Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: ycx8g3tIi2fyWoEissupRBnyrkdQBgUKPvRkMuo5JlQ=
Subject key identifier: 33:5A:5F:9D:9A:DD:D4:28:FF:25:8B:3B:FD:7F:F0:EA:CF:56:00:0B
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019873E1FE856F998D3E550726E26F74F4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:47 +0000
Manifest this update: Mon 04 Aug 2025 07:00:47 +0000
Manifest next update: Tue 05 Aug 2025 07:00:47 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: CN3/5z+7JcRdzniGdQOVF3ZneB2aYmBsU8NjRBe6wlw=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:fe:85:6f:99:8d:3e:55:07:26:e2:6f:74:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Aug 4 07:00:47 2025 GMT
Not After : Aug 5 07:00:47 2025 GMT
Subject: CN=335a5f9d9addd428ff258b3bfd7ff0eacf56000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:b6:f4:e0:77:ec:f8:46:80:cc:4f:ac:3f:
48:cc:53:55:e8:51:cb:7a:22:6d:19:49:71:1a:2f:
1e:1c:d1:0a:0a:08:43:52:5d:15:a2:2b:32:1f:a5:
6e:5e:f0:7f:6d:a4:64:ab:9d:3b:a8:40:05:82:29:
19:51:11:c8:77:a1:25:fa:c4:db:c9:d4:cd:e5:a0:
df:14:5c:5f:2f:6e:d8:34:a4:60:7c:3c:42:6d:94:
ee:90:04:9c:93:6c:f9:5f:8b:6a:bc:47:52:17:a9:
31:e1:bd:0f:37:40:1e:5c:af:6f:9f:4d:db:45:81:
7b:81:81:fe:e0:8f:e9:9c:bf:0a:59:d5:b7:49:84:
c3:54:35:19:63:a4:86:07:78:45:d2:75:d8:22:25:
be:77:9d:95:40:19:28:ed:c8:ee:10:d6:c1:a2:84:
bb:40:b2:eb:c1:a9:00:8f:39:1e:3a:83:bc:88:af:
3d:8a:81:ab:b5:e0:b7:ef:f2:71:47:5a:dc:f7:00:
2f:9d:07:77:1e:98:91:df:c9:67:5c:3a:f0:71:77:
50:88:33:de:f4:18:78:64:a7:97:23:d8:05:71:41:
b6:5d:ed:a9:39:85:e1:37:ff:fd:58:43:7f:33:e9:
f8:6e:60:0c:dd:07:5f:5d:9b:13:d0:e7:58:e6:7b:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:5F:9D:9A:DD:D4:28:FF:25:8B:3B:FD:7F:F0:EA:CF:56:00:0B
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:32:29:78:28:18:76:4b:99:c8:a8:46:d0:28:4b:30:6e:
cb:ca:93:b2:3b:53:20:2d:2b:04:2d:ae:52:df:90:8e:46:14:
6d:0a:18:20:d7:46:2c:83:b7:1d:08:88:1b:bd:eb:6f:29:b5:
9d:2c:62:b5:99:04:fa:4a:eb:d5:7d:c2:81:04:5f:a2:9a:31:
0d:79:07:4c:ac:29:8d:08:09:cd:44:3b:12:ff:3e:4c:50:d9:
54:87:a1:4f:02:63:62:50:fb:34:04:7e:c0:6f:ef:21:91:7c:
69:5e:f4:df:14:ef:30:b7:15:45:24:fb:78:6a:20:53:58:68:
98:90:d1:fe:a5:de:5e:a6:1d:a4:b1:1f:79:64:61:46:3f:65:
c1:18:23:7a:6c:bb:98:c5:aa:9a:78:50:97:2a:ff:af:35:24:
58:e4:c1:f7:b6:c1:10:33:2c:e8:73:d6:1c:88:7f:a4:c1:68:
b0:e8:91:35:68:24:40:76:19:a9:b8:a1:ca:6d:10:a5:52:9f:
6e:d8:22:87:06:cc:aa:08:a1:3d:80:f9:3d:7f:31:3b:cf:1c:
db:fa:be:64:d7:a9:84:18:c5:da:f1:ae:f7:e1:60:b5:20:d9:
5a:96:82:5d:2b:1c:0a:36:13:03:1a:c3:da:3b:97:98:a6:e9:
02:10:ea:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4f6Fb5mNPlUHJuJvdPS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj
YzY0YTkwHhcNMjUwODA0MDcwMDQ3WhcNMjUwODA1MDcwMDQ3WjAzMTEwLwYDVQQD
EygzMzVhNWY5ZDlhZGRkNDI4ZmYyNThiM2JmZDdmZjBlYWNmNTYwMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qy29OB37PhGgMxPrD9IzFNV6FHL
eiJtGUlxGi8eHNEKCghDUl0VoisyH6VuXvB/baRkq507qEAFgikZURHId6El+sTb
ydTN5aDfFFxfL27YNKRgfDxCbZTukASck2z5X4tqvEdSF6kx4b0PN0AeXK9vn03b
RYF7gYH+4I/pnL8KWdW3SYTDVDUZY6SGB3hF0nXYIiW+d52VQBko7cjuENbBooS7
QLLrwakAjzkeOoO8iK89ioGrteC37/JxR1rc9wAvnQd3HpiR38lnXDrwcXdQiDPe
9Bh4ZKeXI9gFcUG2Xe2pOYXhN//9WEN/M+n4bmAM3QdfXZsT0OdY5ntIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNaX52a3dQo/yWLO/1/8OrPVgALMB8GA1UdIwQY
MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt
Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi
LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY8yKXgo
GHZLmcioRtAoSzBuy8qTsjtTIC0rBC2uUt+QjkYUbQoYINdGLIO3HQiIG73rbym1
nSxitZkE+krr1X3CgQRfopoxDXkHTKwpjQgJzUQ7Ev8+TFDZVIehTwJjYlD7NAR+
wG/vIZF8aV703xTvMLcVRST7eGogU1homJDR/qXeXqYdpLEfeWRhRj9lwRgjemy7
mMWqmnhQlyr/rzUkWOTB97bBEDMs6HPWHIh/pMFosOiRNWgkQHYZqbihym0QpVKf
btgihwbMqgihPYD5PX8xO88c2/q+ZNephBjF2vGu9+FgtSDZWpaCXSscCjYTAxrD
2juXmKbpAhDqkA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:51 2025 by rpki-client