Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: 8HXrLt/Ivh6MsPCFMAUXlHaimm/fPgtL7lrgUW2WCwI=
Subject key identifier: 1A:43:37:6D:C9:BB:60:87:B4:27:87:E4:95:B7:A7:CC:E1:03:CC:56
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 0199FB46280B8EE28FEC2C0A04D2BBE14E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 090C
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: 8q2YSJKwidM26nliKgOjSBNLlPfcLZYoKuF48WTy+W8=)
2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:28:0b:8e:e2:8f:ec:2c:0a:04:d2:bb:e1:4e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=1a43376dc9bb6087b42787e495b7a7cce103cc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:36:64:40:f8:5f:3f:7e:b0:b2:e7:c0:85:
11:36:48:ef:8c:c7:3d:15:21:73:c4:14:17:31:f7:
0d:6c:71:60:a2:db:e3:d6:10:02:f9:0d:bc:0e:9d:
95:88:22:74:23:e9:19:c0:d4:2e:ee:46:04:33:d1:
f3:9a:be:dc:59:d3:86:f1:00:f3:8b:5a:b6:cc:6c:
6d:31:c5:27:47:1b:ab:f0:f6:42:51:62:87:fb:24:
a1:cb:a2:23:ab:74:59:7a:5f:ec:b0:bc:d1:33:dd:
39:58:5b:83:c3:a8:05:19:34:d7:0c:ea:41:f6:3b:
df:4a:35:45:35:08:0a:f1:4a:c8:74:9d:e0:31:b3:
b6:80:12:39:3d:e8:c9:ee:2f:3f:5f:33:c9:10:6b:
b9:ac:63:01:36:2a:54:02:28:fe:0b:0b:3c:50:c0:
6b:31:df:51:b7:99:85:a7:bd:68:a0:fa:4a:e2:e6:
56:ef:aa:0e:a6:3c:73:b5:6d:3a:7b:23:20:ca:50:
56:9e:98:2e:82:69:c7:e6:2e:1f:8a:8a:3d:3b:33:
61:6d:37:02:48:09:c2:fb:ef:d6:8b:fe:43:f5:6a:
a1:11:fa:22:87:df:ef:d8:c7:91:aa:89:82:83:81:
66:96:02:5c:9f:56:6f:70:0e:fa:3c:2b:87:0b:6b:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:37:6D:C9:BB:60:87:B4:27:87:E4:95:B7:A7:CC:E1:03:CC:56
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:46:04:e1:16:dc:ee:7e:47:e7:78:82:33:b1:82:ad:0a:
31:06:ea:0c:c4:89:b8:a4:9a:59:f6:59:30:c0:82:e7:42:a2:
19:cc:83:0d:d8:07:fb:f2:64:fb:06:65:f1:ba:81:1b:3b:4f:
1c:2d:ad:7c:f4:ef:09:fd:3b:a9:2b:c2:3c:24:e9:4d:34:8e:
7f:ef:7f:dc:fe:f7:c1:7a:1a:14:82:17:24:85:7c:58:75:8f:
7b:a7:99:f1:3d:f3:4b:b3:16:4f:21:97:1e:10:06:c0:98:d3:
05:3d:37:62:41:4d:23:2b:1f:44:1a:36:90:d4:58:e5:f3:03:
ad:16:2a:05:b8:98:b9:db:07:c0:df:61:58:cb:0c:f0:0b:b2:
e4:2c:a9:f7:d7:00:ca:bc:eb:73:2a:fa:21:18:29:10:18:4b:
39:c5:f2:a0:a9:5f:f5:55:91:4d:5d:32:61:b4:67:aa:47:e4:
a1:5c:16:7c:d9:2a:a3:64:20:e0:89:7e:d3:dd:81:20:e4:1f:
f3:ff:31:5f:24:44:12:bf:69:44:7b:e3:a6:5a:a8:80:b5:a7:
1d:bb:3a:d8:2c:33:76:bc:72:7c:a4:83:27:61:7e:6c:42:30:
2e:dc:20:3e:bb:a7:96:07:80:34:00:d7:c6:9f:73:ac:9b:34:
81:6c:16:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RigLjuKP7CwKBNK74U5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZjc4ZjNlMDA0MTA5MjZkYmQ4OWM4ZThmNWM0MDBiMTAy
YjAzNzkwHhcNMjUxMDE5MDcwMTQyWhcNMjUxMDIwMDcwMTQyWjAzMTEwLwYDVQQD
EygxYTQzMzc2ZGM5YmI2MDg3YjQyNzg3ZTQ5NWI3YTdjY2UxMDNjYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3602ZED4Xz9+sLLnwIURNkjvjMc9
FSFzxBQXMfcNbHFgotvj1hAC+Q28Dp2ViCJ0I+kZwNQu7kYEM9Hzmr7cWdOG8QDz
i1q2zGxtMcUnRxur8PZCUWKH+yShy6Ijq3RZel/ssLzRM905WFuDw6gFGTTXDOpB
9jvfSjVFNQgK8UrIdJ3gMbO2gBI5PejJ7i8/XzPJEGu5rGMBNipUAij+Cws8UMBr
Md9Rt5mFp71ooPpK4uZW76oOpjxztW06eyMgylBWnpgugmnH5i4fioo9OzNhbTcC
SAnC++/Wi/5D9WqhEfoih9/v2MeRqomCg4FmlgJcn1ZvcA76PCuHC2s2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpDN23Ju2CHtCeH5JW3p8zhA8xWMB8GA1UdIwQY
MBaAFDH3jz4AQQkm29icjo9cQAsQKwN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYt
MTkxOTJlODFiODMxLzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYtMTkxOTJlODFiODMx
LzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDBGBOEW
3O5+R+d4gjOxgq0KMQbqDMSJuKSaWfZZMMCC50KiGcyDDdgH+/Jk+wZl8bqBGztP
HC2tfPTvCf07qSvCPCTpTTSOf+9/3P73wXoaFIIXJIV8WHWPe6eZ8T3zS7MWTyGX
HhAGwJjTBT03YkFNIysfRBo2kNRY5fMDrRYqBbiYudsHwN9hWMsM8Auy5Cyp99cA
yrzrcyr6IRgpEBhLOcXyoKlf9VWRTV0yYbRnqkfkoVwWfNkqo2Qg4Il+092BIOQf
8/8xXyREEr9pRHvjplqogLWnHbs62CwzdrxyfKSDJ2F+bEIwLtwgPrunlgeANADX
xp9zrJs0gWwWfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:37 2025 by rpki-client