Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: nqzC4HjFAiUbzxy9BcYiWam+WUgxbZRDgTj9raasMio=
Subject key identifier: A0:83:5B:41:ED:22:3B:AD:96:BA:B7:51:F3:E6:AA:65:28:01:3C:D5
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01987B9D26CE9C56FAAC22BA601FF101D717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0C9D
Signing time: Tue 05 Aug 2025 19:02:33 +0000
Manifest this update: Tue 05 Aug 2025 19:02:33 +0000
Manifest next update: Wed 06 Aug 2025 19:02:33 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: zMGcG8C4IsCrkCrWhM9cVJ4KZ+tch/QEwx6VJUqKc/A=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:26:ce:9c:56:fa:ac:22:ba:60:1f:f1:01:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Aug 5 19:02:33 2025 GMT
Not After : Aug 6 19:02:33 2025 GMT
Subject: CN=a0835b41ed223bad96bab751f3e6aa6528013cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:f6:25:b5:cb:19:a0:df:96:a8:c3:75:4a:
7d:5a:5c:22:14:70:67:7b:69:32:9b:c4:0c:68:c5:
57:db:46:67:d5:d7:45:93:5e:8b:19:51:84:5a:e1:
99:19:5e:85:9a:6f:d3:f4:a5:e2:d6:09:b4:7d:7b:
1e:48:48:26:57:48:96:33:34:07:ef:f2:d5:b3:eb:
85:46:a5:62:ff:c4:3e:fe:56:34:1e:5f:26:38:13:
5f:a5:c3:ab:e0:91:cc:06:05:72:57:e0:9e:ea:0a:
90:f5:28:b0:8b:8b:8f:07:5f:6b:9a:b8:61:4c:5f:
c4:48:2c:21:fb:81:c1:f7:ee:a7:c5:95:7c:23:3a:
16:37:59:99:25:6c:69:fb:a9:36:f9:86:a2:82:3b:
6f:08:65:34:ec:16:45:2d:1a:2a:25:f3:27:b7:07:
99:90:28:7c:29:53:18:8c:c0:db:58:48:28:88:96:
ea:6e:1a:0f:c7:62:f2:fe:de:8c:1c:d8:b4:d3:ad:
5d:d5:ce:6d:ab:0e:0b:cc:8b:d0:46:34:13:fb:65:
6b:32:3a:56:c4:6e:ef:c0:40:2c:15:37:e5:f4:24:
54:59:00:26:2b:9f:0e:b0:11:74:17:29:de:e8:d3:
c9:5e:89:3a:1f:3b:7d:17:f4:87:13:00:0f:f6:4d:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:5B:41:ED:22:3B:AD:96:BA:B7:51:F3:E6:AA:65:28:01:3C:D5
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2b:54:b3:68:ae:ff:7e:9e:e8:7e:f1:99:85:7f:5c:38:35:
04:c1:3e:d1:20:f7:9b:0e:30:47:4f:35:9f:84:3f:e7:20:1d:
83:3b:a5:00:8b:3a:48:b6:47:ee:94:81:f6:12:32:47:e9:a7:
8f:2d:85:e0:ff:65:4f:01:7a:1c:ca:4c:b2:48:cf:3c:fb:d2:
3d:fd:e1:25:cd:13:ae:6a:33:3e:8f:0f:66:47:f9:37:7e:de:
61:4d:95:4a:79:27:a1:64:cc:e5:fa:56:ff:02:55:f9:5d:7a:
e9:06:37:ad:ee:10:c2:9f:bf:c0:5f:67:60:c4:09:da:07:03:
f1:ad:ba:1a:60:a1:7a:10:91:9b:28:80:c6:20:af:ac:07:a3:
00:70:53:4b:40:f7:c2:48:01:01:03:29:1c:97:da:f3:da:79:
01:d3:59:98:b9:23:91:92:2e:e4:2b:b9:0b:b7:8f:43:ea:86:
25:fc:60:87:b2:b8:b9:42:02:68:09:07:30:d8:32:ab:cf:f7:
01:31:82:a1:03:15:6d:4f:f6:16:6a:d0:79:5e:0b:9e:69:8c:
d6:98:22:0a:21:75:56:b8:cf:7c:7a:91:69:2e:88:fb:48:f6:
6e:25:09:ff:3c:70:ed:8b:a9:29:b1:fc:a3:15:b5:e3:f3:58:
c8:15:e5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nSbOnFb6rCK6YB/xAdcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx
ZGQ3ZjAwHhcNMjUwODA1MTkwMjMzWhcNMjUwODA2MTkwMjMzWjAzMTEwLwYDVQQD
EyhhMDgzNWI0MWVkMjIzYmFkOTZiYWI3NTFmM2U2YWE2NTI4MDEzY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwn2JbXLGaDflqjDdUp9WlwiFHBn
e2kym8QMaMVX20Zn1ddFk16LGVGEWuGZGV6Fmm/T9KXi1gm0fXseSEgmV0iWMzQH
7/LVs+uFRqVi/8Q+/lY0Hl8mOBNfpcOr4JHMBgVyV+Ce6gqQ9Siwi4uPB19rmrhh
TF/ESCwh+4HB9+6nxZV8IzoWN1mZJWxp+6k2+YaigjtvCGU07BZFLRoqJfMntweZ
kCh8KVMYjMDbWEgoiJbqbhoPx2Ly/t6MHNi0061d1c5tqw4LzIvQRjQT+2VrMjpW
xG7vwEAsFTfl9CRUWQAmK58OsBF0Fyne6NPJXok6Hzt9F/SHEwAP9k2RTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCDW0HtIjutlrq3UfPmqmUoATzVMB8GA1UdIwQY
MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt
YTRmN2IwODhiYzFhLzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh
LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmitUs2iu
/36e6H7xmYV/XDg1BME+0SD3mw4wR081n4Q/5yAdgzulAIs6SLZH7pSB9hIyR+mn
jy2F4P9lTwF6HMpMskjPPPvSPf3hJc0TrmozPo8PZkf5N37eYU2VSnknoWTM5fpW
/wJV+V166QY3re4Qwp+/wF9nYMQJ2gcD8a26GmChehCRmyiAxiCvrAejAHBTS0D3
wkgBAQMpHJfa89p5AdNZmLkjkZIu5Cu5C7ePQ+qGJfxgh7K4uUICaAkHMNgyq8/3
ATGCoQMVbU/2FmrQeV4LnmmM1pgiCiF1VrjPfHqRaS6I+0j2biUJ/zxw7YupKbH8
oxW14/NYyBXlYg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:54 2025 by rpki-client