Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: Lx+cPYOZt9CIOZ0p6es8XGo+BPEqTqqbur/lhrB7KlE=
Subject key identifier: 7B:46:D8:90:0D:24:1C:0E:F2:5B:BC:E7:E7:7E:38:22:E2:84:B8:96
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019873E2DC5D095880D42F19686150E1161D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 036E
Signing time: Mon 04 Aug 2025 07:01:43 +0000
Manifest this update: Mon 04 Aug 2025 07:01:43 +0000
Manifest next update: Tue 05 Aug 2025 07:01:43 +0000
Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: RdInI3KFj9TpdjILhiO9PWdflfezz4/2+gUpkl4Y0Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:dc:5d:09:58:80:d4:2f:19:68:61:50:e1:16:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Aug 4 07:01:43 2025 GMT
Not After : Aug 5 07:01:43 2025 GMT
Subject: CN=7b46d8900d241c0ef25bbce7e77e3822e284b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:de:37:44:71:38:37:42:6a:b2:56:c8:4c:
f2:04:81:3a:34:5b:56:93:aa:fd:66:1d:c2:1b:d9:
8e:a1:4b:29:91:54:bf:c0:f8:47:a0:18:66:28:c7:
c8:46:5c:ef:53:66:3d:b2:76:dc:7a:6b:a1:a5:d2:
5b:fc:52:dc:eb:34:db:72:a9:ca:9f:d4:25:b2:f1:
bb:09:64:f7:8e:7e:07:52:34:20:3c:e0:56:4f:15:
43:a0:06:7e:16:e8:3f:90:be:7b:b6:51:64:63:46:
70:52:c6:67:27:90:da:4d:76:b2:5e:44:35:7e:b9:
68:07:79:7c:bd:39:5e:d0:a3:02:34:13:a0:e9:dd:
e6:d4:0f:76:1f:1a:3f:bd:74:ef:4c:b9:2a:a7:19:
84:ef:06:8e:8c:7f:59:7d:b4:69:3c:7a:73:51:0a:
9c:43:e4:12:b5:8e:57:03:fb:99:88:55:ab:3d:02:
b0:b8:bd:33:28:ad:0d:67:d1:29:4e:ab:8e:a4:9e:
fa:fc:5a:7a:ed:c9:b7:d1:7d:c9:c7:8d:8a:c0:b4:
31:8e:0e:e1:5f:d0:75:45:17:e5:17:58:e1:59:ab:
ba:49:4e:70:30:ea:e2:ba:8e:36:7f:4d:00:ec:2b:
8a:ec:4d:cc:e9:ec:d2:32:25:b7:38:c5:61:e3:7a:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:D8:90:0D:24:1C:0E:F2:5B:BC:E7:E7:7E:38:22:E2:84:B8:96
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:e7:d2:e7:b9:8c:8b:c9:59:d3:bc:cc:71:16:d5:f8:28:
4b:de:bf:2c:13:0d:82:c8:78:ea:1b:c3:9e:17:49:15:84:f1:
b7:06:6b:37:7d:bd:cf:9e:92:42:ab:d6:eb:f6:72:0a:5d:95:
eb:0d:e5:fa:b8:e7:5c:79:3e:9a:9b:ba:10:65:e7:02:76:c6:
28:75:a0:00:29:e6:7e:23:5d:c8:51:27:91:8d:ea:ac:4c:1e:
09:40:8f:e1:d8:4f:31:0a:5c:c7:d9:f7:c3:8a:a0:52:10:c1:
8d:84:b5:ad:cd:14:a2:8d:b3:77:04:e8:19:d1:1a:40:ff:bb:
f6:78:c9:22:51:8d:45:a5:35:db:fe:9d:b6:49:62:be:13:ec:
ec:6a:2f:5e:31:66:c0:ee:c4:36:55:bf:e0:c3:38:d7:7e:e1:
d0:d9:e3:86:a7:2d:c5:25:9f:36:18:81:24:cb:f8:43:09:77:
55:d2:09:44:9d:ff:3d:8e:ba:e6:91:62:3c:ad:7d:0e:5d:7d:
3f:fa:51:bd:5b:37:fa:d9:c1:fc:a9:dd:57:fe:14:76:bd:67:
e4:e8:9e:f4:86:98:2f:f2:6e:52:56:e7:c4:e2:7f:d7:66:40:
57:95:5d:a9:0e:d0:23:b3:4a:83:ae:9e:f4:32:f0:d5:04:b5:
94:cf:ed:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4txdCViA1C8ZaGFQ4RYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi
ZDcwN2UwHhcNMjUwODA0MDcwMTQzWhcNMjUwODA1MDcwMTQzWjAzMTEwLwYDVQQD
Eyg3YjQ2ZDg5MDBkMjQxYzBlZjI1YmJjZTdlNzdlMzgyMmUyODRiODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hXeN0RxODdCarJWyEzyBIE6NFtW
k6r9Zh3CG9mOoUspkVS/wPhHoBhmKMfIRlzvU2Y9snbcemuhpdJb/FLc6zTbcqnK
n9QlsvG7CWT3jn4HUjQgPOBWTxVDoAZ+Fug/kL57tlFkY0ZwUsZnJ5DaTXayXkQ1
frloB3l8vTle0KMCNBOg6d3m1A92Hxo/vXTvTLkqpxmE7waOjH9ZfbRpPHpzUQqc
Q+QStY5XA/uZiFWrPQKwuL0zKK0NZ9EpTquOpJ76/Fp67cm30X3Jx42KwLQxjg7h
X9B1RRflF1jhWau6SU5wMOriuo42f00A7CuK7E3M6ezSMiW3OMVh43qKVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtG2JANJBwO8lu85+d+OCLihLiWMB8GA1UdIwQY
MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt
ZWNhYjcwZWYzMmRhLzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh
LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcjn0ue5
jIvJWdO8zHEW1fgoS96/LBMNgsh46hvDnhdJFYTxtwZrN329z56SQqvW6/ZyCl2V
6w3l+rjnXHk+mpu6EGXnAnbGKHWgACnmfiNdyFEnkY3qrEweCUCP4dhPMQpcx9n3
w4qgUhDBjYS1rc0Uoo2zdwToGdEaQP+79njJIlGNRaU12/6dtklivhPs7GovXjFm
wO7ENlW/4MM4137h0NnjhqctxSWfNhiBJMv4Qwl3VdIJRJ3/PY665pFiPK19Dl19
P/pRvVs3+tnB/KndV/4Udr1n5Oie9IaYL/JuUlbnxOJ/12ZAV5VdqQ7QI7NKg66e
9DLw1QS1lM/tOw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:40 2025 by rpki-client