Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: gZ3PTNSm22yvz/XSJ5rZHZPcUshhMbltwSe4bP6hBYU=
Subject key identifier: 10:6C:D8:BE:56:81:D8:00:1F:9B:8B:A0:BE:35:BE:EF:6E:EC:21:6B
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01987A88FB6A2E2F238BFAA2D315FA9A8D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 08BB
Signing time: Tue 05 Aug 2025 14:00:54 +0000
Manifest this update: Tue 05 Aug 2025 14:00:54 +0000
Manifest next update: Wed 06 Aug 2025 14:00:54 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: LRZCZMBzw3q074DZt8Bv7SQpy5Tgqeh3vwjpB/b52r4=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:fb:6a:2e:2f:23:8b:fa:a2:d3:15:fa:9a:8d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Aug 5 14:00:54 2025 GMT
Not After : Aug 6 14:00:54 2025 GMT
Subject: CN=106cd8be5681d8001f9b8ba0be35beef6eec216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:aa:b9:63:63:ff:0c:b0:5d:d4:d6:70:a6:
82:99:e3:9c:b9:fe:74:df:04:b4:7a:df:f5:ca:d7:
d5:55:6a:e6:ef:12:2f:f2:3a:a7:4b:52:a0:0c:9f:
14:0f:86:84:bf:03:63:e6:5f:0c:8c:47:08:48:7b:
77:21:41:3c:74:4d:25:e8:dc:1a:8d:c3:00:3d:c5:
6e:0f:91:5b:20:9e:53:c7:88:63:ff:b5:3c:60:46:
69:a5:c9:b0:46:c4:ec:bc:3a:95:b8:02:54:bb:58:
b9:fb:27:b9:11:d6:6c:1c:41:e0:fb:44:6e:29:65:
87:d1:8b:7b:60:92:f5:30:bb:ec:90:32:da:54:f1:
7f:9e:8c:a6:85:2f:a3:6c:bc:56:39:c8:90:26:65:
b9:19:80:54:e3:a5:90:ae:d3:72:b3:39:76:55:39:
d2:06:2f:72:c6:5b:b9:b0:ea:de:ce:3f:af:32:c4:
0c:22:66:b1:b8:1e:33:41:20:b6:c6:91:cd:9c:32:
b8:a2:d2:29:67:72:9e:7c:e8:3f:50:bf:7e:c3:d6:
3e:d0:95:ae:e9:64:dc:d8:a1:3c:e2:26:40:9a:04:
46:85:4c:37:30:84:5e:3b:87:c3:b3:d1:6d:fe:20:
e8:21:e0:b6:6a:d0:74:c0:55:11:bf:dd:3c:3d:f1:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:D8:BE:56:81:D8:00:1F:9B:8B:A0:BE:35:BE:EF:6E:EC:21:6B
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:f5:35:e7:75:86:7d:1d:68:14:c2:97:99:d1:4e:15:f8:
64:25:eb:2a:76:fe:c7:d6:e3:7f:27:a1:f7:2d:7e:6e:75:fc:
00:ff:4e:b4:d9:66:6a:39:9c:67:51:65:bb:10:85:d2:0f:95:
3d:0a:49:56:4a:83:1c:70:b2:59:7f:c0:71:97:d9:c7:65:a4:
71:83:9c:0a:4a:73:50:09:77:1a:78:82:44:8f:f3:98:39:78:
fc:ed:e1:ea:fd:07:07:38:43:89:03:ca:33:24:7f:09:9c:66:
c1:4d:72:2f:b6:f0:36:67:18:81:f8:e0:a2:31:6e:77:50:f9:
4a:26:72:4a:58:7f:a4:13:30:99:b0:74:fd:9d:8c:e3:30:88:
77:29:f6:ff:37:d7:18:68:5b:bf:72:52:a5:eb:03:0a:67:ff:
06:2d:5c:64:a7:8e:06:b7:5c:41:19:fa:ed:e8:5f:ed:e2:18:
24:6a:15:f4:fb:91:11:25:49:15:2a:f2:65:29:f7:b4:b9:7d:
d5:ff:bb:72:55:31:2b:4a:8a:e7:1d:b8:75:6d:9c:16:56:27:
77:97:5a:83:db:e2:dc:23:34:80:1a:ab:53:5a:c0:e9:05:8f:
8b:bd:36:dc:08:87:7a:8c:69:af:f5:e0:c0:c5:9d:90:18:0d:
2a:f0:06:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iPtqLi8ji/qi0xX6mo1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjUwODA1MTQwMDU0WhcNMjUwODA2MTQwMDU0WjAzMTEwLwYDVQQD
EygxMDZjZDhiZTU2ODFkODAwMWY5YjhiYTBiZTM1YmVlZjZlZWMyMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QuquWNj/wywXdTWcKaCmeOcuf50
3wS0et/1ytfVVWrm7xIv8jqnS1KgDJ8UD4aEvwNj5l8MjEcISHt3IUE8dE0l6Nwa
jcMAPcVuD5FbIJ5Tx4hj/7U8YEZppcmwRsTsvDqVuAJUu1i5+ye5EdZsHEHg+0Ru
KWWH0Yt7YJL1MLvskDLaVPF/noymhS+jbLxWOciQJmW5GYBU46WQrtNyszl2VTnS
Bi9yxlu5sOrezj+vMsQMImaxuB4zQSC2xpHNnDK4otIpZ3KefOg/UL9+w9Y+0JWu
6WTc2KE84iZAmgRGhUw3MIReO4fDs9Ft/iDoIeC2atB0wFURv908PfEqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBs2L5WgdgAH5uLoL41vu9u7CFrMB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQib1Ned1
hn0daBTCl5nRThX4ZCXrKnb+x9bjfyeh9y1+bnX8AP9OtNlmajmcZ1FluxCF0g+V
PQpJVkqDHHCyWX/AcZfZx2WkcYOcCkpzUAl3GniCRI/zmDl4/O3h6v0HBzhDiQPK
MyR/CZxmwU1yL7bwNmcYgfjgojFud1D5SiZySlh/pBMwmbB0/Z2M4zCIdyn2/zfX
GGhbv3JSpesDCmf/Bi1cZKeOBrdcQRn67ehf7eIYJGoV9PuRESVJFSryZSn3tLl9
1f+7clUxK0qK5x24dW2cFlYnd5dag9vi3CM0gBqrU1rA6QWPi7023AiHeoxpr/Xg
wMWdkBgNKvAGwg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:39 2025 by rpki-client