Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: ouAm0XqY9qQu4k9aJEvlMwzrfQ2tT8tA9HG7vgjST3s=
Subject key identifier: EC:98:2F:25:49:DC:A9:08:6F:39:C3:60:A5:8E:0C:F9:1C:23:D2:D7
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019896A4CC6A96C1600785E17EBB5B476AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 14B1
Signing time: Mon 11 Aug 2025 01:00:39 +0000
Manifest this update: Mon 11 Aug 2025 01:00:39 +0000
Manifest next update: Tue 12 Aug 2025 01:00:39 +0000
Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: qc7mhXk0rGlTrvQmS4tkzIGMRn6UNUCNoM226Guy360=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:cc:6a:96:c1:60:07:85:e1:7e:bb:5b:47:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Aug 11 01:00:39 2025 GMT
Not After : Aug 12 01:00:39 2025 GMT
Subject: CN=ec982f2549dca9086f39c360a58e0cf91c23d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:48:f3:9e:ea:aa:b5:bb:ae:74:0e:3f:97:
e9:db:07:00:80:94:3a:4d:52:63:2a:c7:3c:f4:c9:
33:b1:3c:69:7e:96:1a:e7:bc:98:c9:d8:25:55:69:
d2:1e:b3:3b:e2:bf:53:19:1b:19:a3:c9:2b:44:a7:
dc:1a:1d:f7:f1:e0:b5:17:1c:de:59:1b:2d:dd:5a:
52:6a:03:c6:6b:35:4d:94:12:0e:40:93:ba:16:c5:
86:ae:66:ab:0d:1a:80:c6:82:65:22:85:18:56:5e:
73:34:be:9d:82:e5:f9:ab:d6:0c:3e:ac:7c:33:e1:
e4:3e:9a:4c:78:80:6b:fa:39:86:fc:cc:48:57:3f:
aa:51:7b:36:81:4d:22:2a:b6:d2:bf:f1:e6:d6:8d:
e4:fa:e8:78:c8:53:d1:92:b5:32:e5:5c:8e:cf:07:
8b:1c:6d:c6:7e:6f:3e:4a:48:2d:72:67:4c:45:55:
99:c7:f8:85:1e:a1:f4:26:b8:ab:40:10:75:5b:35:
4e:c5:de:6c:b4:45:90:66:8d:b9:6c:cd:12:de:05:
66:63:00:1b:c2:26:c0:20:21:50:f2:6b:4f:a2:46:
eb:8e:22:fa:45:90:77:04:3c:0e:22:cc:1d:d9:12:
ea:c7:c0:6e:0d:19:ad:ed:a1:41:f6:b2:96:b2:98:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:2F:25:49:DC:A9:08:6F:39:C3:60:A5:8E:0C:F9:1C:23:D2:D7
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:06:c5:7d:cb:d7:c6:fc:77:b8:89:35:7c:07:bf:03:04:db:
ee:01:44:03:45:5d:ae:65:96:ef:c1:d7:1f:a6:fb:6d:cf:1e:
fc:33:91:b5:13:a8:39:2c:34:bb:36:cb:de:40:e7:87:ae:af:
40:90:57:ae:85:ff:5a:1d:e6:c4:d7:00:fa:ad:ec:8b:a9:6c:
44:d0:ec:ea:4d:d5:3c:a4:26:db:7c:3d:99:12:49:b4:c3:4a:
95:ee:09:c0:d4:66:68:01:44:10:66:89:68:ed:f4:08:4f:af:
c5:40:ab:0a:b5:7b:ad:a1:61:d1:45:34:f8:ba:58:86:2d:6a:
b5:b2:43:e6:74:83:21:9d:ac:00:90:14:70:55:1c:57:18:9a:
19:ce:78:b9:bc:84:61:49:49:a6:90:5d:18:43:a9:b1:72:f0:
8f:79:5c:3d:6d:e6:8b:63:39:97:40:83:16:27:44:be:30:8e:
61:be:c1:4c:37:a5:4a:74:05:4b:9b:39:82:c6:91:37:9c:fa:
c4:ed:a1:62:6f:9e:3c:7b:3e:99:de:01:f1:41:d8:e2:ac:5f:
6d:0d:9e:d1:15:a7:5a:f3:86:08:9c:02:c1:5d:14:e4:15:1d:
50:7c:06:35:07:ed:53:36:a8:b5:4a:af:98:21:9e:40:64:22:
9a:69:e9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpMxqlsFgB4XhfrtbR2quMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjUwODExMDEwMDM5WhcNMjUwODEyMDEwMDM5WjAzMTEwLwYDVQQD
EyhlYzk4MmYyNTQ5ZGNhOTA4NmYzOWMzNjBhNThlMGNmOTFjMjNkMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLlI857qqrW7rnQOP5fp2wcAgJQ6
TVJjKsc89MkzsTxpfpYa57yYydglVWnSHrM74r9TGRsZo8krRKfcGh338eC1Fxze
WRst3VpSagPGazVNlBIOQJO6FsWGrmarDRqAxoJlIoUYVl5zNL6dguX5q9YMPqx8
M+HkPppMeIBr+jmG/MxIVz+qUXs2gU0iKrbSv/Hm1o3k+uh4yFPRkrUy5VyOzweL
HG3Gfm8+SkgtcmdMRVWZx/iFHqH0JrirQBB1WzVOxd5stEWQZo25bM0S3gVmYwAb
wibAICFQ8mtPokbrjiL6RZB3BDwOIswd2RLqx8BuDRmt7aFB9rKWspgEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyYLyVJ3KkIbznDYKWODPkcI9LXMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgbFfcvX
xvx3uIk1fAe/AwTb7gFEA0VdrmWW78HXH6b7bc8e/DORtROoOSw0uzbL3kDnh66v
QJBXroX/Wh3mxNcA+q3si6lsRNDs6k3VPKQm23w9mRJJtMNKle4JwNRmaAFEEGaJ
aO30CE+vxUCrCrV7raFh0UU0+LpYhi1qtbJD5nSDIZ2sAJAUcFUcVxiaGc54ubyE
YUlJppBdGEOpsXLwj3lcPW3mi2M5l0CDFidEvjCOYb7BTDelSnQFS5s5gsaRN5z6
xO2hYm+ePHs+md4B8UHY4qxfbQ2e0RWnWvOGCJwCwV0U5BUdUHwGNQftUzaotUqv
mCGeQGQimmnppA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:27 2025 by rpki-client