Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: 7/TLORlOjGSJPWFHgMG99UGd28c4R0vOEpZwlDNk0r0=
Subject key identifier: 4F:C9:FD:F3:46:CC:50:66:66:4D:F6:CC:2B:BF:85:B9:1E:0E:95:E9
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019874194A9B9F3BA62551DBF286EC298AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0701
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Co1FGKLNhAxKJh91hKekHElQ3wPHpfOKV0hv197HW3A=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4a:9b:9f:3b:a6:25:51:db:f2:86:ec:29:8a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=4fc9fdf346cc5066664df6cc2bbf85b91e0e95e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:43:4a:e6:bc:b7:0f:6a:f5:07:e1:f7:23:
cf:ff:ab:ef:bb:f3:c2:30:0d:71:9e:36:32:4b:d4:
09:04:35:5f:3a:bb:82:82:0c:4f:eb:ee:1b:76:e9:
1e:02:e9:47:b7:b8:f6:f7:e6:1e:15:2d:a5:ef:30:
19:14:61:0b:23:91:99:62:b9:73:8d:4b:45:e8:e0:
79:97:97:02:31:01:95:ea:d3:4b:5f:00:79:4b:46:
cd:56:a5:3a:86:e9:7b:32:73:5d:d3:bc:5f:ca:fd:
e1:a4:42:ff:c4:4b:a4:9d:6a:d5:08:1e:76:82:43:
f2:60:a7:a8:b7:fc:ff:dc:2f:08:8b:27:33:92:af:
8d:75:a4:dc:77:a6:d5:a9:82:fd:ee:e7:64:5e:bb:
2f:99:7f:b5:49:2c:32:8f:c0:e3:04:c5:6b:31:32:
16:93:29:15:d5:32:53:0f:a6:65:a1:57:e3:4a:6d:
2c:78:04:9c:ba:b8:2c:d6:34:9e:a5:f3:b9:89:0c:
e1:55:ae:89:93:af:a5:48:a4:8f:40:fe:6e:e4:1c:
9b:79:cf:ac:20:65:b9:77:64:d9:24:10:43:f2:5d:
7e:b7:43:5d:da:e6:56:ab:d0:8a:f3:c7:05:02:e8:
ed:2c:28:61:92:85:f9:c4:0f:93:ca:aa:01:94:e7:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:FD:F3:46:CC:50:66:66:4D:F6:CC:2B:BF:85:B9:1E:0E:95:E9
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c4:19:2c:41:87:91:26:70:57:b7:24:7b:49:3d:d5:72:49:
d9:ad:35:ea:fd:31:0f:36:e7:30:c0:cc:86:d6:1c:26:c6:91:
d4:c7:b3:36:91:fa:fe:41:aa:3e:6d:c1:29:7e:fe:99:3e:ee:
4d:b1:fa:a0:51:09:29:8f:57:29:76:00:8e:ab:8c:c7:68:a5:
d4:9b:61:8a:ff:16:94:48:bb:91:47:85:5d:66:6a:d3:50:51:
90:3b:d2:fe:58:be:c2:b6:e4:28:e5:5e:93:ba:91:cd:ed:53:
c6:e6:75:22:d9:0f:b1:47:6e:72:ea:63:36:50:db:8b:37:57:
6e:02:f3:83:43:dc:33:43:b7:b9:74:de:bc:ca:e9:32:cb:9b:
43:ec:4a:ac:c2:63:56:d6:1a:b3:3a:1e:e2:19:f1:a3:f4:c3:
c4:9d:20:03:9c:54:8a:91:3f:89:75:30:69:28:ec:bf:e0:6b:
59:b2:d6:36:ed:7f:3f:a4:07:91:91:6f:29:01:ad:4f:4a:2b:
e6:35:8a:7b:cc:33:d6:75:c7:f0:61:63:91:28:72:a2:f9:16:
12:bf:19:83:fc:20:42:33:f5:13:ff:74:dd:a4:00:95:21:46:
d0:f3:8e:0a:f5:94:9b:6f:f0:6c:1a:56:64:71:54:86:7a:61:
e8:f6:8a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GUqbnzumJVHb8obsKYrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh
MTI3N2YwHhcNMjUwODA0MDgwMTExWhcNMjUwODA1MDgwMTExWjAzMTEwLwYDVQQD
Eyg0ZmM5ZmRmMzQ2Y2M1MDY2NjY0ZGY2Y2MyYmJmODViOTFlMGU5NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IRDSua8tw9q9Qfh9yPP/6vvu/PC
MA1xnjYyS9QJBDVfOruCggxP6+4bdukeAulHt7j29+YeFS2l7zAZFGELI5GZYrlz
jUtF6OB5l5cCMQGV6tNLXwB5S0bNVqU6hul7MnNd07xfyv3hpEL/xEuknWrVCB52
gkPyYKeot/z/3C8Iiyczkq+NdaTcd6bVqYL97udkXrsvmX+1SSwyj8DjBMVrMTIW
kykV1TJTD6ZloVfjSm0seAScurgs1jSepfO5iQzhVa6Jk6+lSKSPQP5u5Bybec+s
IGW5d2TZJBBD8l1+t0Nd2uZWq9CK88cFAujtLChhkoX5xA+TyqoBlOewNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/J/fNGzFBmZk32zCu/hbkeDpXpMB8GA1UdIwQY
MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct
NmY0ZDgxODk0MWE4LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4
LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcQZLEGH
kSZwV7cke0k91XJJ2a016v0xDzbnMMDMhtYcJsaR1MezNpH6/kGqPm3BKX7+mT7u
TbH6oFEJKY9XKXYAjquMx2il1Jthiv8WlEi7kUeFXWZq01BRkDvS/li+wrbkKOVe
k7qRze1TxuZ1ItkPsUducupjNlDbizdXbgLzg0PcM0O3uXTevMrpMsubQ+xKrMJj
VtYaszoe4hnxo/TDxJ0gA5xUipE/iXUwaSjsv+BrWbLWNu1/P6QHkZFvKQGtT0or
5jWKe8wz1nXH8GFjkShyovkWEr8Zg/wgQjP1E/903aQAlSFG0POOCvWUm2/wbBpW
ZHFUhnph6PaKlQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:16 2025 by rpki-client