Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: PrVL1UQS9HiKKsdzKRHKKk5RbKPDNAdH5LRpQSvEYT4=
Subject key identifier: 7E:AA:1F:47:84:73:05:8F:40:81:E8:2D:47:F3:D8:6E:67:43:AD:96
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 019874BDE7CDD7DB10275C06CFA97CA96B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 11:00:59 +0000
Manifest this update: Mon 04 Aug 2025 11:00:59 +0000
Manifest next update: Tue 05 Aug 2025 11:00:59 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: vYdxPQlst7q8lOQ+4858XrfhztGKZzE+fi3TB7bHrIQ=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:e7:cd:d7:db:10:27:5c:06:cf:a9:7c:a9:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Aug 4 11:00:59 2025 GMT
Not After : Aug 5 11:00:59 2025 GMT
Subject: CN=7eaa1f478473058f4081e82d47f3d86e6743ad96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:76:96:64:a1:7e:a8:85:12:a4:ef:83:38:
1e:49:a2:e9:68:4d:1a:8a:a8:81:09:ff:b6:5f:27:
6e:ee:e8:5d:ab:48:c7:0d:c4:64:d4:7c:bb:91:0c:
08:d6:c9:4c:51:23:0f:80:52:1d:7c:f5:8e:01:a0:
d9:cd:4e:09:f3:f8:db:a2:9a:67:a0:79:4e:c6:be:
7e:ae:d9:d1:a9:0c:41:3f:85:76:6e:6a:01:c0:f8:
52:4c:67:2d:74:4f:b3:48:11:fb:b7:c0:14:56:3c:
f9:99:08:1a:25:2c:90:8d:69:88:92:ee:1c:97:1c:
e6:d0:42:f5:98:ac:f2:91:2a:2e:93:90:7a:46:40:
ac:2b:6c:5b:b2:05:c4:89:00:34:56:51:50:97:aa:
9f:85:94:5e:c3:c0:82:10:bb:a1:1f:c8:f1:4a:ef:
86:11:e3:cf:e6:17:97:52:bc:00:a3:7d:f0:61:c1:
df:6f:6c:13:77:49:12:0c:07:5f:57:fb:d8:24:ca:
4c:71:f3:c4:ae:79:7d:09:15:48:2e:fa:a1:69:27:
6c:11:60:ca:e5:78:aa:06:84:0f:6d:d6:04:3a:85:
2c:bf:b9:a8:8d:b4:75:d6:6d:86:0e:31:3c:9b:8c:
af:ea:e4:6d:1e:a1:79:b0:29:00:be:21:60:20:3e:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:1F:47:84:73:05:8F:40:81:E8:2D:47:F3:D8:6E:67:43:AD:96
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:90:96:a3:2c:9b:5a:9b:85:05:f7:a1:db:d8:ee:fa:cb:30:
63:23:20:3a:d6:5e:aa:03:14:6e:86:c0:3d:ef:c8:f9:d7:93:
f4:2d:07:2e:c9:a3:2f:ac:25:e7:f4:25:29:a1:95:65:bc:61:
f9:e5:02:ec:40:80:8b:9c:50:49:d0:1d:aa:f6:34:d3:7d:77:
e4:d8:75:23:77:3c:85:61:47:2f:d0:4b:cc:58:9e:47:63:01:
74:c7:e2:34:e9:16:ba:e7:03:91:eb:75:90:14:cb:de:4e:40:
8c:e5:b1:16:93:ca:25:36:f4:65:45:92:ed:74:5c:f3:14:db:
eb:37:a7:02:b5:53:b7:f0:bb:e5:57:15:6e:78:25:09:98:f0:
55:e0:41:48:89:0f:dd:02:e4:70:0a:79:d8:0d:c8:05:19:93:
9c:07:5c:bd:a8:2f:bd:e7:fc:4b:8b:6b:aa:64:67:40:cb:ed:
63:2e:a3:fc:80:77:73:79:05:ce:89:ae:79:4d:90:1d:02:fc:
99:e8:c5:49:5b:4e:2d:22:5b:69:b8:40:fc:21:f0:4c:06:04:
45:9d:15:ca:6a:5f:34:9e:5d:92:95:40:cb:e4:7d:95:7d:24:
8c:5d:51:4a:63:23:7e:fe:2b:18:d2:c3:de:66:43:86:d4:df:
96:d2:c4:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vefN19sQJ1wGz6l8qWsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0
MTdhY2QwHhcNMjUwODA0MTEwMDU5WhcNMjUwODA1MTEwMDU5WjAzMTEwLwYDVQQD
Eyg3ZWFhMWY0Nzg0NzMwNThmNDA4MWU4MmQ0N2YzZDg2ZTY3NDNhZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7st2lmShfqiFEqTvgzgeSaLpaE0a
iqiBCf+2Xydu7uhdq0jHDcRk1Hy7kQwI1slMUSMPgFIdfPWOAaDZzU4J8/jboppn
oHlOxr5+rtnRqQxBP4V2bmoBwPhSTGctdE+zSBH7t8AUVjz5mQgaJSyQjWmIku4c
lxzm0EL1mKzykSouk5B6RkCsK2xbsgXEiQA0VlFQl6qfhZRew8CCELuhH8jxSu+G
EePP5heXUrwAo33wYcHfb2wTd0kSDAdfV/vYJMpMcfPErnl9CRVILvqhaSdsEWDK
5XiqBoQPbdYEOoUsv7mojbR11m2GDjE8m4yv6uRtHqF5sCkAviFgID5zMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6qH0eEcwWPQIHoLUfz2G5nQ62WMB8GA1UdIwQY
MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt
NDRlMjE5YTllOTZlLzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl
LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpCWoyyb
WpuFBfeh29ju+sswYyMgOtZeqgMUbobAPe/I+deT9C0HLsmjL6wl5/QlKaGVZbxh
+eUC7ECAi5xQSdAdqvY003135Nh1I3c8hWFHL9BLzFieR2MBdMfiNOkWuucDket1
kBTL3k5AjOWxFpPKJTb0ZUWS7XRc8xTb6zenArVTt/C75VcVbnglCZjwVeBBSIkP
3QLkcAp52A3IBRmTnAdcvagvvef8S4trqmRnQMvtYy6j/IB3c3kFzomueU2QHQL8
mejFSVtOLSJbabhA/CHwTAYERZ0VympfNJ5dkpVAy+R9lX0kjF1RSmMjfv4rGNLD
3mZDhtTfltLEGg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:17 2025 by rpki-client