
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier: OR8xy23Q2i3m5y3SAHoDBX6UQ1ztc1ymUvs9vY/l8o8=
Subject key identifier: 69:7F:C7:9D:F1:1E:3F:94:AF:E8:23:5B:D4:47:0B:AF:62:4E:68:E7
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 01988AA0B32A2A5D521F4C33919837D05176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number: 034E
Signing time: Fri 08 Aug 2025 17:00:44 +0000
Manifest this update: Fri 08 Aug 2025 17:00:44 +0000
Manifest next update: Sat 09 Aug 2025 17:00:44 +0000
Files and hashes: 1: 7_nRVCQ3y6MID4FpVdSH-LVv21k.roa (hash: KeBopEjJ3jhpQFeNvuaMhntEK/xxfN7GL7n6M9G/SKU=)
2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: TI1CWtUyU5srYarX6IfM26lsEMsHdA4SGHwCsUGFnjA=)
4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:b3:2a:2a:5d:52:1f:4c:33:91:98:37:d0:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Aug 8 17:00:44 2025 GMT
Not After : Aug 9 17:00:44 2025 GMT
Subject: CN=697fc79df11e3f94afe8235bd4470baf624e68e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:52:c6:73:ab:56:f0:62:c8:97:7c:2e:5c:
ab:42:8f:97:97:45:2c:d3:8e:0b:0d:44:21:27:88:
52:6f:72:8e:f8:eb:3a:7f:f6:19:76:c0:25:0b:04:
5e:ea:c6:ee:d6:23:d2:47:41:41:c2:47:72:ea:b8:
66:e7:1b:a7:50:31:30:1e:53:ec:27:bd:2a:ee:3f:
25:26:8e:7c:80:e4:2b:d9:c2:27:8f:5c:3c:79:0e:
ce:d3:3c:98:f1:82:45:41:80:0a:9e:65:3b:83:0b:
39:7f:8c:e4:73:ac:14:98:4c:61:9f:ea:98:5b:b8:
a6:c9:ff:39:21:6d:da:a4:52:d6:fb:20:17:ec:2e:
56:39:be:e8:b0:69:a7:0a:b0:91:ef:a6:c6:1d:1d:
f4:60:d7:79:4d:44:c3:5a:57:64:f7:62:c3:1f:42:
e5:07:79:f0:16:90:ea:da:51:7a:53:8a:58:db:ec:
2c:99:64:76:d5:9e:5f:fa:86:ca:3f:d6:b5:7f:35:
c8:a3:39:ae:f4:ab:e1:0f:82:b9:5d:f6:f9:10:2d:
8b:bf:9a:e1:46:95:92:e9:ee:3c:fd:1f:7d:d4:61:
f4:8f:e4:c1:22:aa:40:60:44:dd:5b:b1:83:46:0d:
00:6b:e0:27:0b:f2:5a:61:8e:ed:5e:44:8f:37:98:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:C7:9D:F1:1E:3F:94:AF:E8:23:5B:D4:47:0B:AF:62:4E:68:E7
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:5e:7b:90:54:11:ce:88:56:ea:26:07:1a:6c:a1:3e:19:
f5:a1:89:f2:75:ca:a2:22:26:29:ce:57:67:0c:2f:60:68:d5:
7a:e2:96:62:7f:d7:bd:fe:cb:7c:0c:b5:1d:bd:aa:47:22:68:
f3:db:b5:47:22:b0:8c:ef:15:d9:3a:9f:59:cb:b7:2f:02:d3:
df:ab:be:00:61:2f:8a:d4:5b:b1:fc:ad:68:6e:5b:2b:e7:67:
ae:ba:a0:5e:ee:b7:7a:72:21:fa:9d:db:bd:24:4e:b7:50:bc:
d7:1d:a8:e0:19:5c:fd:9d:d9:23:70:ce:17:ab:ba:21:c9:2e:
f8:b5:e8:42:9c:99:6d:7c:55:cb:37:1b:b9:59:89:dd:d9:d3:
f8:c6:92:00:29:97:e4:d8:48:b8:90:cd:01:c4:f8:d7:c7:d8:
4a:01:b2:7f:34:85:83:66:bd:ac:9a:eb:bf:90:69:b6:b3:72:
ab:99:b5:47:6b:6d:d7:6d:37:5d:ac:8e:1c:62:49:51:6a:93:
38:14:45:68:df:e6:ab:74:5d:49:73:41:4b:39:42:1c:2c:26:
a7:0f:34:8e:24:6a:1b:c1:b6:dd:3f:71:66:6d:dd:1c:cb:aa:
b0:00:c4:64:8f:77:ba:5a:5c:9d:de:c7:6c:48:a6:8d:82:bd:
30:a1:f5:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoLMqKl1SH0wzkZg30FF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjUwODA4MTcwMDQ0WhcNMjUwODA5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg2OTdmYzc5ZGYxMWUzZjk0YWZlODIzNWJkNDQ3MGJhZjYyNGU2OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOpSxnOrVvBiyJd8LlyrQo+Xl0Us
044LDUQhJ4hSb3KO+Os6f/YZdsAlCwRe6sbu1iPSR0FBwkdy6rhm5xunUDEwHlPs
J70q7j8lJo58gOQr2cInj1w8eQ7O0zyY8YJFQYAKnmU7gws5f4zkc6wUmExhn+qY
W7imyf85IW3apFLW+yAX7C5WOb7osGmnCrCR76bGHR30YNd5TUTDWldk92LDH0Ll
B3nwFpDq2lF6U4pY2+wsmWR21Z5f+obKP9a1fzXIozmu9KvhD4K5Xfb5EC2Lv5rh
RpWS6e48/R991GH0j+TBIqpAYETdW7GDRg0Aa+AnC/JaYY7tXkSPN5hgGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl/x53xHj+Ur+gjW9RHC69iTmjnMB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKxee5BU
Ec6IVuomBxpsoT4Z9aGJ8nXKoiImKc5XZwwvYGjVeuKWYn/Xvf7LfAy1Hb2qRyJo
89u1RyKwjO8V2TqfWcu3LwLT36u+AGEvitRbsfytaG5bK+dnrrqgXu63enIh+p3b
vSROt1C81x2o4Blc/Z3ZI3DOF6u6Icku+LXoQpyZbXxVyzcbuVmJ3dnT+MaSACmX
5NhIuJDNAcT418fYSgGyfzSFg2a9rJrrv5BptrNyq5m1R2tt1203XayOHGJJUWqT
OBRFaN/mq3RdSXNBSzlCHCwmpw80jiRqG8G23T9xZm3dHMuqsADEZI93ulpcnd7H
bEimjYK9MKH1IQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:34 2025 by rpki-client