Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: A0Zp3Qo9Ip6bQBYKqog0ro+YyqWbJ5VuoFT2uAJdG5o=
Subject key identifier: 33:62:4D:49:13:17:0B:09:4F:6C:11:AB:DE:F4:C8:C6:29:CE:B4:3A
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 01987562A71930244236770D2D08BF6D3D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0ADE
Signing time: Mon 04 Aug 2025 14:00:56 +0000
Manifest this update: Mon 04 Aug 2025 14:00:56 +0000
Manifest next update: Tue 05 Aug 2025 14:00:56 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: 8sKUg+kewwPPCF8h9AOrvwepzp26L1PZDKu6y/4bvwo=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:a7:19:30:24:42:36:77:0d:2d:08:bf:6d:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Aug 4 14:00:56 2025 GMT
Not After : Aug 5 14:00:56 2025 GMT
Subject: CN=33624d4913170b094f6c11abdef4c8c629ceb43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:27:46:47:16:e8:34:6d:3c:68:69:47:a1:
25:0c:05:c3:f3:c9:f9:3a:e5:96:6f:bb:c6:40:9e:
b8:99:05:ad:4a:11:32:42:03:9b:08:b1:4f:43:0e:
22:8d:c7:94:3b:28:02:83:1e:fc:08:b5:39:02:4e:
1a:8c:ec:e0:40:8a:c5:58:af:4d:8a:8e:5b:02:d6:
54:ba:be:55:aa:b5:39:6f:13:44:37:2a:bd:1a:31:
ac:19:a8:36:10:67:5e:c3:47:62:5e:5b:cc:c3:96:
73:a6:95:55:c2:e4:ab:fd:c9:39:55:1d:dc:f7:47:
a4:35:91:44:15:2f:0a:f2:0b:96:ea:87:a8:0e:1d:
cb:cb:ee:96:87:9b:54:96:70:e2:4f:42:cd:21:27:
3a:52:96:9f:8c:7b:f4:25:ae:e0:d3:ee:a0:b7:a1:
99:e5:b8:28:71:93:22:89:09:20:09:7a:d6:18:b1:
3a:97:c2:09:89:c2:df:8b:ee:b8:6b:e4:90:a9:b8:
c3:83:84:b0:3b:13:05:59:e5:3c:c6:73:7d:ab:c3:
40:1c:6d:e6:6d:c0:6e:dd:65:d8:39:e7:ed:77:c4:
0f:d2:91:2d:d2:89:39:fc:7e:15:24:14:ac:4f:58:
33:9f:80:b5:8a:51:59:90:09:97:8c:40:a5:15:77:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:4D:49:13:17:0B:09:4F:6C:11:AB:DE:F4:C8:C6:29:CE:B4:3A
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:52:ce:2c:71:2f:3b:25:38:17:35:cb:5d:92:34:4d:c4:45:
b3:08:be:7d:de:56:a4:a6:61:88:1d:6d:ec:b6:46:15:12:e0:
0b:d6:ce:00:66:95:0f:57:46:cc:9f:c0:a1:99:e5:fa:4e:5a:
b1:2f:96:bf:84:2a:2e:c1:f5:ca:8f:8b:e3:2b:40:bd:a0:b8:
f9:58:af:e0:08:b5:94:b3:11:c7:62:45:f6:2d:e3:0b:ac:18:
71:33:7a:e8:01:7f:88:26:e1:44:b6:a2:c5:49:cb:9a:08:bb:
e6:ef:2f:7c:54:fe:f0:af:68:7d:0f:d3:66:9a:3b:b0:28:e9:
76:ab:30:52:19:10:cd:19:4f:41:4f:0e:a0:4b:bc:a7:5b:72:
bb:48:e6:f9:a7:6c:17:99:d1:ed:e7:6a:03:f9:fa:72:c5:29:
47:a0:92:54:13:74:0b:f2:72:25:66:54:42:75:56:6a:3c:ca:
c6:41:10:41:38:c6:cb:de:3f:cb:d6:ab:e1:a8:80:b0:3d:61:
ba:84:79:a0:90:9c:44:79:8b:95:7d:e3:89:17:fb:75:8d:32:
cb:4f:6f:09:59:42:96:21:ed:89:b8:9f:17:5b:79:10:d2:82:
94:cc:3f:ab:98:25:c9:6c:e7:b9:9e:5d:19:ac:fc:05:b1:a7:
ba:9c:8d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YqcZMCRCNncNLQi/bT0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUwODA0MTQwMDU2WhcNMjUwODA1MTQwMDU2WjAzMTEwLwYDVQQD
EygzMzYyNGQ0OTEzMTcwYjA5NGY2YzExYWJkZWY0YzhjNjI5Y2ViNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNQnRkcW6DRtPGhpR6ElDAXD88n5
OuWWb7vGQJ64mQWtShEyQgObCLFPQw4ijceUOygCgx78CLU5Ak4ajOzgQIrFWK9N
io5bAtZUur5VqrU5bxNENyq9GjGsGag2EGdew0diXlvMw5ZzppVVwuSr/ck5VR3c
90ekNZFEFS8K8guW6oeoDh3Ly+6Wh5tUlnDiT0LNISc6UpafjHv0Ja7g0+6gt6GZ
5bgocZMiiQkgCXrWGLE6l8IJicLfi+64a+SQqbjDg4SwOxMFWeU8xnN9q8NAHG3m
bcBu3WXYOeftd8QP0pEt0ok5/H4VJBSsT1gzn4C1ilFZkAmXjEClFXe09QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNiTUkTFwsJT2wRq970yMYpzrQ6MB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1LOLHEv
OyU4FzXLXZI0TcRFswi+fd5WpKZhiB1t7LZGFRLgC9bOAGaVD1dGzJ/AoZnl+k5a
sS+Wv4QqLsH1yo+L4ytAvaC4+Viv4Ai1lLMRx2JF9i3jC6wYcTN66AF/iCbhRLai
xUnLmgi75u8vfFT+8K9ofQ/TZpo7sCjpdqswUhkQzRlPQU8OoEu8p1tyu0jm+ads
F5nR7edqA/n6csUpR6CSVBN0C/JyJWZUQnVWajzKxkEQQTjGy94/y9ar4aiAsD1h
uoR5oJCcRHmLlX3jiRf7dY0yy09vCVlCliHtibifF1t5ENKClMw/q5glyWznuZ5d
Gaz8BbGnupyN0g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:02 2025 by rpki-client