Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier: 7I4msNHmgkDYQgaE/AUQ9mqRhHbPn3seqPEpG701qkg=
Subject key identifier: 0E:AA:99:B8:D7:BA:F1:CE:51:AE:4B:FF:AC:D8:01:5C:53:AB:68:C5
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 0198726152B1FB6055025CE11DE967B39959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number: 0B0E
Signing time: Mon 04 Aug 2025 00:00:37 +0000
Manifest this update: Mon 04 Aug 2025 00:00:37 +0000
Manifest next update: Tue 05 Aug 2025 00:00:37 +0000
Files and hashes: 1: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
2: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: urABzi3YE74Us5l1STWymk0DArMBxEK5YafPSVU0+3k=)
3: XXRk-2utC2qSFmq343z5VXrm2u4.roa (hash: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=)
4: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
5: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:52:b1:fb:60:55:02:5c:e1:1d:e9:67:b3:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Aug 4 00:00:37 2025 GMT
Not After : Aug 5 00:00:37 2025 GMT
Subject: CN=0eaa99b8d7baf1ce51ae4bffacd8015c53ab68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:2f:ff:4d:95:7c:1c:ce:d7:54:6c:75:77:
27:c2:59:4b:e5:6d:4d:df:74:af:56:8a:99:08:6a:
7f:e5:48:c6:77:b3:e0:07:de:a2:4d:2f:1b:1b:1d:
8d:43:c8:db:67:d6:ad:95:02:99:fc:c2:94:4e:60:
33:e2:4b:b4:b1:d1:fb:a3:0e:00:f3:b3:22:16:44:
f8:21:99:ec:3b:a1:19:67:bf:b2:5a:3f:35:a9:b7:
08:91:31:f3:14:8e:cd:5a:8d:63:e2:74:f2:3f:a0:
85:fb:b7:cd:19:32:26:8c:57:e1:d3:4c:0a:33:b1:
63:29:a6:01:14:e8:51:de:e1:9b:6b:20:76:a1:55:
81:b8:f0:6d:69:51:a3:4e:09:b5:27:89:79:c4:33:
0a:11:39:72:49:37:37:d6:49:68:75:6d:93:7e:18:
5a:46:d7:94:ea:59:ea:4a:32:4e:fd:7a:b7:90:07:
d4:9c:f1:ed:37:5a:ab:d4:61:d9:9d:e1:a0:2e:d4:
42:27:22:52:32:5b:e7:00:d5:84:00:62:63:0a:7a:
4c:0a:b5:96:34:5c:dc:48:57:4d:ff:4f:69:be:1b:
8c:43:d8:13:5a:2d:fb:b7:7b:69:0d:0d:85:45:1b:
a8:f5:80:85:ad:2a:a3:28:9a:e5:5e:a4:5d:67:89:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AA:99:B8:D7:BA:F1:CE:51:AE:4B:FF:AC:D8:01:5C:53:AB:68:C5
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ee:d9:c2:8d:57:d2:2c:3b:51:89:87:19:8b:88:82:d7:96:
cf:91:46:49:71:db:8d:6d:b3:cf:0b:09:66:b6:5b:f7:08:72:
15:e8:3b:06:95:7c:03:9f:e1:a3:60:f4:1d:3f:1e:31:93:3c:
c1:c7:62:a4:e2:fc:17:30:a9:fe:47:2d:5d:88:31:19:c5:7f:
86:12:94:d9:0b:54:3b:f5:47:d9:a7:cf:7a:8e:4a:4d:38:34:
f1:51:63:00:b1:98:e9:87:29:ce:ec:ea:59:81:2f:0a:2c:ad:
bb:80:50:55:9c:bd:2e:1c:08:76:01:fc:ef:17:10:40:50:ef:
99:e5:68:39:0c:85:84:98:5f:3b:1a:12:7c:8f:25:82:d6:c6:
21:a1:75:f5:3e:d3:03:48:6c:82:ef:56:bb:44:a2:dc:3e:af:
8b:18:cf:3e:13:d2:33:ef:2b:79:bb:e1:e4:9d:a3:dd:30:c9:
2b:2f:08:d3:5b:cd:ff:ec:c3:30:6d:98:83:ec:f5:ae:f8:e3:
16:f4:69:37:1e:be:be:12:1c:c0:54:96:c5:21:87:30:2c:b3:
c2:4a:22:68:97:d6:5e:7b:f8:be:d2:e1:b4:3f:cc:e4:99:e7:
73:0c:37:de:6c:15:86:4b:88:2e:a5:4e:c3:6a:df:0c:0d:95:
1c:97:66:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYVKx+2BVAlzhHelns5lZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky
ZmU0NmUwHhcNMjUwODA0MDAwMDM3WhcNMjUwODA1MDAwMDM3WjAzMTEwLwYDVQQD
EygwZWFhOTliOGQ3YmFmMWNlNTFhZTRiZmZhY2Q4MDE1YzUzYWI2OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4gv/02VfBzO11RsdXcnwllL5W1N
33SvVoqZCGp/5UjGd7PgB96iTS8bGx2NQ8jbZ9atlQKZ/MKUTmAz4ku0sdH7ow4A
87MiFkT4IZnsO6EZZ7+yWj81qbcIkTHzFI7NWo1j4nTyP6CF+7fNGTImjFfh00wK
M7FjKaYBFOhR3uGbayB2oVWBuPBtaVGjTgm1J4l5xDMKETlySTc31klodW2Tfhha
RteU6lnqSjJO/Xq3kAfUnPHtN1qr1GHZneGgLtRCJyJSMlvnANWEAGJjCnpMCrWW
NFzcSFdN/09pvhuMQ9gTWi37t3tpDQ2FRRuo9YCFrSqjKJrlXqRdZ4nlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6qmbjXuvHOUa5L/6zYAVxTq2jFMB8GA1UdIwQY
MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt
ZjgyYjcwZDhhMGE3LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3
LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu7Zwo1X
0iw7UYmHGYuIgteWz5FGSXHbjW2zzwsJZrZb9whyFeg7BpV8A5/ho2D0HT8eMZM8
wcdipOL8FzCp/kctXYgxGcV/hhKU2QtUO/VH2afPeo5KTTg08VFjALGY6Ycpzuzq
WYEvCiytu4BQVZy9LhwIdgH87xcQQFDvmeVoOQyFhJhfOxoSfI8lgtbGIaF19T7T
A0hsgu9Wu0Si3D6vixjPPhPSM+8rebvh5J2j3TDJKy8I01vN/+zDMG2Yg+z1rvjj
FvRpNx6+vhIcwFSWxSGHMCyzwkoiaJfWXnv4vtLhtD/M5Jnncww33mwVhkuILqVO
w2rfDA2VHJdm2g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:25 2025 by rpki-client