Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: FdMi5mlE7zwbZ4LwkRpdZYdX1P4OPYTg+QwdgoPfIGY=
Subject key identifier: 61:F5:A1:D2:5C:2C:32:AD:39:64:28:17:21:1F:25:85:28:FF:DA:8C
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 01978C9184A89F856EAD471786C4DDA53792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 15A1
Signing time: Fri 20 Jun 2025 09:00:36 +0000
Manifest this update: Fri 20 Jun 2025 09:00:36 +0000
Manifest next update: Sat 21 Jun 2025 09:00:36 +0000
Files and hashes: 1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: efB3W/ajRucA4wHY6gdhK80H8Mo1zOnb/bRud8qYKR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:84:a8:9f:85:6e:ad:47:17:86:c4:dd:a5:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Jun 20 09:00:36 2025 GMT
Not After : Jun 21 09:00:36 2025 GMT
Subject: CN=61f5a1d25c2c32ad39642817211f258528ffda8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:ea:e0:c1:5a:42:94:5f:e5:5f:ab:33:1e:
4d:26:c5:c4:96:f6:65:c4:99:ab:b4:2c:e2:98:a9:
d2:54:ea:01:cd:4a:f1:e5:2c:ae:3e:43:d7:e6:d1:
5b:80:d6:35:73:7d:d5:45:a7:1c:a8:0e:24:c7:54:
16:83:77:21:59:49:e5:84:d7:01:09:92:06:16:88:
6d:3a:d4:07:ab:66:23:9d:b0:24:d0:ba:b2:0a:4c:
9e:09:22:a1:5d:7e:93:97:06:62:40:4e:24:bb:b1:
5c:81:68:1d:80:f0:fb:ec:c8:1e:db:10:e2:2d:1d:
ff:ef:ef:cd:7b:d0:91:8d:cb:6e:d7:b3:0c:72:8d:
4b:09:2d:f5:dd:a0:f9:08:9d:bb:f0:4e:89:a6:6a:
82:ce:1c:f0:c7:c5:6e:74:4d:b8:54:79:fc:21:7e:
e7:3c:a3:75:1b:97:d3:1c:37:a3:7a:98:14:60:aa:
d2:cc:e3:73:16:24:82:6c:b2:4a:23:0c:3f:ef:04:
d8:78:8a:6e:f3:80:15:4f:e5:16:46:94:b3:e4:ac:
5f:1c:69:8d:79:f2:91:73:f7:d2:d7:85:b0:d7:ba:
65:6a:bb:06:73:ea:41:14:3b:60:9a:17:18:00:65:
2a:a0:6d:f5:27:21:07:17:dc:9c:8d:90:08:3f:39:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:A1:D2:5C:2C:32:AD:39:64:28:17:21:1F:25:85:28:FF:DA:8C
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f4:01:c5:27:84:4a:78:89:0c:02:db:92:54:6c:04:85:b6:
0b:9e:56:f3:1a:8f:82:ee:4c:0b:92:40:53:de:ad:b7:87:48:
6e:f6:17:b6:de:aa:db:45:ad:9f:8b:31:8a:82:b0:6f:7b:01:
84:9a:2f:00:cf:c8:cc:6d:6f:d2:b9:b2:86:44:91:e1:a8:bc:
45:ec:b0:01:04:f8:1c:f8:c3:5e:7b:3a:f0:63:3c:86:34:0a:
67:8a:6e:a1:3d:c5:8c:eb:89:e1:cf:43:ac:18:b8:93:71:12:
04:ae:c3:4e:3d:83:ec:e5:47:61:a5:85:ed:d6:b5:ad:64:0f:
71:28:ab:a8:fa:da:b8:e7:81:c8:21:fb:6a:84:fd:d9:cb:49:
0a:f0:ec:61:f3:91:77:1c:61:7a:08:12:44:5a:89:2e:37:20:
43:e9:26:9f:c6:fe:33:fb:a9:c5:6f:61:ab:a8:8b:2a:04:4a:
e6:43:15:47:b2:52:1a:d6:65:b6:dc:7e:0a:1b:1c:ce:48:60:
15:74:e5:35:7a:ea:5b:0f:ca:11:99:ba:60:0f:d5:d0:5a:17:
4b:a2:f7:a5:5f:a1:81:cc:a1:26:d7:50:eb:22:cd:0b:f9:da:
80:d1:7b:ec:d4:d0:57:bf:bd:c3:88:82:23:84:d9:bc:91:b5:
3b:bc:8a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMkYSon4VurUcXhsTdpTeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy
MGI4MzkwHhcNMjUwNjIwMDkwMDM2WhcNMjUwNjIxMDkwMDM2WjAzMTEwLwYDVQQD
Eyg2MWY1YTFkMjVjMmMzMmFkMzk2NDI4MTcyMTFmMjU4NTI4ZmZkYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhjq4MFaQpRf5V+rMx5NJsXElvZl
xJmrtCzimKnSVOoBzUrx5SyuPkPX5tFbgNY1c33VRaccqA4kx1QWg3chWUnlhNcB
CZIGFohtOtQHq2YjnbAk0LqyCkyeCSKhXX6TlwZiQE4ku7FcgWgdgPD77Mge2xDi
LR3/7+/Ne9CRjctu17MMco1LCS313aD5CJ278E6JpmqCzhzwx8VudE24VHn8IX7n
PKN1G5fTHDejepgUYKrSzONzFiSCbLJKIww/7wTYeIpu84AVT+UWRpSz5KxfHGmN
efKRc/fS14Ww17plarsGc+pBFDtgmhcYAGUqoG31JyEHF9ycjZAIPzmutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH1odJcLDKtOWQoFyEfJYUo/9qMMB8GA1UdIwQY
MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt
Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi
LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvQBxSeE
SniJDALbklRsBIW2C55W8xqPgu5MC5JAU96tt4dIbvYXtt6q20Wtn4sxioKwb3sB
hJovAM/IzG1v0rmyhkSR4ai8ReywAQT4HPjDXns68GM8hjQKZ4puoT3FjOuJ4c9D
rBi4k3ESBK7DTj2D7OVHYaWF7da1rWQPcSirqPrauOeByCH7aoT92ctJCvDsYfOR
dxxheggSRFqJLjcgQ+kmn8b+M/upxW9hq6iLKgRK5kMVR7JSGtZlttx+Chsczkhg
FXTlNXrqWw/KEZm6YA/V0FoXS6L3pV+hgcyhJtdQ6yLNC/nagNF77NTQV7+9w4iC
I4TZvJG1O7yKWQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 20:16:44 2025 by rpki-client