Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: a0snVH+qKLiNrjcNdxsDrBMBFwXenmOxQLg8fkZxG08=
Subject key identifier: 2E:1C:D1:9D:16:E7:30:CB:A4:6F:6E:E7:B0:28:85:72:C8:72:ED:F5
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0198820BE9D7AE8031EBC038C6724CFDA85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 01:01:15 +0000
Manifest this update: Thu 07 Aug 2025 01:01:15 +0000
Manifest next update: Fri 08 Aug 2025 01:01:15 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: iDzNrNubwSeWy9TjOOmsNaHJf8CknIw81gUpgcwkG24=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:e9:d7:ae:80:31:eb:c0:38:c6:72:4c:fd:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Aug 7 01:01:15 2025 GMT
Not After : Aug 8 01:01:15 2025 GMT
Subject: CN=2e1cd19d16e730cba46f6ee7b0288572c872edf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:1e:da:79:37:60:e3:13:52:b1:10:a8:87:
5c:50:a3:d4:d1:f7:78:98:f2:20:82:75:3b:bd:76:
22:aa:8f:0e:b2:67:e9:3c:90:2c:7e:93:52:9e:d6:
36:ef:5b:8a:87:74:08:8f:c8:21:e7:53:5e:c7:4c:
64:7f:64:e6:e1:9d:73:0c:0a:5e:7f:de:77:67:67:
e0:a8:04:7b:e6:95:df:aa:c0:6a:2c:7c:86:7b:36:
05:bc:0a:1a:d3:2a:ca:8e:50:32:e5:d5:8a:18:e8:
b8:27:69:70:7f:02:c5:92:67:f9:53:73:f3:d1:42:
e6:50:8a:0a:14:74:5d:b4:7e:a2:83:4c:1b:61:eb:
40:70:a8:e9:b8:4f:43:d2:75:7e:6d:64:83:84:de:
4c:54:78:59:51:3c:10:52:90:d1:b1:ee:2f:e5:88:
3d:6a:57:00:13:ac:63:53:bf:57:a4:68:93:ba:71:
85:9f:be:ea:b7:7d:4d:1c:ed:0b:a1:d6:07:5e:48:
a7:94:4b:da:f9:e4:53:73:b9:55:0e:35:58:40:dd:
d4:b9:89:81:ec:aa:dd:ea:12:e8:86:51:d5:e9:e6:
0f:82:61:ff:3d:8a:e7:01:f8:37:b8:fd:b1:27:a6:
7e:dd:3d:90:43:59:96:bd:73:60:f4:17:48:c4:1d:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:D1:9D:16:E7:30:CB:A4:6F:6E:E7:B0:28:85:72:C8:72:ED:F5
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fb:1a:4b:5e:3e:4b:d9:90:45:0e:84:e6:1b:3a:5b:30:ef:
5e:f3:71:5e:8f:ff:e0:83:4d:15:af:60:c9:95:83:c8:43:f3:
38:d1:a7:38:8a:a2:b8:65:13:8a:22:24:c9:a0:97:b9:19:0f:
e1:b6:d6:af:77:b3:dd:04:e3:53:62:e1:a0:43:4f:62:eb:67:
14:7a:82:d5:cc:cd:df:61:b6:64:10:3b:da:55:5a:49:87:50:
47:44:a9:dc:0f:18:dc:e6:15:5f:cb:22:98:f9:a6:43:3b:01:
ca:7e:6b:7e:2f:57:be:f3:5f:5a:d7:7b:a7:88:d7:40:7a:f7:
c4:ac:21:04:32:d5:1f:9f:c1:a5:71:ae:b3:96:b7:6f:a4:22:
91:a6:73:e6:34:aa:96:ca:33:bc:59:67:5d:17:a3:40:04:b0:
af:1d:71:ac:01:9e:c0:9d:72:2f:02:b3:95:26:14:de:50:13:
0a:16:c6:c1:36:c0:66:2a:99:30:d2:f0:c5:2c:9a:7a:a1:a3:
5a:e7:91:11:27:28:d0:cc:2f:d9:8f:bd:71:db:7c:1f:13:af:
bf:6b:f3:55:8e:0b:eb:4d:f3:b9:87:08:c9:44:9e:bd:f3:19:
4a:04:06:12:95:d9:31:ad:50:c5:08:d1:93:94:33:3b:11:00:
cb:41:f0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC+nXroAx68A4xnJM/aheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1
ODY5ZTIwHhcNMjUwODA3MDEwMTE1WhcNMjUwODA4MDEwMTE1WjAzMTEwLwYDVQQD
EygyZTFjZDE5ZDE2ZTczMGNiYTQ2ZjZlZTdiMDI4ODU3MmM4NzJlZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAoe2nk3YOMTUrEQqIdcUKPU0fd4
mPIggnU7vXYiqo8OsmfpPJAsfpNSntY271uKh3QIj8gh51Nex0xkf2Tm4Z1zDApe
f953Z2fgqAR75pXfqsBqLHyGezYFvAoa0yrKjlAy5dWKGOi4J2lwfwLFkmf5U3Pz
0ULmUIoKFHRdtH6ig0wbYetAcKjpuE9D0nV+bWSDhN5MVHhZUTwQUpDRse4v5Yg9
alcAE6xjU79XpGiTunGFn77qt31NHO0LodYHXkinlEva+eRTc7lVDjVYQN3UuYmB
7Krd6hLohlHV6eYPgmH/PYrnAfg3uP2xJ6Z+3T2QQ1mWvXNg9BdIxB0MJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4c0Z0W5zDLpG9u57AohXLIcu31MB8GA1UdIwQY
MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct
ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1
LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPsaS14+
S9mQRQ6E5hs6WzDvXvNxXo//4INNFa9gyZWDyEPzONGnOIqiuGUTiiIkyaCXuRkP
4bbWr3ez3QTjU2LhoENPYutnFHqC1czN32G2ZBA72lVaSYdQR0Sp3A8Y3OYVX8si
mPmmQzsByn5rfi9XvvNfWtd7p4jXQHr3xKwhBDLVH5/BpXGus5a3b6QikaZz5jSq
lsozvFlnXRejQASwrx1xrAGewJ1yLwKzlSYU3lATChbGwTbAZiqZMNLwxSyaeqGj
WueRESco0Mwv2Y+9cdt8HxOvv2vzVY4L603zuYcIyUSevfMZSgQGEpXZMa1QxQjR
k5QzOxEAy0HwTw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:29 2025 by rpki-client