Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: T7/2FwRhdYTVeRkeopjQuzw1gdLXz/9DnUGkrsbckC4=
Subject key identifier: FC:09:9D:97:39:31:F9:C1:1F:5C:7D:C3:67:2E:3A:D0:4D:AA:DE:82
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 01987CAE28243E65FEE0B71D78D96A59D109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 021E
Signing time: Wed 06 Aug 2025 00:00:44 +0000
Manifest this update: Wed 06 Aug 2025 00:00:44 +0000
Manifest next update: Thu 07 Aug 2025 00:00:44 +0000
Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: VmHuWh9lBSZWHkXx13IQn7+9VNuaUwn4uIHDBBTmSIs=)
2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:28:24:3e:65:fe:e0:b7:1d:78:d9:6a:59:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Aug 6 00:00:44 2025 GMT
Not After : Aug 7 00:00:44 2025 GMT
Subject: CN=fc099d973931f9c11f5c7dc3672e3ad04daade82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:63:85:86:60:33:29:19:43:fb:b6:91:73:
8b:f8:00:e5:5b:46:2b:1e:7a:94:e3:b8:be:6d:88:
81:59:d5:b2:4f:a4:8e:a3:ca:f9:08:55:c1:61:f4:
e6:d5:ee:65:39:59:81:77:a1:6e:c4:e0:2c:8f:53:
5b:35:62:1e:49:8c:e7:22:84:db:77:16:99:f8:84:
59:bc:10:f2:a9:61:63:44:cd:94:fe:3e:85:eb:f2:
dc:17:ae:13:9d:8e:f9:af:50:08:7f:5b:6e:34:00:
41:4d:c1:34:ce:42:59:83:d6:46:63:29:a2:d9:71:
e5:d4:d0:80:8c:0f:d3:2e:f7:76:1e:1d:25:be:37:
b1:ec:a6:a0:7e:b6:89:b5:85:a6:d1:14:77:4c:ca:
d7:be:e2:10:ce:40:c4:72:12:d7:eb:32:7c:cf:7d:
2b:4c:9f:e0:7e:25:c7:51:d5:73:bd:05:ca:bb:64:
5a:0c:39:41:82:ce:dc:a8:55:63:ea:72:3b:93:4a:
a4:d6:c5:c2:c4:66:67:ed:0f:18:34:61:d7:09:2d:
88:d3:a2:61:05:ef:bd:8d:f1:41:57:58:27:c9:9c:
b2:1e:f6:f8:61:08:df:27:eb:20:60:a8:a6:30:c7:
f9:3d:ae:e7:12:17:54:69:85:34:cd:4c:10:74:b7:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:9D:97:39:31:F9:C1:1F:5C:7D:C3:67:2E:3A:D0:4D:AA:DE:82
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b7:b5:f7:d5:6a:99:10:5e:96:d9:f2:76:2f:85:f3:74:a9:
dd:16:74:ab:ef:13:50:2a:3e:4e:8b:c8:00:d4:d6:18:b9:02:
f6:d0:39:c8:65:a6:3d:50:d5:67:db:90:f1:01:8f:c1:8a:f5:
cb:d9:7c:bf:ec:9b:c1:46:1e:db:3e:a1:2d:97:fc:67:8e:67:
99:63:57:fe:4b:61:ce:16:54:b1:a1:98:31:e4:6f:48:14:46:
fb:7c:00:0e:08:01:67:aa:00:77:59:c9:21:50:8b:2d:e4:b6:
8b:77:38:d1:5c:3a:ab:1a:fc:44:ae:1b:20:b5:5e:cc:f6:e7:
99:71:91:44:1c:cc:bb:68:29:0a:6c:89:6a:db:06:2e:43:7e:
7c:3a:7e:06:e6:6e:77:e7:b4:0c:99:31:54:56:81:ea:e3:6f:
b7:ea:ce:6d:43:bd:56:a0:c0:71:bd:e4:b1:1e:07:9a:fb:5a:
28:61:47:3c:5b:e2:86:de:a4:be:23:f1:00:1d:43:1c:01:83:
53:c4:a5:a0:c2:3c:d8:07:79:e6:dc:ae:09:84:e0:68:55:54:
b3:c3:de:db:06:94:87:69:b3:8f:5b:00:db:32:6c:d7:65:98:
46:ee:52:f4:2a:6a:cb:e3:48:7e:35:26:a4:d2:92:1b:de:72:
e2:bf:39:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rigkPmX+4LcdeNlqWdEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMDYzYmQ5NWI4OTFiZjMzMTE1NTdjODRkZmU4N2VjZjQy
YjE5MDYwHhcNMjUwODA2MDAwMDQ0WhcNMjUwODA3MDAwMDQ0WjAzMTEwLwYDVQQD
EyhmYzA5OWQ5NzM5MzFmOWMxMWY1YzdkYzM2NzJlM2FkMDRkYWFkZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4NjhYZgMykZQ/u2kXOL+ADlW0Yr
HnqU47i+bYiBWdWyT6SOo8r5CFXBYfTm1e5lOVmBd6FuxOAsj1NbNWIeSYznIoTb
dxaZ+IRZvBDyqWFjRM2U/j6F6/LcF64TnY75r1AIf1tuNABBTcE0zkJZg9ZGYymi
2XHl1NCAjA/TLvd2Hh0lvjex7KagfraJtYWm0RR3TMrXvuIQzkDEchLX6zJ8z30r
TJ/gfiXHUdVzvQXKu2RaDDlBgs7cqFVj6nI7k0qk1sXCxGZn7Q8YNGHXCS2I06Jh
Be+9jfFBV1gnyZyyHvb4YQjfJ+sgYKimMMf5Pa7nEhdUaYU0zUwQdLe4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwJnZc5MfnBH1x9w2cuOtBNqt6CMB8GA1UdIwQY
MBaAFDMGO9lbiRvzMRVXyE3+h+z0KxkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQt
ZDk5YmE0NGRiNTk1LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQtZDk5YmE0NGRiNTk1
LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbe199Vq
mRBeltnydi+F83Sp3RZ0q+8TUCo+TovIANTWGLkC9tA5yGWmPVDVZ9uQ8QGPwYr1
y9l8v+ybwUYe2z6hLZf8Z45nmWNX/kthzhZUsaGYMeRvSBRG+3wADggBZ6oAd1nJ
IVCLLeS2i3c40Vw6qxr8RK4bILVezPbnmXGRRBzMu2gpCmyJatsGLkN+fDp+BuZu
d+e0DJkxVFaB6uNvt+rObUO9VqDAcb3ksR4HmvtaKGFHPFviht6kviPxAB1DHAGD
U8SloMI82Ad55tyuCYTgaFVUs8Pe2waUh2mzj1sA2zJs12WYRu5S9Cpqy+NIfjUm
pNKSG95y4r851w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:07:00 2025 by rpki-client