Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: q4vsVUwId01aoML+l4BodKbVf86Q4lXH5GOzL0g58hw=
Subject key identifier: C4:A3:32:FF:EA:0D:56:D5:33:9E:96:AA:C5:0C:FE:3D:76:0C:B7:31
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019879E46520A69553D0585EDC337625BBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1580
Signing time: Tue 05 Aug 2025 11:01:07 +0000
Manifest this update: Tue 05 Aug 2025 11:01:07 +0000
Manifest next update: Wed 06 Aug 2025 11:01:07 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: 3ZCE0RvXSmeX3ZwtmVLpP1G9llORpoiMLXCprSnoP7o=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:65:20:a6:95:53:d0:58:5e:dc:33:76:25:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Aug 5 11:01:07 2025 GMT
Not After : Aug 6 11:01:07 2025 GMT
Subject: CN=c4a332ffea0d56d5339e96aac50cfe3d760cb731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:c4:29:89:11:f8:fa:f1:a5:f7:80:d4:d4:
d8:d9:41:ce:87:4d:73:3c:c0:81:56:06:c9:fe:f4:
bc:16:15:fc:f7:93:ad:01:d2:ee:40:15:8e:fa:61:
06:07:bd:e9:71:b9:d4:72:33:04:ac:86:74:35:04:
15:c1:56:df:dc:a2:0b:e1:cf:19:69:45:f5:bd:d0:
1f:24:f9:fd:04:c8:d3:04:28:0e:41:7e:96:44:a3:
1d:66:3e:44:c7:01:bb:d9:12:a1:6e:b6:bf:cb:01:
ff:1f:e6:32:7f:0d:b8:52:ad:2e:5d:01:75:d7:d4:
ca:fe:ee:8c:cb:1c:4b:a7:73:83:ba:87:29:cb:8b:
99:96:48:b3:72:b8:d8:67:72:9c:98:df:dc:b8:09:
b9:d8:27:ca:2d:9d:b4:dc:2c:ad:0f:aa:1c:51:aa:
a4:d9:a7:2e:a7:69:0e:8e:d7:a5:c2:07:0b:ce:16:
6c:f6:26:d6:90:c3:e1:8f:c6:17:4a:b3:02:60:53:
97:6b:67:74:5a:e4:8c:46:dc:8c:7d:30:84:e0:72:
e0:60:85:4f:00:ed:46:84:21:7e:96:4b:fa:6c:c6:
83:72:fa:a1:38:d9:18:8e:23:90:f7:b1:56:d8:e4:
88:70:76:04:88:80:e5:07:6e:c1:6a:19:06:4f:dd:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:32:FF:EA:0D:56:D5:33:9E:96:AA:C5:0C:FE:3D:76:0C:B7:31
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:1b:e8:fe:32:61:0a:97:89:19:bd:ec:2f:a8:3c:60:1a:
5c:42:3c:f9:f7:37:48:be:e5:c6:cb:5e:bf:33:8d:bc:6e:11:
34:b0:fd:d1:01:39:bf:69:f8:63:65:8f:16:89:28:9c:de:cc:
58:c9:d1:15:fe:bc:07:fa:46:d2:e8:fa:c4:5b:18:75:94:b7:
c7:44:6c:ff:1b:bb:62:fc:97:d2:ef:9d:11:d3:78:a1:1e:73:
aa:cd:65:d1:7d:af:2f:9f:3e:42:7e:b1:f0:ab:d5:7c:88:8d:
68:29:c3:ba:88:38:39:2e:0b:b8:1f:d9:8a:91:fa:11:b2:1b:
7b:3b:08:4c:67:12:86:4e:23:67:a6:de:4e:75:b6:56:19:25:
6a:f8:c9:a7:5b:27:4f:a0:e3:77:32:2d:fd:b3:ca:3c:44:d4:
d2:8d:73:07:7d:7a:4c:97:3f:74:fe:ff:40:8d:9e:0f:75:76:
4f:28:cf:e8:01:30:18:7a:0e:2b:38:4c:b9:26:ee:60:18:e5:
bb:a5:e8:3d:55:8d:31:8e:1a:0a:c7:1c:bc:50:e3:86:b8:be:
33:8c:b7:00:b9:84:46:17:02:ec:66:ab:f8:b8:45:c1:7c:8f:
a2:ea:2e:d1:7b:03:04:6d:c4:b3:f2:d3:45:e7:7e:4d:96:c1:
8f:3c:46:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55GUgppVT0Fhe3DN2Jbv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2
OTE1MjAwHhcNMjUwODA1MTEwMTA3WhcNMjUwODA2MTEwMTA3WjAzMTEwLwYDVQQD
EyhjNGEzMzJmZmVhMGQ1NmQ1MzM5ZTk2YWFjNTBjZmUzZDc2MGNiNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlarEKYkR+PrxpfeA1NTY2UHOh01z
PMCBVgbJ/vS8FhX895OtAdLuQBWO+mEGB73pcbnUcjMErIZ0NQQVwVbf3KIL4c8Z
aUX1vdAfJPn9BMjTBCgOQX6WRKMdZj5ExwG72RKhbra/ywH/H+Yyfw24Uq0uXQF1
19TK/u6MyxxLp3ODuocpy4uZlkizcrjYZ3KcmN/cuAm52CfKLZ203CytD6ocUaqk
2acup2kOjtelwgcLzhZs9ibWkMPhj8YXSrMCYFOXa2d0WuSMRtyMfTCE4HLgYIVP
AO1GhCF+lkv6bMaDcvqhONkYjiOQ97FW2OSIcHYEiIDlB27BahkGT90G6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSjMv/qDVbVM56WqsUM/j12DLcxMB8GA1UdIwQY
MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt
YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl
LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjYb6P4y
YQqXiRm97C+oPGAaXEI8+fc3SL7lxstevzONvG4RNLD90QE5v2n4Y2WPFokonN7M
WMnRFf68B/pG0uj6xFsYdZS3x0Rs/xu7YvyX0u+dEdN4oR5zqs1l0X2vL58+Qn6x
8KvVfIiNaCnDuog4OS4LuB/ZipH6EbIbezsITGcShk4jZ6beTnW2VhklavjJp1sn
T6DjdzIt/bPKPETU0o1zB316TJc/dP7/QI2eD3V2TyjP6AEwGHoOKzhMuSbuYBjl
u6XoPVWNMY4aCsccvFDjhri+M4y3ALmERhcC7Gar+LhFwXyPouou0XsDBG3Es/LT
Red+TZbBjzxGww==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:25 2025 by rpki-client