Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: 7hzC2NCNX8w1Kjo3YYzAU2vTM2kV2c3oZnRuzKUSZgE=
Subject key identifier: C0:C5:74:E2:26:07:88:B0:31:13:3F:82:46:14:5E:C7:34:21:CA:95
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 01988B456321A1787DC804FE50B663004371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 20:00:37 +0000
Manifest this update: Fri 08 Aug 2025 20:00:37 +0000
Manifest next update: Sat 09 Aug 2025 20:00:37 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: npWxAACVx42I/omL6uw0tKddxfSkdj+8boCckSfEuFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:63:21:a1:78:7d:c8:04:fe:50:b6:63:00:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Aug 8 20:00:37 2025 GMT
Not After : Aug 9 20:00:37 2025 GMT
Subject: CN=c0c574e2260788b031133f8246145ec73421ca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:08:27:a1:52:6b:04:24:1a:2a:07:46:37:
2b:8d:95:43:64:a0:97:7e:be:c3:bc:0a:90:69:0c:
92:a8:c6:c3:f1:3d:b7:00:f8:9a:f1:60:82:a0:58:
ae:cb:8e:f6:06:cb:f0:de:84:89:ee:b4:22:c0:70:
31:bf:76:c6:6e:8d:ea:1c:50:b3:41:a0:d2:b5:9b:
b1:4d:49:1a:2b:8e:de:4d:73:8d:3d:54:3a:d0:79:
e3:6b:43:f4:b7:05:b2:66:6e:df:89:62:d8:29:b6:
b4:e8:06:19:b8:69:db:e2:2f:b9:b8:e7:37:1c:4b:
e4:fb:51:62:6d:3f:60:83:00:e5:f2:1d:bf:18:64:
27:99:e3:cd:a3:f9:ce:77:b2:8f:0d:da:67:2e:06:
ca:2d:98:ef:a3:79:d4:ff:88:a0:2c:53:d6:77:76:
fb:6d:00:55:cd:53:8f:8d:3b:14:76:9b:c4:8a:28:
0e:ac:ce:5d:98:4e:94:f6:19:6c:d3:b8:df:13:2d:
f4:82:df:b4:cb:a2:60:f0:76:00:ef:b3:43:68:3d:
44:2b:b9:14:b0:a3:68:c0:a6:3f:0f:d4:6b:7f:f6:
e9:91:d6:14:50:90:bb:65:b4:d5:d3:55:70:c5:b0:
fb:13:96:eb:7e:70:54:71:7f:dd:96:22:d0:82:69:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:74:E2:26:07:88:B0:31:13:3F:82:46:14:5E:C7:34:21:CA:95
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5f:d9:eb:35:19:f0:77:92:6a:fe:bf:96:98:3f:9c:4c:1e:
24:ad:86:84:cb:dd:29:54:2f:f8:05:fc:3a:33:ab:95:ee:c4:
6f:a0:1f:fd:a7:f8:48:85:b2:c4:de:f0:c6:27:ae:92:54:c2:
d9:1a:10:20:10:97:e4:7b:7d:a6:f5:85:09:79:0a:54:58:ba:
96:64:32:fa:64:f5:a6:63:7d:75:37:d9:ba:c1:49:2a:e2:7f:
d4:98:ff:61:2e:18:63:c8:08:b1:18:74:e0:ac:af:4a:0b:e8:
f0:30:07:c2:57:27:f9:c3:a2:be:83:06:0d:69:d0:ee:6a:58:
0e:d8:62:22:73:82:6c:a4:9e:f6:a0:c8:72:30:e1:62:fc:74:
9f:60:4e:b5:da:61:9d:98:38:47:07:7e:a3:43:ff:c5:0b:39:
a5:9f:8c:cc:be:de:9a:63:91:bb:f5:e2:da:3e:37:c4:61:02:
a8:75:9c:27:9b:9e:c2:14:34:64:4a:f9:a3:3b:d6:15:a7:6a:
4f:4a:b3:5a:1d:66:00:9f:a6:f5:52:f7:94:69:b0:60:dd:e6:
7a:2f:9f:e0:44:c8:2d:fd:70:b9:ef:e1:d3:eb:b1:76:e8:62:
ee:d8:96:df:7d:8e:67:2c:ba:d9:18:69:68:f3:7a:01:29:cb:
20:31:dc:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRWMhoXh9yAT+ULZjAENxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3
MWFhYjgwHhcNMjUwODA4MjAwMDM3WhcNMjUwODA5MjAwMDM3WjAzMTEwLwYDVQQD
EyhjMGM1NzRlMjI2MDc4OGIwMzExMzNmODI0NjE0NWVjNzM0MjFjYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtioIJ6FSawQkGioHRjcrjZVDZKCX
fr7DvAqQaQySqMbD8T23APia8WCCoFiuy472Bsvw3oSJ7rQiwHAxv3bGbo3qHFCz
QaDStZuxTUkaK47eTXONPVQ60Hnja0P0twWyZm7fiWLYKba06AYZuGnb4i+5uOc3
HEvk+1FibT9ggwDl8h2/GGQnmePNo/nOd7KPDdpnLgbKLZjvo3nU/4igLFPWd3b7
bQBVzVOPjTsUdpvEiigOrM5dmE6U9hls07jfEy30gt+0y6Jg8HYA77NDaD1EK7kU
sKNowKY/D9Rrf/bpkdYUUJC7ZbTV01VwxbD7E5brfnBUcX/dliLQgmmelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDFdOImB4iwMRM/gkYUXsc0IcqVMB8GA1UdIwQY
MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt
ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4
LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl/Z6zUZ
8HeSav6/lpg/nEweJK2GhMvdKVQv+AX8OjOrle7Eb6Af/af4SIWyxN7wxieuklTC
2RoQIBCX5Ht9pvWFCXkKVFi6lmQy+mT1pmN9dTfZusFJKuJ/1Jj/YS4YY8gIsRh0
4KyvSgvo8DAHwlcn+cOivoMGDWnQ7mpYDthiInOCbKSe9qDIcjDhYvx0n2BOtdph
nZg4Rwd+o0P/xQs5pZ+MzL7emmORu/Xi2j43xGECqHWcJ5uewhQ0ZEr5ozvWFadq
T0qzWh1mAJ+m9VL3lGmwYN3mei+f4ETILf1wue/h0+uxduhi7tiW332OZyy62Rhp
aPN6ASnLIDHcEg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:07 2025 by rpki-client