Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: YkiZENIgvKjq2UDBeyzSDpFIFHBWLxUbqLwCUpCgd0Y=
Subject key identifier: 63:D6:AC:1D:8C:4F:57:31:11:BF:8B:EA:49:F7:21:2D:18:BE:D1:06
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 01988D6B45E28D748A2AEF64ABA8677EC1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0DE0
Signing time: Sat 09 Aug 2025 06:01:14 +0000
Manifest this update: Sat 09 Aug 2025 06:01:14 +0000
Manifest next update: Sun 10 Aug 2025 06:01:14 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: kYjM1wLrvL3PMZj8yVTgVIsz0/khYr/Adsp2bYH+wz0=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:45:e2:8d:74:8a:2a:ef:64:ab:a8:67:7e:c1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Aug 9 06:01:14 2025 GMT
Not After : Aug 10 06:01:14 2025 GMT
Subject: CN=63d6ac1d8c4f573111bf8bea49f7212d18bed106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:36:cb:14:72:be:22:cd:8f:ee:69:3a:85:
27:cf:43:0a:38:4b:e0:5a:ff:61:e1:bb:5a:67:57:
0b:14:09:01:11:c4:94:b0:9a:fc:78:c1:b1:ae:6b:
61:0c:ba:c2:6a:75:e8:8d:64:20:b8:a1:31:18:9d:
97:a8:dc:1b:12:c5:89:34:6b:10:3c:95:89:06:f9:
d1:cb:f2:48:5e:f6:e1:50:18:82:90:b7:d2:de:3e:
47:b3:5e:4d:60:ce:9c:b0:07:44:c0:99:74:6c:67:
fe:b1:64:1b:14:38:37:7e:76:35:6f:da:67:72:d3:
b3:c6:9d:9e:79:df:2d:86:97:54:2e:b8:37:1f:5b:
6e:bc:50:d9:20:7b:b4:ea:b5:a7:2b:d7:b3:87:cb:
4d:3d:12:a5:74:8d:76:8e:00:7e:ad:30:7f:f8:08:
3e:81:43:7e:d0:f9:02:2d:05:c7:4d:df:e3:29:90:
07:8f:6c:fa:56:a0:82:b2:94:50:75:8c:78:99:33:
48:9d:73:e5:cd:80:12:ec:76:d4:e5:ef:57:52:64:
0e:25:fe:1f:6d:d5:27:9c:5e:82:67:77:2c:f8:38:
df:fc:98:a4:aa:ba:ec:c6:64:3d:bf:95:ab:a3:4d:
44:49:95:2d:8c:49:74:0d:63:19:bb:22:d6:db:73:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:AC:1D:8C:4F:57:31:11:BF:8B:EA:49:F7:21:2D:18:BE:D1:06
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:09:3e:3e:8b:51:4f:b9:f8:a6:fe:f8:97:54:08:32:c6:
ef:46:0e:e0:7d:02:c5:66:1c:cf:7b:b3:8b:d0:a9:ea:48:89:
36:f9:01:5e:a1:75:13:d6:1c:28:28:2b:75:ea:ca:5c:88:ef:
89:1f:34:79:48:f3:64:b5:e2:77:2e:af:83:ca:e3:3c:4e:88:
c1:0f:8a:62:c8:e8:26:83:8c:ac:22:6f:d8:14:f2:69:6d:9d:
fe:c0:b8:a2:c0:b0:4b:13:cc:e3:b7:96:60:0a:85:02:4d:f7:
ae:3e:a5:73:0d:49:3e:7c:ca:30:86:15:fd:61:ec:bc:81:9f:
45:ad:af:8c:59:11:74:b9:50:b7:58:7a:f9:04:e6:f2:25:9a:
45:34:dd:3d:4f:a7:48:81:a5:a1:53:df:92:aa:29:46:0f:b8:
31:e7:42:8b:e7:40:20:49:6e:6e:53:13:25:81:a1:c4:a9:52:
eb:28:4f:3c:43:8d:15:c6:13:36:b7:0c:56:3e:9c:3e:a4:3d:
e2:c0:36:03:b5:74:1e:ac:dd:1c:fa:77:b0:b0:21:f7:3b:be:
1c:ae:44:1a:b9:ed:fe:7a:93:b6:19:65:c1:fa:de:d7:4b:65:
e0:15:7f:8e:65:9d:d6:c1:e5:8f:d7:a5:21:92:4d:72:34:44:
c4:6a:7e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNa0XijXSKKu9kq6hnfsGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl
NzVhYjMwHhcNMjUwODA5MDYwMTE0WhcNMjUwODEwMDYwMTE0WjAzMTEwLwYDVQQD
Eyg2M2Q2YWMxZDhjNGY1NzMxMTFiZjhiZWE0OWY3MjEyZDE4YmVkMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7c2yxRyviLNj+5pOoUnz0MKOEvg
Wv9h4btaZ1cLFAkBEcSUsJr8eMGxrmthDLrCanXojWQguKExGJ2XqNwbEsWJNGsQ
PJWJBvnRy/JIXvbhUBiCkLfS3j5Hs15NYM6csAdEwJl0bGf+sWQbFDg3fnY1b9pn
ctOzxp2eed8thpdULrg3H1tuvFDZIHu06rWnK9ezh8tNPRKldI12jgB+rTB/+Ag+
gUN+0PkCLQXHTd/jKZAHj2z6VqCCspRQdYx4mTNInXPlzYAS7HbU5e9XUmQOJf4f
bdUnnF6CZ3cs+Djf/JikqrrsxmQ9v5Wro01ESZUtjEl0DWMZuyLW23MsAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPWrB2MT1cxEb+L6kn3IS0YvtEGMB8GA1UdIwQY
MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt
Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz
LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsEJPj6L
UU+5+Kb++JdUCDLG70YO4H0CxWYcz3uzi9Cp6kiJNvkBXqF1E9YcKCgrderKXIjv
iR80eUjzZLXidy6vg8rjPE6IwQ+KYsjoJoOMrCJv2BTyaW2d/sC4osCwSxPM47eW
YAqFAk33rj6lcw1JPnzKMIYV/WHsvIGfRa2vjFkRdLlQt1h6+QTm8iWaRTTdPU+n
SIGloVPfkqopRg+4MedCi+dAIElublMTJYGhxKlS6yhPPEONFcYTNrcMVj6cPqQ9
4sA2A7V0HqzdHPp3sLAh9zu+HK5EGrnt/nqTthllwfre10tl4BV/jmWd1sHlj9el
IZJNcjRExGp+cg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:52 2025 by rpki-client