Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json)
Hash identifier: /rm7X0gSDjTERj8ipTwzlTyqjsf3QpufkCv92h44mtM=
Subject key identifier: C8:1A:F8:D3:E9:3A:69:14:54:76:B1:5F:43:DB:05:8D:DB:5D:97:C0
Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf
Certificate serial: 0199FBEAD73D901A0BE05156EFB75854E14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
Manifest number: 0158
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: fPZBvJayoB/PZJ8au0BHY0pf92rRaMi08bbM9sFNRO0=)
2: yIyDsEh1dvcmsUPH7E2Ou8dLDUQ.roa (hash: wtZTOXp1JfHeuiQ37lVv2g4xea2Kfo548MrcJ05G7l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:3d:90:1a:0b:e0:51:56:ef:b7:58:54:e1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=c81af8d3e93a69145476b15f43db058ddb5d97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:ba:c5:63:57:b4:c0:2f:44:73:09:22:56:
0b:c7:fe:64:73:bd:5c:3b:03:39:46:b0:18:53:4f:
78:0e:0e:77:0b:07:80:d3:b9:39:24:c6:9d:82:67:
08:90:e1:3c:7f:bd:9e:c9:da:a7:07:08:6c:2d:f3:
b6:d9:b0:45:78:96:fa:a0:0c:0a:45:2e:67:bc:1f:
ea:de:f2:f9:78:3f:be:bc:0c:64:e6:87:c6:4b:1b:
70:3b:b1:f9:e7:fd:6a:77:ea:d6:d9:02:f4:c0:76:
20:77:1a:08:c3:5b:e2:6f:41:76:b6:4e:b8:cf:52:
2a:86:d8:38:24:10:0f:27:b9:68:be:8c:6f:45:8a:
45:49:04:da:c6:a8:69:5b:33:53:d2:34:91:09:2d:
3b:d1:62:26:85:95:79:ed:3c:fc:16:e8:82:ac:af:
bb:ec:cc:e1:d6:c8:40:d0:75:6e:1b:d9:30:d2:ff:
a4:4e:13:a2:71:f0:e9:7d:fc:fd:41:80:d2:50:8d:
af:df:67:cc:31:bb:0b:a9:cf:fc:c5:bf:1f:df:6a:
57:0f:00:bc:16:42:86:96:fd:f4:b1:f1:e4:f2:88:
23:35:72:d5:21:cc:f4:00:ea:44:b3:5c:b9:e2:41:
95:39:48:58:34:33:19:16:c4:17:b4:63:9a:d0:f6:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:F8:D3:E9:3A:69:14:54:76:B1:5F:43:DB:05:8D:DB:5D:97:C0
X509v3 Authority Key Identifier:
keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:33:06:77:f6:78:67:ff:7c:96:89:87:85:e0:97:fd:5d:66:
12:33:99:37:b1:3a:67:7b:78:f0:3e:f9:5f:66:77:72:87:d7:
eb:61:8b:3d:2a:90:4f:ee:4e:e6:db:7a:f6:bc:23:ab:93:0e:
c3:55:d2:34:e1:fa:a1:b2:8b:d8:a4:61:1b:7f:1f:7a:5f:92:
9d:94:ec:87:8f:32:fb:fd:6e:4d:35:f2:85:39:eb:1d:72:8d:
55:14:a6:a3:8d:fb:4a:1e:c7:9f:9e:c8:83:05:1f:a6:79:4c:
3c:53:9a:59:9e:68:ad:02:62:12:b4:e3:7d:83:5f:14:7a:af:
90:4e:01:45:da:b3:6b:55:20:bb:b0:0e:f0:da:9b:cf:ff:8c:
4f:48:62:4f:c9:ce:bb:eb:65:b9:af:f7:b9:17:4f:4f:04:84:
cb:d0:ad:f7:ff:aa:b0:78:b5:8e:b0:a4:3c:d0:fe:c0:9d:6f:
b9:47:f1:01:f5:42:1b:c5:7e:83:05:76:32:ed:90:a6:a5:61:
3b:d6:51:fe:1f:03:e3:ca:57:33:29:86:fb:7b:f0:d5:ce:2a:
f0:c6:ee:06:50:65:bf:d4:1b:83:dd:b5:ff:21:3e:95:be:ba:
6c:d4:d5:87:aa:b7:b8:81:f4:95:01:c0:f0:d1:6e:92:f4:ba:
08:77:1b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tc9kBoL4FFW77dYVOFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMDlhOGQ3MGZhNDQ3ODkzNWIwNWMwNjIxZjY4ODk1NTI0
MDVkYWYwHhcNMjUxMDE5MTAwMTM1WhcNMjUxMDIwMTAwMTM1WjAzMTEwLwYDVQQD
EyhjODFhZjhkM2U5M2E2OTE0NTQ3NmIxNWY0M2RiMDU4ZGRiNWQ5N2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ku6xWNXtMAvRHMJIlYLx/5kc71c
OwM5RrAYU094Dg53CweA07k5JMadgmcIkOE8f72eydqnBwhsLfO22bBFeJb6oAwK
RS5nvB/q3vL5eD++vAxk5ofGSxtwO7H55/1qd+rW2QL0wHYgdxoIw1vib0F2tk64
z1Iqhtg4JBAPJ7lovoxvRYpFSQTaxqhpWzNT0jSRCS070WImhZV57Tz8FuiCrK+7
7Mzh1shA0HVuG9kw0v+kThOicfDpffz9QYDSUI2v32fMMbsLqc/8xb8f32pXDwC8
FkKGlv30sfHk8ogjNXLVIcz0AOpEs1y54kGVOUhYNDMZFsQXtGOa0PZ6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMga+NPpOmkUVHaxX0PbBY3bXZfAMB8GA1UdIwQY
MBaAFDEJqNcPpEeJNbBcBiH2iJVSQF2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMt
NGJlZTMyNzRjNjk4LzEvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMtNGJlZTMyNzRjNjk4
LzEvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDMGd/Z4
Z/98lomHheCX/V1mEjOZN7E6Z3t48D75X2Z3cofX62GLPSqQT+5O5tt69rwjq5MO
w1XSNOH6obKL2KRhG38fel+SnZTsh48y+/1uTTXyhTnrHXKNVRSmo437Sh7Hn57I
gwUfpnlMPFOaWZ5orQJiErTjfYNfFHqvkE4BRdqza1Ugu7AO8Nqbz/+MT0hiT8nO
u+tlua/3uRdPTwSEy9Ct9/+qsHi1jrCkPND+wJ1vuUfxAfVCG8V+gwV2Mu2QpqVh
O9ZR/h8D48pXMymG+3vw1c4q8MbuBlBlv9Qbg921/yE+lb66bNTVh6q3uIH0lQHA
8NFukvS6CHcbPw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:46 2025 by rpki-client