Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: /wLUgdNwQE8cIvcTWJJTG/cweC+kE3tSFeFFuymWc5k=
Subject key identifier: C7:F6:64:3D:BD:61:33:26:AC:26:91:0B:22:76:63:95:E7:DD:FA:71
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019873E2307E1A651809F381E7E90B433086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0460
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: itsE8eBMnmbxopUlOC9cgFSX+OBF2QGfe7dr7bcZLOw=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:30:7e:1a:65:18:09:f3:81:e7:e9:0b:43:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=c7f6643dbd613326ac26910b22766395e7ddfa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:6b:6e:9a:43:57:8f:74:bd:6e:db:38:6d:
5a:2b:e1:a1:39:19:43:76:04:f1:fc:1a:f0:d7:92:
63:e2:97:07:ff:37:9c:7d:53:d3:d3:d9:bf:85:31:
0e:4c:6b:01:e8:95:47:32:8f:e8:86:66:7a:9d:fc:
4d:92:fa:1f:35:3a:b7:d2:0c:da:db:cd:84:7f:4c:
ab:4b:a4:e5:7a:36:12:58:a4:f6:6e:f2:8f:2c:ac:
55:a4:e8:73:a5:ca:1a:48:86:74:2a:91:b6:4a:bf:
9d:69:b7:48:c3:37:39:9b:ea:3b:f6:22:f1:52:04:
cf:95:6c:58:5f:37:32:fb:8d:d6:29:42:17:24:7c:
45:08:15:6f:32:22:61:f7:ad:15:b9:d1:ff:66:ba:
69:0b:4f:fb:f8:bd:31:22:6c:55:14:21:a8:8e:d4:
25:e3:4d:82:d3:44:63:59:52:5a:21:aa:25:40:a0:
8b:f5:8e:d8:5b:ec:3a:c6:02:f6:b7:41:c3:63:4a:
9e:9c:97:c9:22:df:86:94:20:b5:fa:de:01:82:56:
66:ee:68:9e:2f:91:f0:b9:24:d1:58:13:01:e6:c2:
a9:d0:39:5e:2a:1e:3e:5f:75:f3:05:0a:56:0d:db:
c2:ee:4f:12:b6:cb:e2:0c:10:a5:42:32:ad:33:a7:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:64:3D:BD:61:33:26:AC:26:91:0B:22:76:63:95:E7:DD:FA:71
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b7:82:c8:22:c9:b7:5b:f3:28:8a:a0:36:3f:15:dc:78:31:
07:18:1c:d2:c5:26:8d:04:83:22:d2:ab:04:2f:5c:eb:51:45:
1f:88:44:ea:6b:1e:2b:41:32:f0:1b:7a:fe:07:79:87:74:10:
d8:13:94:32:8a:a1:b9:bd:e4:31:ac:7f:9a:63:5b:bb:28:3d:
46:5d:4d:87:db:8f:88:14:7a:f3:1f:ea:68:40:87:33:9d:55:
17:0b:06:c2:09:0a:de:3b:c5:b6:f3:e3:17:23:b8:80:d8:df:
44:b4:58:cd:8c:16:d2:54:13:34:92:cb:d3:ed:08:ef:af:da:
47:4e:c4:3a:20:c5:76:5c:17:69:8b:6f:97:98:25:4e:95:99:
0c:e9:90:0e:a9:85:3f:89:af:83:3a:de:3e:e4:e3:06:b9:5f:
e7:c6:73:db:ff:32:48:32:b4:6c:df:ed:92:69:d1:b7:9a:79:
99:90:6b:a5:29:bc:3c:ae:9c:e7:9a:91:a7:79:51:df:e8:e6:
67:51:16:ae:44:a9:8e:66:26:ff:2b:71:fb:4c:9a:02:3a:c4:
27:45:51:53:bd:4f:f7:f9:4d:f6:03:92:cd:4f:80:a7:9e:6f:
10:d9:e8:ff:a6:81:88:65:91:2c:49:b0:fe:e9:b9:82:9c:ca:
64:82:e1:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4jB+GmUYCfOB5+kLQzCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm
NDUzMDcwHhcNMjUwODA0MDcwMTAwWhcNMjUwODA1MDcwMTAwWjAzMTEwLwYDVQQD
EyhjN2Y2NjQzZGJkNjEzMzI2YWMyNjkxMGIyMjc2NjM5NWU3ZGRmYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhrbppDV490vW7bOG1aK+GhORlD
dgTx/Brw15Jj4pcH/zecfVPT09m/hTEOTGsB6JVHMo/ohmZ6nfxNkvofNTq30gza
282Ef0yrS6TlejYSWKT2bvKPLKxVpOhzpcoaSIZ0KpG2Sr+dabdIwzc5m+o79iLx
UgTPlWxYXzcy+43WKUIXJHxFCBVvMiJh960VudH/ZrppC0/7+L0xImxVFCGojtQl
402C00RjWVJaIaolQKCL9Y7YW+w6xgL2t0HDY0qenJfJIt+GlCC1+t4BglZm7mie
L5HwuSTRWBMB5sKp0DleKh4+X3XzBQpWDdvC7k8StsviDBClQjKtM6etmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf2ZD29YTMmrCaRCyJ2Y5Xn3fpxMB8GA1UdIwQY
MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt
MmNhZGNmNjY1OGNhLzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh
LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLeCyCLJ
t1vzKIqgNj8V3HgxBxgc0sUmjQSDItKrBC9c61FFH4hE6mseK0Ey8Bt6/gd5h3QQ
2BOUMoqhub3kMax/mmNbuyg9Rl1Nh9uPiBR68x/qaECHM51VFwsGwgkK3jvFtvPj
FyO4gNjfRLRYzYwW0lQTNJLL0+0I76/aR07EOiDFdlwXaYtvl5glTpWZDOmQDqmF
P4mvgzrePuTjBrlf58Zz2/8ySDK0bN/tkmnRt5p5mZBrpSm8PK6c55qRp3lR3+jm
Z1EWrkSpjmYm/ytx+0yaAjrEJ0VRU71P9/lN9gOSzU+Ap55vENno/6aBiGWRLEmw
/um5gpzKZILhhw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:52 2025 by rpki-client