Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: mpZbepFSDN7JZByB4kgMBTnuDeSQRRmCa3peTfPFKnQ=
Subject key identifier: 73:0C:B4:61:4D:0D:58:9B:37:64:81:3D:F5:03:B2:57:91:17:13:34
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 0198A04D444B5C54031D4B25376628930BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 035D
Signing time: Tue 12 Aug 2025 22:01:14 +0000
Manifest this update: Tue 12 Aug 2025 22:01:14 +0000
Manifest next update: Wed 13 Aug 2025 22:01:14 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: tVK7iOIkmISZjUyCwYOTkdHouy+tT3Rtx+Zl5FJ1fUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:44:4b:5c:54:03:1d:4b:25:37:66:28:93:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Aug 12 22:01:14 2025 GMT
Not After : Aug 13 22:01:14 2025 GMT
Subject: CN=730cb4614d0d589b3764813df503b25791171334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:e3:88:1e:2c:d4:60:25:12:cb:1e:02:ce:
da:96:3f:9e:4c:61:c9:b8:f0:c8:c4:0d:b8:bf:f8:
96:da:bb:ec:4f:2d:4f:1b:b1:0e:ed:85:94:1d:1e:
c5:6a:a4:cb:16:68:e4:3e:ec:20:99:1b:c8:ff:85:
70:39:1b:82:53:f3:d6:4d:27:5a:c6:36:56:b9:ae:
7e:0e:c7:b7:a6:08:8a:f6:16:e0:82:02:05:a4:2b:
9e:03:0a:ba:db:97:80:ca:d4:10:42:a1:b3:2a:bf:
80:bb:d0:8e:56:d0:a3:cc:de:85:56:98:11:96:82:
aa:0f:49:b5:f4:b0:0d:c4:bb:3b:eb:a6:b1:f6:4d:
b3:a0:e5:a3:cc:c8:6e:cc:b8:6c:17:44:1a:ae:0c:
31:74:1f:7f:4c:7c:de:e8:ac:eb:9e:61:d0:37:00:
54:e7:f4:ec:bf:fe:ed:f0:0d:84:75:fa:e4:c5:bb:
05:b9:75:fb:10:71:0e:e3:77:10:2f:35:cc:91:80:
ae:14:41:c5:9a:76:60:a3:f3:a0:37:06:e1:ac:ce:
40:88:6b:cb:de:99:9e:34:31:b9:70:73:45:10:e8:
33:15:13:79:1e:3c:7c:db:78:03:39:e5:80:f2:f7:
01:64:1f:05:27:6e:d1:f4:21:b0:62:0c:de:21:5b:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:B4:61:4D:0D:58:9B:37:64:81:3D:F5:03:B2:57:91:17:13:34
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:30:54:07:63:76:3e:87:4a:bf:9d:9b:a5:79:27:f3:14:
02:bd:c3:93:0b:a1:0f:e6:f5:31:b6:e6:0d:b0:c1:9c:61:0e:
98:b8:f0:2b:28:7d:1b:f7:23:b8:48:34:20:25:62:d0:20:aa:
05:8f:24:f8:76:9e:c8:b9:5b:88:01:65:b2:b3:25:4d:9d:16:
ec:ad:d9:cc:49:cc:9f:6b:c2:00:ca:62:cc:81:68:df:5a:3d:
be:f0:ce:51:74:cb:ef:e9:2c:01:c6:2f:fa:91:eb:64:1a:5c:
f8:6a:a3:b9:f6:4a:ff:99:cd:d0:d3:10:db:94:47:62:2f:4f:
49:de:6c:5f:8b:30:72:41:4d:42:0d:80:00:c0:5a:3d:0f:b8:
15:50:3b:05:87:8d:70:94:34:48:4a:0c:85:c0:67:0d:ff:90:
42:80:c5:3e:6a:25:83:0b:6c:b2:2f:2f:fb:bf:ec:4a:78:30:
2e:1f:c6:da:c6:f6:91:6c:c6:58:aa:a1:00:2c:ea:1a:4c:c6:
07:78:46:31:24:f8:b8:a7:3e:ae:2e:ba:19:8a:37:09:d6:7c:
60:8c:99:4c:5c:59:0e:1f:3c:57:a3:6f:e2:70:e7:65:f2:95:
cc:a3:e4:d6:1b:be:43:78:f7:e3:98:51:a4:75:d1:1a:a8:72:
d8:5e:58:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTURLXFQDHUslN2Yokwv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx
YmM0ZjQwHhcNMjUwODEyMjIwMTE0WhcNMjUwODEzMjIwMTE0WjAzMTEwLwYDVQQD
Eyg3MzBjYjQ2MTRkMGQ1ODliMzc2NDgxM2RmNTAzYjI1NzkxMTcxMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0zjiB4s1GAlEsseAs7alj+eTGHJ
uPDIxA24v/iW2rvsTy1PG7EO7YWUHR7FaqTLFmjkPuwgmRvI/4VwORuCU/PWTSda
xjZWua5+Dse3pgiK9hbgggIFpCueAwq625eAytQQQqGzKr+Au9COVtCjzN6FVpgR
loKqD0m19LANxLs766ax9k2zoOWjzMhuzLhsF0QargwxdB9/THze6KzrnmHQNwBU
5/Tsv/7t8A2EdfrkxbsFuXX7EHEO43cQLzXMkYCuFEHFmnZgo/OgNwbhrM5AiGvL
3pmeNDG5cHNFEOgzFRN5Hjx823gDOeWA8vcBZB8FJ27R9CGwYgzeIVufgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMMtGFNDVibN2SBPfUDsleRFxM0MB8GA1UdIwQY
MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt
YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3
LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHIwVAdj
dj6HSr+dm6V5J/MUAr3DkwuhD+b1MbbmDbDBnGEOmLjwKyh9G/cjuEg0ICVi0CCq
BY8k+HaeyLlbiAFlsrMlTZ0W7K3ZzEnMn2vCAMpizIFo31o9vvDOUXTL7+ksAcYv
+pHrZBpc+GqjufZK/5nN0NMQ25RHYi9PSd5sX4swckFNQg2AAMBaPQ+4FVA7BYeN
cJQ0SEoMhcBnDf+QQoDFPmolgwtssi8v+7/sSngwLh/G2sb2kWzGWKqhACzqGkzG
B3hGMST4uKc+ri66GYo3CdZ8YIyZTFxZDh88V6Nv4nDnZfKVzKPk1hu+Q3j345hR
pHXRGqhy2F5Y+w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:06 2025 by rpki-client