Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: ULuKx/ZpX9qcHYU9AlQFl2BNOYHMoQMvnTBHi2hUC0Q=
Subject key identifier: 7C:0A:44:9A:13:73:B1:DB:F7:4B:72:BA:AC:F5:52:DC:4B:2C:61:08
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01976C622DFD6E3F23FBBF8CD3DBE2CDF810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0B18
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: rjU2V6fw5eVno7L0G3HWUybngTC30d2jSAKc8c66KQc=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2d:fd:6e:3f:23:fb:bf:8c:d3:db:e2:cd:f8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=7c0a449a1373b1dbf74b72baacf552dc4b2c6108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:28:ec:5e:1d:5b:48:c3:21:c2:9e:aa:9c:
a6:65:19:7b:88:b3:28:13:37:55:1a:12:3d:03:66:
f5:74:81:17:69:d9:c3:bc:ab:bf:08:2b:8e:91:0e:
79:71:08:4c:b5:15:64:14:5f:e3:83:fb:f1:2f:0e:
db:20:94:4b:52:a8:3f:69:ac:9a:cb:6a:2c:fa:9c:
f5:9c:f6:ee:0b:4f:ff:32:d2:45:9d:f6:15:6f:93:
54:c4:8e:9e:42:20:5e:44:70:ff:b6:92:51:be:1a:
73:23:96:c7:7a:24:86:42:c7:fa:3a:67:83:2f:ca:
1f:a6:7f:f7:c9:cf:d7:02:b5:c0:6c:e3:9c:c0:ca:
22:1e:97:9b:c1:25:4b:dd:5b:7a:60:b4:bb:3b:c0:
26:70:17:fa:d2:85:a7:eb:2f:67:10:1e:16:e3:38:
9d:5d:c5:cd:be:77:f5:35:3e:06:45:0e:9e:5b:17:
95:8b:ec:d8:e8:dd:b4:41:70:7e:ab:d8:20:ad:4e:
97:73:ac:1f:7a:94:c5:0e:65:de:a0:b7:18:0b:95:
0a:47:51:d7:97:f2:ed:b3:7c:a1:be:51:bb:c6:d4:
82:41:4a:e7:78:2f:e2:0b:bb:a3:e5:c0:cd:5f:57:
69:f0:7f:3a:45:ac:34:b7:cd:ce:93:52:c3:f4:21:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:44:9A:13:73:B1:DB:F7:4B:72:BA:AC:F5:52:DC:4B:2C:61:08
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f7:46:a5:66:4f:f5:c9:06:ae:48:da:f2:6a:43:a9:0f:de:
bf:d9:36:51:45:e8:56:16:8e:1f:34:11:d4:69:ac:00:4c:3d:
04:11:6a:46:42:26:17:0c:5a:75:41:ea:52:98:a6:1f:0a:67:
2b:43:4e:8d:68:c3:ab:e9:77:f9:5e:3f:4f:52:45:da:0b:20:
b2:a7:09:4b:a9:51:e6:52:49:39:e2:cf:d3:df:ca:4c:7b:41:
b8:fe:93:5c:de:b7:9b:d9:d2:79:04:78:05:86:1d:41:c3:55:
7f:14:c4:e7:01:f6:f5:d2:8a:c0:48:c7:be:c1:4a:c8:39:14:
f5:97:18:40:0d:e9:8a:dd:23:ce:26:de:4a:c5:d9:d3:61:d1:
fa:ac:3b:b4:da:4a:cf:4b:fa:38:37:6e:ba:b3:e5:76:df:96:
01:ac:d0:5f:4e:75:32:2f:7a:8a:6c:26:e0:2d:f2:3f:90:0b:
15:56:20:e0:55:e8:16:78:19:ff:d7:ba:cb:02:bd:da:d6:03:
3b:1b:54:0d:9b:90:81:66:86:1a:13:6d:5b:64:36:8d:5d:76:
a7:bf:ba:5f:c5:2c:e7:09:e6:d5:1e:0c:05:db:72:16:72:c1:
48:4b:a5:d1:cd:92:6a:4d:2b:7e:4c:ac:71:2a:a0:6c:c3:51:
6c:d4:d7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYi39bj8j+7+M09vizfgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1
ODM3MWUwHhcNMjUwNjE0MDMwMTAyWhcNMjUwNjE1MDMwMTAyWjAzMTEwLwYDVQQD
Eyg3YzBhNDQ5YTEzNzNiMWRiZjc0YjcyYmFhY2Y1NTJkYzRiMmM2MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomso7F4dW0jDIcKeqpymZRl7iLMo
EzdVGhI9A2b1dIEXadnDvKu/CCuOkQ55cQhMtRVkFF/jg/vxLw7bIJRLUqg/aaya
y2os+pz1nPbuC0//MtJFnfYVb5NUxI6eQiBeRHD/tpJRvhpzI5bHeiSGQsf6OmeD
L8ofpn/3yc/XArXAbOOcwMoiHpebwSVL3Vt6YLS7O8AmcBf60oWn6y9nEB4W4zid
XcXNvnf1NT4GRQ6eWxeVi+zY6N20QXB+q9ggrU6Xc6wfepTFDmXeoLcYC5UKR1HX
l/Lts3yhvlG7xtSCQUrneC/iC7uj5cDNX1dp8H86Raw0t83Ok1LD9CGvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwKRJoTc7Hb90tyuqz1UtxLLGEIMB8GA1UdIwQY
MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt
MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5
LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffdGpWZP
9ckGrkja8mpDqQ/ev9k2UUXoVhaOHzQR1GmsAEw9BBFqRkImFwxadUHqUpimHwpn
K0NOjWjDq+l3+V4/T1JF2gsgsqcJS6lR5lJJOeLP09/KTHtBuP6TXN63m9nSeQR4
BYYdQcNVfxTE5wH29dKKwEjHvsFKyDkU9ZcYQA3pit0jzibeSsXZ02HR+qw7tNpK
z0v6ODduurPldt+WAazQX051Mi96imwm4C3yP5ALFVYg4FXoFngZ/9e6ywK92tYD
OxtUDZuQgWaGGhNtW2Q2jV12p7+6X8Us5wnm1R4MBdtyFnLBSEul0c2Sak0rfkys
cSqgbMNRbNTXyw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:28 2025 by rpki-client