Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: 669j14VtL2aVz0gRNXvI9FHlLLjsY1VhJbi3WNd0whU=
Subject key identifier: CB:80:39:A1:A8:1C:95:15:D7:83:15:30:D0:5D:61:F5:6E:1A:C3:B4
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 0199FC58EBB3D882C4A88FEFAB72C8E803D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 1639
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: iswyjpVmxaQV4hhdbyLZXXtP5XYTy8z7N6p2AQSLQGs=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:eb:b3:d8:82:c4:a8:8f:ef:ab:72:c8:e8:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=cb8039a1a81c9515d7831530d05d61f56e1ac3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:e5:c3:74:43:5f:1d:96:b2:ac:04:8a:73:
c9:ed:76:7a:d0:60:f3:56:ee:57:e5:34:e4:e3:41:
a0:36:17:ac:f0:2c:1b:bf:2f:0f:77:15:22:a1:12:
0d:3c:5e:de:6b:60:2f:b4:bb:01:33:4b:8f:73:c6:
0c:c6:db:a8:7e:6b:dc:5c:ea:f9:3f:ec:e8:8c:84:
dd:4a:65:f7:2c:2a:e4:ed:64:db:6e:23:6b:7b:84:
69:00:cf:27:cb:e2:71:43:39:d9:30:7e:cf:fd:29:
9d:de:f8:fe:73:62:d5:76:2f:77:30:96:26:f8:ae:
8d:8d:69:60:1a:6d:6f:8d:d9:ea:38:d2:ec:a1:46:
2e:0c:cb:c2:4c:57:ef:71:a6:5b:97:1b:8a:89:95:
28:98:c3:ac:05:18:19:ad:de:77:f2:33:c5:c4:21:
d2:bd:00:97:5d:0e:a7:11:9c:db:dc:30:93:06:eb:
09:8c:e3:15:c7:0d:4d:37:d2:9b:26:d1:7e:55:8b:
62:9d:47:a1:c9:36:8b:1d:9b:01:42:09:16:b9:cf:
57:90:f2:1e:22:fc:cf:16:1c:68:d4:b7:60:52:3d:
68:bd:7d:1e:66:be:33:fe:1d:72:a4:d7:a2:ec:e2:
cb:81:c1:50:32:bf:90:ba:16:f4:8c:f7:70:27:e2:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:39:A1:A8:1C:95:15:D7:83:15:30:D0:5D:61:F5:6E:1A:C3:B4
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:bf:c6:1c:89:62:e0:9f:e2:77:fa:6b:ab:55:1f:8b:c5:
be:15:4c:42:c8:a3:e9:61:e0:b6:ee:5d:f3:c5:9d:d0:55:32:
53:83:e5:59:08:ff:4e:ba:86:4d:35:e6:4a:fa:d8:e4:21:c0:
02:74:f1:47:d5:54:4a:55:58:66:8f:d5:19:a4:4e:61:16:cc:
a3:fc:50:56:aa:a2:83:84:fe:70:93:9e:de:df:16:1b:c7:c9:
06:94:d5:dc:42:44:78:a4:2e:f5:d1:54:55:c9:fe:8e:26:1e:
62:15:6c:82:28:af:90:38:bd:ab:79:f8:e5:15:8f:68:fb:e1:
f0:38:51:d8:58:06:0f:65:9e:a2:6c:99:69:87:02:9d:28:a2:
40:72:df:84:89:8b:38:31:6b:af:ae:c0:ca:ff:23:74:06:a6:
82:d3:1c:c3:1c:d3:bb:1d:b8:c0:0b:d2:8e:04:f2:38:91:3a:
ad:df:e7:8e:31:ef:11:01:96:3f:9b:a3:6d:48:75:b4:85:ac:
8a:a0:bb:b6:62:5d:bd:ec:5c:3e:14:ea:09:48:be:24:73:33:
a7:36:79:f7:ea:6c:8b:8e:5f:65:6b:9c:b4:56:d1:ef:c4:b1:
a3:36:15:50:d1:ea:d7:a1:60:00:53:8d:5e:5c:17:77:3a:10:
75:e2:db:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOuz2ILEqI/vq3LI6APTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUxMDE5MTIwMTQ5WhcNMjUxMDIwMTIwMTQ5WjAzMTEwLwYDVQQD
EyhjYjgwMzlhMWE4MWM5NTE1ZDc4MzE1MzBkMDVkNjFmNTZlMWFjM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xblw3RDXx2WsqwEinPJ7XZ60GDz
Vu5X5TTk40GgNhes8Cwbvy8PdxUioRINPF7ea2AvtLsBM0uPc8YMxtuofmvcXOr5
P+zojITdSmX3LCrk7WTbbiNre4RpAM8ny+JxQznZMH7P/Smd3vj+c2LVdi93MJYm
+K6NjWlgGm1vjdnqONLsoUYuDMvCTFfvcaZblxuKiZUomMOsBRgZrd538jPFxCHS
vQCXXQ6nEZzb3DCTBusJjOMVxw1NN9KbJtF+VYtinUehyTaLHZsBQgkWuc9XkPIe
IvzPFhxo1LdgUj1ovX0eZr4z/h1ypNei7OLLgcFQMr+Quhb0jPdwJ+KhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuAOaGoHJUV14MVMNBdYfVuGsO0MB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1K/xhyJ
YuCf4nf6a6tVH4vFvhVMQsij6WHgtu5d88Wd0FUyU4PlWQj/TrqGTTXmSvrY5CHA
AnTxR9VUSlVYZo/VGaROYRbMo/xQVqqig4T+cJOe3t8WG8fJBpTV3EJEeKQu9dFU
Vcn+jiYeYhVsgiivkDi9q3n45RWPaPvh8DhR2FgGD2WeomyZaYcCnSiiQHLfhImL
ODFrr67Ayv8jdAamgtMcwxzTux24wAvSjgTyOJE6rd/njjHvEQGWP5ujbUh1tIWs
iqC7tmJdvexcPhTqCUi+JHMzpzZ59+psi45fZWuctFbR78SxozYVUNHq16FgAFON
XlwXdzoQdeLbHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:03 2025 by rpki-client