Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: gVuFcPvABcYb4p1PCQ2zMN6avmU+Z4ioFHS5CjaSizQ=
Subject key identifier: 4F:BA:DB:E6:82:DC:A1:46:77:16:77:2C:0B:17:29:FF:67:9C:4E:76
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01988CFE1DC5107524FE463F6E1C9FDDBFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 05FE
Signing time: Sat 09 Aug 2025 04:02:00 +0000
Manifest this update: Sat 09 Aug 2025 04:02:00 +0000
Manifest next update: Sun 10 Aug 2025 04:02:00 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: za4uDktYf5bZwXBeLzTg+aBRoNy2adROLxyPF6nNu98=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:1d:c5:10:75:24:fe:46:3f:6e:1c:9f:dd:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Aug 9 04:02:00 2025 GMT
Not After : Aug 10 04:02:00 2025 GMT
Subject: CN=4fbadbe682dca1467716772c0b1729ff679c4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:29:b5:ca:dd:f8:a3:6c:7c:fd:38:cc:23:
17:9d:3d:92:37:a4:f1:eb:a2:4a:a1:94:b3:d8:da:
cb:54:6c:be:7a:8e:20:8e:39:b7:6f:77:01:5b:88:
9d:41:06:f6:13:97:72:fc:07:6c:62:7d:06:79:c4:
93:38:77:bc:dd:97:86:63:ed:8c:e4:8d:4c:60:39:
7f:9e:21:04:eb:5f:bc:55:c7:c0:f1:3c:ff:31:05:
46:3c:29:a3:20:6e:37:2b:24:6b:0f:4b:1a:9a:bf:
6f:02:76:0f:63:24:f2:20:b1:35:12:d2:5a:a2:99:
ba:6f:38:33:f0:7b:03:1b:b1:08:1c:a9:1f:73:0e:
bc:ff:21:f3:81:e0:95:8b:d1:e3:58:5a:b1:d9:49:
95:c0:b0:1d:55:49:84:ff:6b:af:20:2b:c6:68:c4:
d7:d6:84:9e:db:7e:cb:87:6b:cb:9f:c0:25:e3:c4:
67:fa:84:c3:a4:af:da:d0:a3:df:ca:e3:ad:0a:5c:
b8:f1:a6:0f:06:95:35:96:c5:fb:a1:f2:51:c0:de:
30:58:6e:85:eb:18:36:60:e7:bf:0e:9e:88:6c:91:
85:49:bf:f1:36:34:7f:b5:46:82:08:85:a1:e1:a2:
18:d9:c0:aa:9e:a3:03:0a:20:65:61:7b:17:41:21:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:DB:E6:82:DC:A1:46:77:16:77:2C:0B:17:29:FF:67:9C:4E:76
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:33:65:8c:0f:0d:58:3c:57:35:8d:63:2e:58:5d:f3:4e:e0:
5a:4b:26:f5:a5:6d:b2:c0:98:d1:9c:66:84:35:ea:20:6b:23:
d1:10:84:83:97:4d:28:0d:0b:5a:27:00:1c:87:f2:fd:4c:96:
6f:59:4b:14:61:d1:9d:12:db:70:05:30:59:35:28:91:d2:ab:
50:a2:19:56:db:40:d0:6c:47:57:ec:05:28:5f:86:2d:f5:ca:
da:28:1b:d3:2b:dc:b4:36:b9:7d:26:66:6d:c9:0a:4d:23:d0:
2c:d2:99:1b:2a:6c:fd:f0:59:9c:8b:9c:b9:9c:d1:df:e8:d1:
e0:e4:0e:92:3f:8d:da:ac:cf:d4:62:50:b0:67:46:a3:d0:2d:
ae:f3:2a:af:2c:f4:2e:4f:52:d9:98:5a:c5:5a:80:b7:b5:0c:
d5:cf:80:95:34:bc:9d:22:5b:d0:77:85:fe:48:f2:2f:6d:83:
40:b5:93:86:cb:2d:f0:a4:95:42:d7:fc:11:29:31:7e:65:b3:
05:66:2d:e7:7e:15:4f:d2:77:dd:ad:4b:3e:79:cf:fc:6d:eb:
4a:cb:29:27:3d:5c:db:ed:bd:b5:be:8d:29:37:75:fd:77:62:
fa:76:b1:51:04:18:c6:c7:43:a6:f4:67:25:1d:54:2b:47:90:
56:67:a3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/h3FEHUk/kY/bhyf3b/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjUwODA5MDQwMjAwWhcNMjUwODEwMDQwMjAwWjAzMTEwLwYDVQQD
Eyg0ZmJhZGJlNjgyZGNhMTQ2NzcxNjc3MmMwYjE3MjlmZjY3OWM0ZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nwptcrd+KNsfP04zCMXnT2SN6Tx
66JKoZSz2NrLVGy+eo4gjjm3b3cBW4idQQb2E5dy/AdsYn0GecSTOHe83ZeGY+2M
5I1MYDl/niEE61+8VcfA8Tz/MQVGPCmjIG43KyRrD0samr9vAnYPYyTyILE1EtJa
opm6bzgz8HsDG7EIHKkfcw68/yHzgeCVi9HjWFqx2UmVwLAdVUmE/2uvICvGaMTX
1oSe237Lh2vLn8Al48Rn+oTDpK/a0KPfyuOtCly48aYPBpU1lsX7ofJRwN4wWG6F
6xg2YOe/Dp6IbJGFSb/xNjR/tUaCCIWh4aIY2cCqnqMDCiBlYXsXQSEBOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+62+aC3KFGdxZ3LAsXKf9nnE52MB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjNljA8N
WDxXNY1jLlhd807gWksm9aVtssCY0ZxmhDXqIGsj0RCEg5dNKA0LWicAHIfy/UyW
b1lLFGHRnRLbcAUwWTUokdKrUKIZVttA0GxHV+wFKF+GLfXK2igb0yvctDa5fSZm
bckKTSPQLNKZGyps/fBZnIucuZzR3+jR4OQOkj+N2qzP1GJQsGdGo9AtrvMqryz0
Lk9S2ZhaxVqAt7UM1c+AlTS8nSJb0HeF/kjyL22DQLWThsst8KSVQtf8ESkxfmWz
BWYt534VT9J33a1LPnnP/G3rSsspJz1c2+29tb6NKTd1/Xdi+naxUQQYxsdDpvRn
JR1UK0eQVmej7g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:42 2025 by rpki-client