Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: BNnZFZaria8WxtosT58p2BxGcr1z0S+/GPPi6B+H5Q8=
Subject key identifier: 02:41:10:3C:44:D3:05:E3:4D:CF:51:7A:8D:CE:A7:DD:CF:41:B0:25
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 019873E3E28FBE939E17673ADDEA294BEBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:51 +0000
Manifest this update: Mon 04 Aug 2025 07:02:51 +0000
Manifest next update: Tue 05 Aug 2025 07:02:51 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: B4VKHRGv2H37sn8HZkpMo98SXzN0IQ01PCZkRxrk+d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:e2:8f:be:93:9e:17:67:3a:dd:ea:29:4b:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Aug 4 07:02:51 2025 GMT
Not After : Aug 5 07:02:51 2025 GMT
Subject: CN=0241103c44d305e34dcf517a8dcea7ddcf41b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:ba:77:a2:5a:de:3b:28:ff:55:71:49:5f:
c0:cb:1d:bd:ca:54:8e:30:15:b3:7b:9f:9c:76:60:
81:04:5f:ac:a5:87:f0:a4:49:0f:6f:00:d2:a8:ce:
59:d0:5c:66:d0:09:53:2f:51:bf:71:02:0d:19:8f:
82:d1:15:bd:cd:37:23:c6:4b:2f:e6:f3:0a:88:d9:
75:d4:64:3f:44:ad:45:ee:1d:c5:90:ec:36:3b:22:
07:66:87:5f:91:76:b8:f1:74:8a:85:5f:45:f6:f1:
d6:0f:e0:9f:e3:2e:7c:08:51:92:4b:ae:0e:eb:6f:
56:fc:35:02:f5:77:64:3a:28:ef:62:8d:38:e8:40:
cf:64:d4:c1:2a:eb:a6:88:21:97:a6:5c:fe:a9:88:
21:36:df:8c:19:ed:30:48:e4:79:d3:98:06:c0:20:
3d:f3:ee:c2:a1:8b:dd:cc:40:44:bb:ea:e3:2a:09:
4f:c2:f4:2c:a7:17:98:ac:b3:ce:8c:05:a3:71:1b:
48:13:06:29:ba:74:ce:1e:5e:9a:65:9c:3d:5c:90:
75:bc:65:85:3c:a7:05:32:14:02:03:f1:4f:00:00:
6c:b1:63:b1:9e:86:99:2e:de:4a:8e:b2:e4:9b:be:
b9:a5:c4:d0:61:8e:22:82:fc:32:86:e9:c0:03:5b:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:10:3C:44:D3:05:E3:4D:CF:51:7A:8D:CE:A7:DD:CF:41:B0:25
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:39:27:5a:1f:a7:0b:3c:11:41:14:29:f7:7c:23:2a:ba:
4c:7f:4e:be:2e:09:1c:9e:21:ef:9d:29:09:5a:9e:0b:54:28:
1b:3d:a9:58:6b:3f:2b:3f:69:5f:18:83:af:84:3b:fb:3b:ec:
83:3c:5b:cc:1e:ba:2a:3f:95:2c:df:c2:3e:ed:c5:a6:4c:bd:
dd:ca:af:7c:e0:51:e7:7c:94:a9:a4:f4:aa:6a:b8:a0:8f:34:
36:6b:e3:16:a5:99:4a:50:7c:8d:62:8b:6c:bf:bc:ba:f7:ad:
27:0f:22:5f:5d:a8:39:3c:56:2e:fb:c5:68:4e:ea:33:cb:cb:
3b:94:f7:56:43:34:44:2a:de:a3:07:86:27:66:1b:b2:1b:73:
92:55:26:4e:63:1e:87:07:ca:70:82:36:8f:9f:cb:49:de:4c:
9e:60:38:a9:72:1e:d4:c5:21:b2:3f:e4:f6:62:5a:cc:9f:91:
98:1c:95:5f:d1:81:71:dd:62:d0:ef:69:32:cf:18:05:6b:64:
36:b3:69:ba:21:91:a5:88:3a:8e:fe:c4:a1:90:82:49:de:e1:
1f:a8:16:09:58:71:bc:7b:b0:11:38:31:7f:df:46:6e:48:23:
fa:f1:dd:7d:aa:66:03:58:65:06:21:b5:fc:3b:a5:4a:bf:a1:
ec:30:75:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4+KPvpOeF2c63eopS+ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDg0MmRiMDgzN2RhZjMxMWEzMzRiNzIyMzE4ZTcwYjU4
OGIwMDkwHhcNMjUwODA0MDcwMjUxWhcNMjUwODA1MDcwMjUxWjAzMTEwLwYDVQQD
EygwMjQxMTAzYzQ0ZDMwNWUzNGRjZjUxN2E4ZGNlYTdkZGNmNDFiMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLK6d6Ja3jso/1VxSV/Ayx29ylSO
MBWze5+cdmCBBF+spYfwpEkPbwDSqM5Z0Fxm0AlTL1G/cQINGY+C0RW9zTcjxksv
5vMKiNl11GQ/RK1F7h3FkOw2OyIHZodfkXa48XSKhV9F9vHWD+Cf4y58CFGSS64O
629W/DUC9XdkOijvYo046EDPZNTBKuumiCGXplz+qYghNt+MGe0wSOR505gGwCA9
8+7CoYvdzEBEu+rjKglPwvQspxeYrLPOjAWjcRtIEwYpunTOHl6aZZw9XJB1vGWF
PKcFMhQCA/FPAABssWOxnoaZLt5KjrLkm765pcTQYY4igvwyhunAA1s7yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJBEDxE0wXjTc9Reo3Op93PQbAlMB8GA1UdIwQY
MBaAFDAIQtsIN9rzEaM0tyIxjnC1iLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMt
NTMxMmExMzNiOTRlLzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMtNTMxMmExMzNiOTRl
LzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA45J1of
pws8EUEUKfd8Iyq6TH9Ovi4JHJ4h750pCVqeC1QoGz2pWGs/Kz9pXxiDr4Q7+zvs
gzxbzB66Kj+VLN/CPu3Fpky93cqvfOBR53yUqaT0qmq4oI80NmvjFqWZSlB8jWKL
bL+8uvetJw8iX12oOTxWLvvFaE7qM8vLO5T3VkM0RCreoweGJ2YbshtzklUmTmMe
hwfKcII2j5/LSd5MnmA4qXIe1MUhsj/k9mJazJ+RmByVX9GBcd1i0O9pMs8YBWtk
NrNpuiGRpYg6jv7EoZCCSd7hH6gWCVhxvHuwETgxf99Gbkgj+vHdfapmA1hlBiG1
/DulSr+h7DB1dg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:04 2025 by rpki-client