Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: PpEjBbVOyXfgc14U7Ak8p4Kixlr9spGoymmHErcj5HI=
Subject key identifier: DD:FF:7C:41:AD:73:D5:57:3D:47:C5:AA:0C:82:73:D4:39:FB:E0:1E
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 01976C98921C511847ABD60EBAC7133E9E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:27 +0000
Manifest this update: Sat 14 Jun 2025 04:00:27 +0000
Manifest next update: Sun 15 Jun 2025 04:00:27 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: sZ+opoJrCG4ozMTkQpPPyHwWqjefIfRvSTX2BVN+e+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:92:1c:51:18:47:ab:d6:0e:ba:c7:13:3e:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jun 14 04:00:27 2025 GMT
Not After : Jun 15 04:00:27 2025 GMT
Subject: CN=ddff7c41ad73d5573d47c5aa0c8273d439fbe01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:18:a3:07:65:57:e5:07:f0:af:9b:19:a5:
0b:51:b6:6b:c0:11:25:cd:11:67:91:86:d5:5f:2a:
3d:af:5e:7f:9d:d3:c5:59:48:d4:26:90:93:14:dd:
c6:12:f2:72:c2:7c:08:1a:18:00:09:da:97:aa:79:
37:94:33:29:f7:12:f2:48:e4:60:15:ae:05:c9:8c:
68:1f:c9:62:45:50:18:cf:69:74:56:49:85:89:88:
41:d0:80:53:ee:9f:83:c2:98:01:2c:7f:b4:3d:3e:
e8:a9:97:40:2e:76:ff:1f:2d:e9:13:e8:6c:f1:7a:
d2:7c:9e:6c:3b:42:22:ae:c1:4c:be:61:7a:4a:07:
fc:30:f9:5b:9a:ed:ff:25:17:f3:5c:8d:aa:16:10:
27:27:2b:15:48:d6:f3:72:83:93:90:8c:b3:9f:34:
11:e4:4e:05:0d:2f:91:b9:62:70:9f:91:45:5b:7d:
11:f9:81:d0:34:00:88:51:38:5e:91:90:cf:d6:e7:
24:f9:7b:22:48:a8:eb:1a:02:8d:8f:74:b1:f7:b6:
75:06:47:98:2c:bf:8c:8b:12:b4:7d:d1:0a:35:ed:
45:6d:de:4a:5f:af:89:e1:78:0c:64:2f:92:d3:3e:
d0:d6:c0:51:9e:44:a6:a0:df:f0:31:6c:93:1b:4e:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:7C:41:AD:73:D5:57:3D:47:C5:AA:0C:82:73:D4:39:FB:E0:1E
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:c0:16:67:99:45:74:ef:24:be:ae:e6:48:a3:64:b0:56:
aa:4d:63:f3:d7:a1:1e:ed:39:40:93:88:94:6f:1d:b2:65:9a:
c0:12:7d:4d:b9:13:ff:f5:7a:2f:d4:79:bb:0e:b0:c3:f8:31:
91:2e:31:dd:48:8c:8b:5f:2d:ed:e1:c5:ad:5a:a2:23:cc:94:
37:56:af:54:0c:21:d8:ad:16:38:a4:81:c9:a9:5c:56:18:cb:
f5:89:48:10:38:40:f9:19:6a:b4:57:a8:0d:25:ef:a1:ca:63:
d8:87:aa:15:90:0b:fd:39:b0:b7:d6:8c:f0:5f:bd:8f:d1:6f:
1e:4f:0a:0a:db:67:1a:ea:c8:41:cf:16:50:80:8c:d5:ba:aa:
f3:97:9b:5d:32:d0:c8:e0:18:bc:ce:fc:d5:2e:a6:a2:05:5e:
00:15:c0:02:9f:fc:d2:2f:23:85:11:f3:20:ab:1a:aa:b2:f0:
3a:ce:4a:bc:06:ab:b5:b5:54:c7:cf:52:d3:8c:4f:aa:84:60:
a7:8e:6d:b2:26:d1:99:ab:19:fb:f0:cf:b4:39:b9:09:ca:48:
94:f5:e8:df:2c:53:e6:dd:33:cd:96:58:43:b0:7f:98:96:7e:
06:60:b3:68:29:ae:51:54:4a:ea:25:46:7a:3d:e4:60:d1:b9:
15:c0:5d:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJIcURhHq9YOuscTPp4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmM2ZTA5YzE5MmM1NTgwYTRhMWQyOTQxNTBkNjIzN2Fi
ODkyNWQwHhcNMjUwNjE0MDQwMDI3WhcNMjUwNjE1MDQwMDI3WjAzMTEwLwYDVQQD
EyhkZGZmN2M0MWFkNzNkNTU3M2Q0N2M1YWEwYzgyNzNkNDM5ZmJlMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeIYowdlV+UH8K+bGaULUbZrwBEl
zRFnkYbVXyo9r15/ndPFWUjUJpCTFN3GEvJywnwIGhgACdqXqnk3lDMp9xLySORg
Fa4FyYxoH8liRVAYz2l0VkmFiYhB0IBT7p+DwpgBLH+0PT7oqZdALnb/Hy3pE+hs
8XrSfJ5sO0IirsFMvmF6Sgf8MPlbmu3/JRfzXI2qFhAnJysVSNbzcoOTkIyznzQR
5E4FDS+RuWJwn5FFW30R+YHQNACIUThekZDP1uck+XsiSKjrGgKNj3Sx97Z1BkeY
LL+MixK0fdEKNe1Fbd5KX6+J4XgMZC+S0z7Q1sBRnkSmoN/wMWyTG05IGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3/fEGtc9VXPUfFqgyCc9Q5++AeMB8GA1UdIwQY
MBaAFJksbgnBksVYCkodKUFQ1iN6uJJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzIt
MmMxODkxY2FjYWM3LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzItMmMxODkxY2FjYWM3
LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCjAFmeZ
RXTvJL6u5kijZLBWqk1j89ehHu05QJOIlG8dsmWawBJ9TbkT//V6L9R5uw6ww/gx
kS4x3UiMi18t7eHFrVqiI8yUN1avVAwh2K0WOKSByalcVhjL9YlIEDhA+RlqtFeo
DSXvocpj2IeqFZAL/Tmwt9aM8F+9j9FvHk8KCttnGurIQc8WUICM1bqq85ebXTLQ
yOAYvM781S6mogVeABXAAp/80i8jhRHzIKsaqrLwOs5KvAartbVUx89S04xPqoRg
p45tsibRmasZ+/DPtDm5CcpIlPXo3yxT5t0zzZZYQ7B/mJZ+BmCzaCmuUVRK6iVG
ej3kYNG5FcBdVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:30:03 2025 by rpki-client