Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File: M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier: U3xKvp0IRciVUzbYHKuHikZEw4auITqtX7MgUkq7CEI=
Subject key identifier: 9E:4A:E0:54:E2:16:40:7D:BD:1A:D1:6F:36:79:1E:C9:60:C0:2D:A0
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial: 019888B2BEBEF737BB56D3E82BF4D3F25A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 08:01:12 +0000
Manifest this update: Fri 08 Aug 2025 08:01:12 +0000
Manifest next update: Sat 09 Aug 2025 08:01:12 +0000
Files and hashes: 1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: 1vEAxyjxFirrkb43Dj6ZQ+0JXLNKShJ6MQIytVyVJB0=)
2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:be:be:f7:37:bb:56:d3:e8:2b:f4:d3:f2:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Validity
Not Before: Aug 8 08:01:12 2025 GMT
Not After : Aug 9 08:01:12 2025 GMT
Subject: CN=9e4ae054e216407dbd1ad16f36791ec960c02da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:8a:59:f0:36:e9:bc:29:43:b5:39:4e:ff:
5c:cf:e7:04:4b:e3:37:e8:79:ad:a0:2a:c6:f2:f6:
50:7b:db:da:da:04:04:95:ca:68:08:7c:f9:91:a4:
dd:47:ba:c2:59:e6:b1:7b:7c:f3:51:05:b8:f5:c8:
73:0c:9e:89:8f:32:52:1c:f3:2b:66:4b:4c:06:fc:
d0:27:31:85:e1:48:77:fe:4e:68:98:34:fe:86:09:
be:92:28:e4:92:f3:89:ed:18:a9:c0:d0:c2:41:9c:
03:d2:fe:28:42:86:16:45:db:ef:39:b5:87:cf:d5:
91:20:a7:f1:4b:95:f6:3b:eb:9e:33:5c:98:0a:df:
68:32:19:59:c9:06:4b:af:bb:24:c5:9d:48:37:25:
de:5f:bc:50:95:4f:ba:b9:26:41:dd:b6:e9:bf:09:
ab:16:57:59:df:52:6c:2b:6f:8e:72:37:0f:ef:37:
71:e3:dc:1b:0d:83:16:d4:20:79:9e:0f:8c:d4:45:
12:e6:0f:8b:ae:e4:7c:a0:5e:ba:f0:66:79:eb:36:
a6:ee:20:24:a7:08:06:82:76:4d:e2:a4:d2:91:24:
c4:92:ef:b5:13:3d:25:ae:4b:21:75:eb:15:0d:a8:
ed:96:b2:02:37:7a:8f:cb:56:41:49:17:62:15:cf:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:E0:54:E2:16:40:7D:BD:1A:D1:6F:36:79:1E:C9:60:C0:2D:A0
X509v3 Authority Key Identifier:
keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a0:e3:9a:22:52:67:c4:1f:b8:31:79:d7:55:ef:7f:81:68:
8f:07:99:3c:40:4d:69:68:af:0e:90:24:ab:52:b9:5a:77:57:
07:06:c0:d9:f3:35:1c:64:8b:5b:45:7e:ae:76:3d:91:1d:09:
90:64:b4:a0:86:8f:33:70:e9:f3:63:1e:10:f6:b0:58:ed:70:
af:af:b8:5f:3e:44:ed:7a:43:7d:d3:61:ed:b6:80:8b:a9:ea:
ba:81:67:86:a6:15:3b:bf:d1:dd:ad:44:4a:37:20:ce:6d:66:
73:ee:0d:d9:e2:c6:e2:8e:4e:34:28:18:8b:81:49:39:4d:a2:
a4:5c:b9:36:be:82:64:0e:b3:0b:e8:7d:75:12:7d:c0:ab:5d:
b9:77:80:87:1b:01:8d:50:11:8f:5c:89:d2:46:87:9d:d7:55:
83:68:54:aa:10:4e:eb:45:93:a4:03:af:e8:f2:da:49:d5:b3:
3d:96:44:6e:9e:9c:de:39:e8:cc:44:9a:65:b1:58:97:2e:c3:
8a:8e:a9:60:a6:8e:88:48:b6:29:08:fa:d9:4b:2c:47:c0:a4:
cc:b5:3b:21:f4:94:dc:e4:39:43:22:c7:73:6a:48:5d:f0:48:
17:a3:d8:36:65:40:b1:de:ad:7a:97:0f:b4:82:93:d2:37:c5:
24:d1:4e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIsr6+9ze7VtPoK/TT8lqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmU4MGFlYTEwMGU5OGMwZGE1ZDFmZmVmOThiMzcxZDEx
ZWRkYTIwHhcNMjUwODA4MDgwMTEyWhcNMjUwODA5MDgwMTEyWjAzMTEwLwYDVQQD
Eyg5ZTRhZTA1NGUyMTY0MDdkYmQxYWQxNmYzNjc5MWVjOTYwYzAyZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEuKWfA26bwpQ7U5Tv9cz+cES+M3
6HmtoCrG8vZQe9va2gQElcpoCHz5kaTdR7rCWeaxe3zzUQW49chzDJ6JjzJSHPMr
ZktMBvzQJzGF4Uh3/k5omDT+hgm+kijkkvOJ7RipwNDCQZwD0v4oQoYWRdvvObWH
z9WRIKfxS5X2O+ueM1yYCt9oMhlZyQZLr7skxZ1INyXeX7xQlU+6uSZB3bbpvwmr
FldZ31JsK2+OcjcP7zdx49wbDYMW1CB5ng+M1EUS5g+LruR8oF668GZ56zam7iAk
pwgGgnZN4qTSkSTEku+1Ez0lrkshdesVDajtlrICN3qPy1ZBSRdiFc8kCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5K4FTiFkB9vRrRbzZ5HslgwC2gMB8GA1UdIwQY
MBaAFDP+gK6hAOmMDaXR/++Ys3HRHt2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEt
NmNkNjU5YWNiZjA3LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEtNmNkNjU5YWNiZjA3
LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqDjmiJS
Z8QfuDF511Xvf4FojweZPEBNaWivDpAkq1K5WndXBwbA2fM1HGSLW0V+rnY9kR0J
kGS0oIaPM3Dp82MeEPawWO1wr6+4Xz5E7XpDfdNh7baAi6nquoFnhqYVO7/R3a1E
Sjcgzm1mc+4N2eLG4o5ONCgYi4FJOU2ipFy5Nr6CZA6zC+h9dRJ9wKtduXeAhxsB
jVARj1yJ0kaHnddVg2hUqhBO60WTpAOv6PLaSdWzPZZEbp6c3jnozESaZbFYly7D
io6pYKaOiEi2KQj62UssR8CkzLU7IfSU3OQ5QyLHc2pIXfBIF6PYNmVAsd6tepcP
tIKT0jfFJNFOdw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:09 2025 by rpki-client