Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: 123KC7r08fvRprcjNSpiKU+2Mq0LHL+iZeKhk6VN/fI=
Subject key identifier: 6A:0C:D0:87:0B:02:23:08:ED:C6:66:5E:EC:27:AD:47:B0:AC:00:55
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0198744FD801687789776515DD183EEE4CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:45 +0000
Manifest this update: Mon 04 Aug 2025 09:00:45 +0000
Manifest next update: Tue 05 Aug 2025 09:00:45 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: dQ+dSUnQB0cm7U/1hId/RudmsKaSzW3xRvTp39aKAUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d8:01:68:77:89:77:65:15:dd:18:3e:ee:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Aug 4 09:00:45 2025 GMT
Not After : Aug 5 09:00:45 2025 GMT
Subject: CN=6a0cd0870b022308edc6665eec27ad47b0ac0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:4e:03:43:03:87:6b:3c:1b:3c:7f:1b:5f:
06:58:29:65:b9:1c:79:2f:77:4a:ec:5e:39:fe:fc:
98:28:fc:0b:a7:c8:bd:1f:b7:24:f8:0c:3e:8a:00:
4a:e3:53:19:c2:85:b3:d4:fa:31:d6:fa:14:ae:cc:
b6:66:61:b4:4a:d0:69:8e:ff:ab:3f:98:0c:bd:92:
1a:8e:fe:cc:d7:1d:24:d0:dc:ac:43:42:69:0d:c8:
a3:21:98:3f:c6:dd:aa:70:8d:75:0e:79:e8:c4:ee:
27:c7:3e:52:e0:b0:07:97:5f:31:ef:f4:6a:e0:b0:
ef:1a:87:82:f8:22:3a:ff:b3:38:1d:98:fb:60:ab:
6f:18:06:1b:0a:a3:00:69:da:d6:2e:e6:56:00:e2:
4c:a1:23:1d:08:af:02:2e:f1:87:08:c5:be:02:d3:
1d:5d:0e:a0:3c:ff:a7:df:04:d4:35:f7:da:a3:cd:
eb:8a:cb:d0:29:a6:12:1f:10:33:b1:5f:dd:87:ef:
57:26:07:ea:aa:0f:98:55:5f:fd:81:3e:6b:ba:ea:
38:e9:3d:52:4b:e6:65:13:7b:66:6d:d8:14:d7:f2:
fc:17:ab:30:b9:b2:1a:f9:ae:43:b4:45:eb:45:3a:
bc:d5:78:b2:b4:ef:fb:b1:87:55:f3:c4:43:16:f2:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:D0:87:0B:02:23:08:ED:C6:66:5E:EC:27:AD:47:B0:AC:00:55
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:7e:36:ee:15:42:3c:8c:eb:53:2f:1e:ce:cf:6d:d6:f9:
a9:ca:89:bb:53:7d:18:16:69:3b:a2:12:e2:9d:43:61:80:5e:
f7:ea:dc:23:fc:74:ee:b4:40:af:80:5c:97:1a:56:99:b8:47:
e3:16:46:c4:9b:b2:4d:07:15:c2:4c:44:95:a0:b4:e6:4f:fe:
05:2c:70:ee:6b:8a:2e:ff:c0:2e:9e:30:8a:c4:0b:97:c0:8e:
fb:0e:82:31:16:fa:b9:ea:7d:d0:25:dc:01:2d:26:03:ec:42:
74:a6:63:d9:e6:0c:41:88:0b:9e:52:bf:bb:96:24:51:74:d5:
09:62:31:54:42:43:2b:b6:b9:76:09:7b:8a:52:82:d2:b3:0c:
94:72:0c:ee:57:e3:3c:7d:23:fa:0e:bc:c5:f4:e5:f4:74:25:
63:84:5f:b1:fb:5e:87:02:4d:cf:04:58:71:c4:29:14:45:f3:
37:9f:75:f1:84:2b:e0:fe:f8:68:c3:42:d6:28:59:81:5e:7a:
19:a8:36:46:d0:5d:ce:37:ac:72:42:39:cd:5d:33:48:00:3a:
8b:5f:96:0d:30:4c:85:cf:72:da:cb:46:16:b4:fb:54:75:30:
c8:fb:35:d3:0a:74:42:79:ab:de:f3:a6:01:fc:0c:0d:ab:4a:
a3:61:76:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T9gBaHeJd2UV3Rg+7kyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjUwODA0MDkwMDQ1WhcNMjUwODA1MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg2YTBjZDA4NzBiMDIyMzA4ZWRjNjY2NWVlYzI3YWQ0N2IwYWMwMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphtOA0MDh2s8Gzx/G18GWClluRx5
L3dK7F45/vyYKPwLp8i9H7ck+Aw+igBK41MZwoWz1Pox1voUrsy2ZmG0StBpjv+r
P5gMvZIajv7M1x0k0NysQ0JpDcijIZg/xt2qcI11DnnoxO4nxz5S4LAHl18x7/Rq
4LDvGoeC+CI6/7M4HZj7YKtvGAYbCqMAadrWLuZWAOJMoSMdCK8CLvGHCMW+AtMd
XQ6gPP+n3wTUNffao83risvQKaYSHxAzsV/dh+9XJgfqqg+YVV/9gT5ruuo46T1S
S+ZlE3tmbdgU1/L8F6swubIa+a5DtEXrRTq81XiytO/7sYdV88RDFvI2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoM0IcLAiMI7cZmXuwnrUewrABVMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgd+Nu4V
QjyM61MvHs7Pbdb5qcqJu1N9GBZpO6IS4p1DYYBe9+rcI/x07rRAr4BclxpWmbhH
4xZGxJuyTQcVwkxElaC05k/+BSxw7muKLv/ALp4wisQLl8CO+w6CMRb6uep90CXc
AS0mA+xCdKZj2eYMQYgLnlK/u5YkUXTVCWIxVEJDK7a5dgl7ilKC0rMMlHIM7lfj
PH0j+g68xfTl9HQlY4RfsftehwJNzwRYccQpFEXzN5918YQr4P74aMNC1ihZgV56
Gag2RtBdzjesckI5zV0zSAA6i1+WDTBMhc9y2stGFrT7VHUwyPs10wp0Qnmr3vOm
AfwMDatKo2F2PQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:26 2025 by rpki-client