Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: dD64zX4wvuJxWJI48Z91ERCJDc7yHU385gbmObVahgc=
Subject key identifier: 25:70:10:16:BD:DA:6E:6B:8C:4D:AF:14:B3:DE:8E:7D:5A:C6:DF:13
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 0199FC58484BD4F9FCEF3AF48198D627C1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 140C
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: QxuTjiqJkuwG84vd2JAP3Vq2i98pFSBRibWMa9pIqmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:4b:d4:f9:fc:ef:3a:f4:81:98:d6:27:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=25701016bdda6e6b8c4daf14b3de8e7d5ac6df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:6f:7d:c8:39:60:1d:7e:9d:c9:e0:a1:ed:
e0:7e:79:fb:dc:cd:70:65:39:0e:7a:2a:4f:30:fe:
69:42:8a:5d:19:04:6b:d1:64:5f:54:f7:75:06:d4:
ac:db:4a:ed:82:29:8a:4b:67:bc:14:8e:fd:06:55:
eb:c7:b5:ed:fe:f6:83:01:6f:2e:dc:c9:20:71:db:
c6:cd:0a:52:d2:30:7a:6b:9b:7f:82:bc:eb:e9:81:
be:0a:e4:c3:c3:4c:f7:49:0c:a7:c6:69:8f:1e:d1:
81:43:ff:89:fc:b0:79:01:8b:74:de:f4:b7:0b:6d:
5c:c7:24:27:f1:35:a8:78:58:de:d0:d7:85:7b:05:
2c:0f:e7:44:2f:13:77:19:80:af:db:ca:f7:e4:bc:
d8:06:dd:8a:2a:6f:9c:45:c2:0d:a1:36:59:42:6c:
e0:9c:40:fd:46:5e:2e:45:c7:3c:59:ab:13:d7:59:
4f:08:d0:97:60:9d:eb:75:49:be:69:9a:1f:18:ae:
12:6b:19:6b:73:f2:24:86:28:c9:a6:20:0d:78:87:
5e:a1:d0:ec:d1:f1:b4:91:63:60:34:1b:f1:8b:b5:
19:4f:0b:35:05:bb:f0:8e:5c:54:95:78:e5:cc:c5:
a1:54:dd:3e:70:be:fa:f4:25:63:1d:a9:25:2a:86:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:10:16:BD:DA:6E:6B:8C:4D:AF:14:B3:DE:8E:7D:5A:C6:DF:13
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:44:46:28:48:d7:7f:b4:22:c3:53:ed:80:ba:66:ad:0e:af:
73:51:90:b3:12:57:73:d6:ca:d4:c6:a0:96:fe:6c:72:b6:04:
fe:92:4e:54:f0:75:01:05:be:8d:6d:8e:03:2b:41:c4:00:ee:
6c:bd:0c:83:9b:a5:5a:6a:1b:2d:2e:47:1d:54:03:ab:06:f5:
a9:e6:21:af:ef:b6:0a:3d:ea:4d:48:17:1d:55:f6:76:a1:eb:
71:47:31:67:bc:ba:f8:ca:a4:5f:3c:8c:c6:84:3b:73:7c:3e:
ca:a9:c6:35:12:10:7e:12:ec:74:ad:cf:af:a0:f8:c4:d2:52:
f4:1f:62:7e:e1:cd:5c:be:db:38:fd:26:9b:49:8b:5f:70:ef:
7e:89:2a:b4:2a:8e:55:ed:f6:54:d4:ff:54:39:a4:9f:92:90:
3b:d1:91:99:16:49:87:4d:26:5c:00:db:3e:64:29:2c:44:88:
e8:75:fe:ee:55:50:cc:8d:f6:09:bf:06:39:53:a0:e1:19:30:
f1:a0:7e:91:b5:e2:bb:7b:0f:d7:50:4c:32:71:c1:f9:1c:da:
09:5e:14:34:22:f0:43:17:ba:62:5c:6f:70:df:03:eb:df:b4:
87:8a:aa:34:fa:28:2c:2b:7f:a9:02:0c:45:d5:0f:8f:0d:59:
84:50:47:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEhL1Pn87zr0gZjWJ8HRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy
ZTg0NjYwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
EygyNTcwMTAxNmJkZGE2ZTZiOGM0ZGFmMTRiM2RlOGU3ZDVhYzZkZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwlvfcg5YB1+ncngoe3gfnn73M1w
ZTkOeipPMP5pQopdGQRr0WRfVPd1BtSs20rtgimKS2e8FI79BlXrx7Xt/vaDAW8u
3MkgcdvGzQpS0jB6a5t/grzr6YG+CuTDw0z3SQynxmmPHtGBQ/+J/LB5AYt03vS3
C21cxyQn8TWoeFje0NeFewUsD+dELxN3GYCv28r35LzYBt2KKm+cRcINoTZZQmzg
nED9Rl4uRcc8WasT11lPCNCXYJ3rdUm+aZofGK4Saxlrc/IkhijJpiANeIdeodDs
0fG0kWNgNBvxi7UZTws1BbvwjlxUlXjlzMWhVN0+cL769CVjHaklKoYKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVwEBa92m5rjE2vFLPejn1axt8TMB8GA1UdIwQY
MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt
NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz
LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyURGKEjX
f7Qiw1PtgLpmrQ6vc1GQsxJXc9bK1Maglv5scrYE/pJOVPB1AQW+jW2OAytBxADu
bL0Mg5ulWmobLS5HHVQDqwb1qeYhr++2Cj3qTUgXHVX2dqHrcUcxZ7y6+MqkXzyM
xoQ7c3w+yqnGNRIQfhLsdK3Pr6D4xNJS9B9ifuHNXL7bOP0mm0mLX3DvfokqtCqO
Ve32VNT/VDmkn5KQO9GRmRZJh00mXADbPmQpLESI6HX+7lVQzI32Cb8GOVOg4Rkw
8aB+kbXiu3sP11BMMnHB+RzaCV4UNCLwQxe6YlxvcN8D69+0h4qqNPooLCt/qQIM
RdUPjw1ZhFBHFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:27 2025 by rpki-client