Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: ngDpZ+sIbyXfRTpRFNTadVU0WbEBiYqODDrBaTsN4aY=
Subject key identifier: 34:18:6E:6B:B2:24:DF:2A:F8:D1:5D:F9:67:4A:67:89:E7:68:06:12
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019873E2E3EA1CBCE83C2DCA705BB5D29C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 1129
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: +Hh280CYAqlUGTrMF6nvtm6qbbh3QeCfqxjsDe+ulWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e3:ea:1c:bc:e8:3c:2d:ca:70:5b:b5:d2:9c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=34186e6bb224df2af8d15df9674a6789e7680612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:3c:bb:39:f6:32:9f:3f:96:ee:76:2b:6f:
22:97:1c:a0:1d:07:01:5a:f7:29:bd:1d:7c:dc:ee:
bc:49:d3:1f:17:49:52:f6:41:31:64:89:87:38:a3:
23:41:a6:f5:5a:2b:c5:ea:2b:0e:29:a0:80:a8:a5:
c3:30:7b:4b:13:af:a9:b5:c9:4d:97:98:56:1e:4d:
bb:33:d5:50:8c:43:1f:2a:a1:de:d0:f8:a0:0d:8c:
29:6c:6f:b4:d5:5e:cb:9a:6f:3a:86:51:09:ac:0d:
3c:0e:d9:cb:f2:cf:24:25:8a:d3:1b:1d:f9:09:06:
e8:a5:82:d9:b1:89:69:85:bd:ef:44:42:cf:33:20:
96:9b:25:68:20:08:fa:38:56:72:d1:9d:18:ee:54:
8d:09:c2:6d:87:91:53:af:23:c0:80:12:6a:5a:f5:
28:ff:34:d6:82:ec:8e:55:87:93:59:be:f3:e3:bd:
9d:d3:a6:a3:0d:a1:e0:5e:74:6a:4f:a9:05:59:bc:
9a:25:b2:36:4d:d8:ed:8a:e7:91:b1:b7:a2:c6:42:
b8:b4:9c:b0:d4:6a:46:96:8d:d7:91:28:07:85:18:
b2:cc:c8:f5:36:a6:b5:54:c7:2e:c4:73:08:7f:c6:
ec:c5:2b:e3:3f:24:09:8e:90:dc:0d:bb:d5:e1:9f:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:6E:6B:B2:24:DF:2A:F8:D1:5D:F9:67:4A:67:89:E7:68:06:12
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:b3:cb:65:c6:48:50:ff:9a:64:49:27:1e:2e:e7:09:05:
4e:e6:df:80:66:b9:36:f9:05:16:7c:3a:3e:2d:c0:07:a8:8b:
ed:19:2f:9d:35:49:1f:52:99:06:5f:98:bb:bf:c0:a8:de:fd:
0d:60:23:36:7d:1a:a8:fc:49:a6:ec:5f:be:58:a6:23:5d:e4:
bf:28:92:6b:b6:f9:42:8b:25:e9:96:01:d3:b5:7c:45:f3:31:
dc:a2:14:16:55:8a:5f:c3:05:de:2c:8d:7a:e9:00:6b:5d:30:
13:38:e0:6b:50:1b:78:00:6b:31:da:16:67:8d:f0:fe:0f:fc:
81:4d:51:d3:cf:78:5e:93:ea:5d:ce:94:f1:b3:9b:e2:1c:0e:
0e:7e:67:8f:6b:0f:2d:cb:dd:92:2a:52:09:74:23:ef:a1:60:
8f:88:75:34:7e:05:c0:86:73:7e:ec:1d:7d:77:16:03:6f:3d:
24:5c:6f:45:53:0a:67:19:30:ee:7c:4a:02:01:18:6d:7f:4e:
44:78:a7:ed:38:66:8f:a8:6e:d4:32:26:38:1b:4a:cd:5c:aa:
29:54:d3:7a:e7:c7:16:5b:81:b1:1f:57:c4:f3:a4:84:ae:3c:
3a:a4:03:f1:10:59:b1:03:60:d0:31:ad:2a:a3:b2:c2:08:f4:
58:1f:0e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uPqHLzoPC3KcFu10pwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYWZhNmNlNjU0MmUxYmI1MjNlMWQwM2JkMDBhNGQyMmI3
ZmRhZWQwHhcNMjUwODA0MDcwMTQ1WhcNMjUwODA1MDcwMTQ1WjAzMTEwLwYDVQQD
EygzNDE4NmU2YmIyMjRkZjJhZjhkMTVkZjk2NzRhNjc4OWU3NjgwNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96s8uzn2Mp8/lu52K28ilxygHQcB
WvcpvR183O68SdMfF0lS9kExZImHOKMjQab1WivF6isOKaCAqKXDMHtLE6+ptclN
l5hWHk27M9VQjEMfKqHe0PigDYwpbG+01V7Lmm86hlEJrA08DtnL8s8kJYrTGx35
CQbopYLZsYlphb3vRELPMyCWmyVoIAj6OFZy0Z0Y7lSNCcJth5FTryPAgBJqWvUo
/zTWguyOVYeTWb7z472d06ajDaHgXnRqT6kFWbyaJbI2TdjtiueRsbeixkK4tJyw
1GpGlo3XkSgHhRiyzMj1Nqa1VMcuxHMIf8bsxSvjPyQJjpDcDbvV4Z/qNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQYbmuyJN8q+NFd+WdKZ4nnaAYSMB8GA1UdIwQY
MBaAFBOvps5lQuG7Uj4dA70ApNIrf9rtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMt
YzdmYmZjNGRjOWRjLzEvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMtYzdmYmZjNGRjOWRj
LzEvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7mzy2XG
SFD/mmRJJx4u5wkFTubfgGa5NvkFFnw6Pi3AB6iL7RkvnTVJH1KZBl+Yu7/AqN79
DWAjNn0aqPxJpuxfvlimI13kvyiSa7b5Qosl6ZYB07V8RfMx3KIUFlWKX8MF3iyN
eukAa10wEzjga1AbeABrMdoWZ43w/g/8gU1R0894XpPqXc6U8bOb4hwODn5nj2sP
LcvdkipSCXQj76Fgj4h1NH4FwIZzfuwdfXcWA289JFxvRVMKZxkw7nxKAgEYbX9O
RHin7Thmj6hu1DImOBtKzVyqKVTTeufHFluBsR9XxPOkhK48OqQD8RBZsQNg0DGt
KqOywgj0WB8OdQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:06 2025 by rpki-client