySKTdspff0eajg6xfzKA/NzHZxqe5G25QcDOfGxP+Nuxkg7HC3QhuaaH5H
MnMaX0Gc23V1y31iiK/77I5/T5VrYWtqLAkEp6e92EJzgSpTZTQQ1ylEYn9ONwOH
M+AU3AcaIpIcJuLYDMTZYwYhndLDJc5/EiAMw89vcIjqEPZqGal7lTb+qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYj0Pqhy3T9QAeGORReZa28Rce7MB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArc9gud7r
NusffHSpAVOUldobDr6BMq5wmbk3TIeot4NGdY8fKJsTCS8QOunByMj1H/kSK0pQ
rxbYqXD2Qw3uW1VYiewmn0MzP6Cz7sFTcEei91B0adx34+5ImmwzAP8kl+rAK8kQ
FpxpbEidPkMQ32EjgW3a4sOrZyofGqPrzoAS62f8mOgbrdTTnwJUwuEF3Bchxc/R
FzdITHvB2p9iT+TRHRkgRGRVb/8pO1p6hMbrmvh2D/26gJMGt7CnUk+3koph3g20
7/1cP+8uy+YWi6khdb7YRA7XWAc8XB7iTuej+7O+E/LrXDd3Tjpw5mNoFx8nbnDP
ufKyhjQjOX9AMw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:02 2025 by rpki-client