Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: VsZokuB+s7LtLUOfF/G9HP04oexbiIjlX+fWCGHmUQg=
Subject key identifier: B9:51:42:85:9D:BB:D6:FF:40:6B:28:4B:BC:A5:0A:8D:4D:F2:AE:96
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0199FCC6521CF06BD945B6F5BB80187E2213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 10B6
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: KsEmPLYxmk6oSGsaMJHpJGjBtiNENM8dLUDYMn6/nGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:52:1c:f0:6b:d9:45:b6:f5:bb:80:18:7e:22:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=b95142859dbbd6ff406b284bbca50a8d4df2ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:c6:dd:f9:af:df:21:c2:a7:1a:3f:bc:94:
4d:71:be:d8:f4:a0:a5:dc:33:13:26:2b:e3:56:aa:
c6:4f:81:ae:5d:c0:9d:f5:6e:55:02:e9:47:94:30:
da:88:02:96:02:8f:34:cf:79:d1:3f:de:11:43:f7:
43:56:79:e1:e8:90:0e:27:8e:3c:00:aa:e0:dc:5a:
fd:ea:ec:de:7a:16:e2:46:f4:91:45:2c:bd:ed:76:
ff:f7:d5:c9:f5:eb:63:d4:df:55:90:8c:f8:e3:da:
2e:41:3c:30:90:01:b8:a5:bc:5b:4c:5d:be:f3:3b:
f9:cd:4f:ff:41:6e:70:2e:17:de:b8:d4:68:a6:c0:
5f:8f:04:99:b1:fd:94:07:dd:86:9a:ba:a7:c9:72:
ed:b1:bc:97:17:ce:2b:67:76:38:67:52:b7:ca:c6:
a0:5b:b7:dc:82:c1:10:f7:57:2f:e4:b0:25:02:79:
b5:f4:46:0e:3a:66:39:5b:1c:a9:f4:05:21:3c:76:
05:06:bf:5a:a0:85:cc:8a:85:8e:fd:2f:67:f5:61:
d9:f9:e4:9e:eb:76:d2:55:c9:2c:2c:02:26:9c:95:
a3:98:b3:96:71:08:81:df:bd:33:d0:7b:33:b8:17:
0f:84:b1:7d:98:17:30:be:e5:4d:ff:07:1c:26:98:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:42:85:9D:BB:D6:FF:40:6B:28:4B:BC:A5:0A:8D:4D:F2:AE:96
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5b:a2:c5:5c:6e:fc:1e:2f:a2:9a:ef:5f:05:87:92:1d:0f:
6f:fb:d8:32:91:76:0d:0c:4f:ef:f4:2c:3a:be:1d:df:ef:be:
e3:f6:0a:58:c3:dc:cf:f6:7e:1a:b7:64:2c:82:25:82:d5:94:
4c:97:a9:58:f9:22:46:67:bd:76:ee:56:20:c6:6a:96:2f:de:
12:52:36:27:5b:ea:ff:32:d5:7e:6f:29:20:3c:60:11:59:04:
fd:58:20:f0:d6:4e:18:99:d8:19:a5:34:75:41:14:c2:33:1b:
fe:07:17:53:45:6e:9b:2f:22:32:c8:a3:50:6c:8a:2e:ba:8b:
de:11:97:38:59:00:a7:4f:3d:75:5b:e9:81:0a:e9:b0:95:a2:
b7:1c:d0:20:4d:54:90:1f:ee:6f:1a:50:a2:d1:12:26:d5:be:
5e:19:da:80:03:17:dc:23:6f:bd:c2:c7:87:a6:f9:99:92:b8:
e1:6b:c0:43:a9:b7:67:5c:96:11:86:a9:98:5d:4a:65:32:83:
10:8e:6d:da:76:9a:ef:61:67:af:8f:ac:b3:e9:de:cf:4f:42:
e3:c0:00:c5:0a:ca:1b:73:97:89:7d:c2:c5:0b:d1:6a:ff:a8:
a7:40:81:75:3e:02:b3:a5:ee:d8:bd:4d:a7:6f:17:01:1d:87:
b3:6c:0f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlIc8GvZRbb1u4AYfiITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5
ZTIzNDEwHhcNMjUxMDE5MTQwMTE5WhcNMjUxMDIwMTQwMTE5WjAzMTEwLwYDVQQD
EyhiOTUxNDI4NTlkYmJkNmZmNDA2YjI4NGJiY2E1MGE4ZDRkZjJhZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4knG3fmv3yHCpxo/vJRNcb7Y9KCl
3DMTJivjVqrGT4GuXcCd9W5VAulHlDDaiAKWAo80z3nRP94RQ/dDVnnh6JAOJ448
AKrg3Fr96uzeehbiRvSRRSy97Xb/99XJ9etj1N9VkIz449ouQTwwkAG4pbxbTF2+
8zv5zU//QW5wLhfeuNRopsBfjwSZsf2UB92GmrqnyXLtsbyXF84rZ3Y4Z1K3ysag
W7fcgsEQ91cv5LAlAnm19EYOOmY5Wxyp9AUhPHYFBr9aoIXMioWO/S9n9WHZ+eSe
63bSVcksLAImnJWjmLOWcQiB370z0HszuBcPhLF9mBcwvuVN/wccJpgEnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlRQoWdu9b/QGsoS7ylCo1N8q6WMB8GA1UdIwQY
MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt
OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx
LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnluixVxu
/B4voprvXwWHkh0Pb/vYMpF2DQxP7/QsOr4d3+++4/YKWMPcz/Z+GrdkLIIlgtWU
TJepWPkiRme9du5WIMZqli/eElI2J1vq/zLVfm8pIDxgEVkE/Vgg8NZOGJnYGaU0
dUEUwjMb/gcXU0Vumy8iMsijUGyKLrqL3hGXOFkAp089dVvpgQrpsJWitxzQIE1U
kB/ubxpQotESJtW+XhnagAMX3CNvvcLHh6b5mZK44WvAQ6m3Z1yWEYapmF1KZTKD
EI5t2naa72Fnr4+ss+nez09C48AAxQrKG3OXiX3CxQvRav+op0CBdT4Cs6Xu2L1N
p28XAR2Hs2wPQw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:16 2025 by rpki-client