
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: RztIDfM3z21C31DNbvYD3uM4CjoLo0OHhuFyhd9rYGk=
Subject key identifier: 63:2A:05:EC:51:E9:C9:E9:26:FF:C8:75:6F:F1:57:26:17:8B:61:4D
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 0199FAD81928206CF5C46905031AA6D6C244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0485
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: ZRMqEh7Fssb9PNds3G9RQ2q4/aAWk/HxV0Ymuv9KOA8=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:19:28:20:6c:f5:c4:69:05:03:1a:a6:d6:c2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=632a05ec51e9c9e926ffc8756ff15726178b614d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:0f:69:77:71:3e:18:d6:25:8a:a7:59:8c:
be:27:54:d5:6a:fc:0c:d5:9d:66:71:9c:2c:28:94:
92:41:3b:5f:68:d7:68:8a:9a:db:11:31:fb:f8:61:
ca:39:83:48:e0:58:3f:ed:9e:95:c9:95:a3:55:4d:
d6:de:d5:00:6c:8c:47:7d:63:83:19:49:2e:e8:4c:
b0:42:74:1d:52:8d:47:49:3b:4d:0b:02:89:e6:40:
08:98:97:dc:9e:38:dd:e7:28:d9:ed:9b:34:e6:63:
56:33:18:e7:d5:43:93:45:66:d9:14:4f:d5:cc:1b:
8a:e2:3e:2e:80:ee:26:75:b1:a6:fa:3b:15:99:4a:
21:6c:83:3d:06:92:55:ca:c6:e0:25:ab:92:68:ab:
3d:68:a2:d9:12:81:ec:4b:a1:28:f5:9c:c5:bf:d6:
57:48:ca:e2:61:31:bf:9c:40:e9:44:f5:b8:eb:a2:
27:25:02:42:84:e1:21:2c:17:3e:75:0e:9f:df:28:
99:97:0b:7e:60:f0:28:09:6c:67:6d:05:96:ba:97:
14:ba:c9:c4:c7:be:b6:31:44:74:f5:42:3e:86:4a:
ef:af:96:eb:43:8a:e3:a8:23:fb:20:67:cb:1d:16:
b1:82:cc:d1:9b:23:6a:80:f9:20:5e:fa:4e:26:66:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:05:EC:51:E9:C9:E9:26:FF:C8:75:6F:F1:57:26:17:8B:61:4D
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:dc:fe:7a:34:a6:0e:16:b6:db:a9:a0:1a:b6:74:05:2f:
24:48:36:22:f8:d8:59:ca:de:50:fb:b5:b5:47:fd:0d:b7:9f:
2e:78:9b:41:5e:0a:ae:cb:e0:79:4e:55:01:cc:17:4f:c1:a9:
68:85:32:ad:06:44:39:85:08:3c:0c:51:f5:dc:8b:de:51:f3:
bf:5a:9e:b3:94:ae:43:5d:e6:f4:b0:88:dc:7c:59:bc:cd:03:
c6:18:8a:47:1e:53:20:19:17:45:a8:dd:dc:28:5a:5b:43:59:
0f:80:16:03:c4:f4:d8:a3:ef:55:14:e7:65:a4:41:20:90:a9:
3f:fd:bc:a7:fb:c0:77:77:9c:23:37:02:c4:c2:f0:ec:8a:6d:
4c:6a:90:ad:09:87:ea:02:d7:f6:0e:35:42:26:0b:77:95:d0:
66:63:a9:ea:30:da:34:5a:42:a3:da:e1:31:22:36:ad:18:28:
7f:cf:79:83:70:7c:8d:4f:df:b1:d4:aa:e9:1c:48:9c:0c:6e:
20:3a:d5:71:e2:8e:41:55:1d:68:ca:7b:4d:c9:23:62:17:59:
d8:1f:78:ce:36:9d:75:f8:8b:69:39:3e:8b:e5:85:35:6e:d3:
f9:0e:d3:96:9b:03:35:83:ee:65:a3:85:59:2d:06:34:9f:df:
6f:a4:54:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62BkoIGz1xGkFAxqm1sJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMmQ5MWI0YWE5NmNjNTczMjU3NmQ0MjMzNWZkZGQwZTVk
NjI5NGYwHhcNMjUxMDE5MDUwMTMwWhcNMjUxMDIwMDUwMTMwWjAzMTEwLwYDVQQD
Eyg2MzJhMDVlYzUxZTljOWU5MjZmZmM4NzU2ZmYxNTcyNjE3OGI2MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2EPaXdxPhjWJYqnWYy+J1TVavwM
1Z1mcZwsKJSSQTtfaNdoiprbETH7+GHKOYNI4Fg/7Z6VyZWjVU3W3tUAbIxHfWOD
GUku6EywQnQdUo1HSTtNCwKJ5kAImJfcnjjd5yjZ7Zs05mNWMxjn1UOTRWbZFE/V
zBuK4j4ugO4mdbGm+jsVmUohbIM9BpJVysbgJauSaKs9aKLZEoHsS6Eo9ZzFv9ZX
SMriYTG/nEDpRPW466InJQJChOEhLBc+dQ6f3yiZlwt+YPAoCWxnbQWWupcUusnE
x762MUR09UI+hkrvr5brQ4rjqCP7IGfLHRaxgszRmyNqgPkgXvpOJmasSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMqBexR6cnpJv/IdW/xVyYXi2FNMB8GA1UdIwQY
MBaAFDItkbSqlsxXMldtQjNf3dDl1ilPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGIt
YjBlZmMwMWQ0ZjljLzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGItYjBlZmMwMWQ0Zjlj
LzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYzc/no0
pg4WttupoBq2dAUvJEg2IvjYWcreUPu1tUf9DbefLnibQV4KrsvgeU5VAcwXT8Gp
aIUyrQZEOYUIPAxR9dyL3lHzv1qes5SuQ13m9LCI3HxZvM0DxhiKRx5TIBkXRajd
3ChaW0NZD4AWA8T02KPvVRTnZaRBIJCpP/28p/vAd3ecIzcCxMLw7IptTGqQrQmH
6gLX9g41QiYLd5XQZmOp6jDaNFpCo9rhMSI2rRgof895g3B8jU/fsdSq6RxInAxu
IDrVceKOQVUdaMp7TckjYhdZ2B94zjaddfiLaTk+i+WFNW7T+Q7TlpsDNYPuZaOF
WS0GNJ/fb6RU7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:34 2025 by rpki-client