Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: cjQOoftK6lA7eqJXwwHnInaiSSg/Qg4bEFsGJcbiGDM=
Subject key identifier: BA:53:11:89:D6:93:47:E3:48:A0:E4:EA:AA:4A:2F:01:3F:CE:27:E8
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01976C2ACDB5C1BB77F6C1D9066B7394754F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 082F
Signing time: Sat 14 Jun 2025 02:00:33 +0000
Manifest this update: Sat 14 Jun 2025 02:00:33 +0000
Manifest next update: Sun 15 Jun 2025 02:00:33 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: JWakJwhUP7Nv7HAk9nK/haA7W7UdETjng/NJUVYCwN4=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:cd:b5:c1:bb:77:f6:c1:d9:06:6b:73:94:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jun 14 02:00:33 2025 GMT
Not After : Jun 15 02:00:33 2025 GMT
Subject: CN=ba531189d69347e348a0e4eaaa4a2f013fce27e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:34:89:8b:77:92:84:72:77:72:56:dc:00:
ae:90:18:28:b5:15:3f:62:26:5a:42:9c:57:ae:6b:
81:3d:78:33:6c:82:94:ae:a9:ad:db:ac:5a:62:f7:
58:43:7d:5c:0d:83:63:e3:a9:92:2b:64:97:f8:5e:
86:32:52:a9:d7:df:3a:60:3c:1b:b4:10:22:63:71:
de:7b:e9:e2:6c:67:26:68:dc:25:7c:41:58:ea:ea:
e8:ed:90:7b:38:88:ad:fd:c1:60:e8:6f:71:ee:26:
7c:16:ee:80:49:37:cf:b8:9d:24:1f:7c:09:e4:cf:
27:33:83:86:c6:8f:c9:2e:2a:06:61:2c:41:80:94:
b1:93:60:e5:66:5f:d8:89:28:5a:23:55:6c:1b:74:
c5:8d:ba:b2:dc:45:b0:81:1e:d1:6e:5f:8d:e7:e7:
05:4a:ae:4b:fb:6a:4e:4a:c5:1f:85:22:8e:14:9e:
17:9d:6f:52:97:85:e8:b9:42:6f:6e:f4:3a:a4:95:
dc:3d:d4:17:42:9c:c1:d8:2e:5b:0c:5a:24:4f:40:
12:84:84:6a:49:30:ae:60:a2:07:d7:e1:ab:50:43:
a7:4f:05:39:c1:38:07:3d:79:ac:9c:0d:b1:c6:0c:
5f:d8:75:4b:ca:43:de:4b:dc:60:54:da:77:83:38:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:11:89:D6:93:47:E3:48:A0:E4:EA:AA:4A:2F:01:3F:CE:27:E8
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:c5:48:93:50:e2:bd:ec:1a:82:db:bd:d2:cd:4e:7a:5d:
29:16:bf:0f:a1:72:f0:8a:1b:51:4d:ed:74:95:ec:61:15:e8:
53:6c:1a:ef:94:00:dc:5b:e4:b6:82:63:1e:30:e1:01:a1:18:
12:37:e3:4e:3a:4f:df:16:5c:62:47:39:26:23:a6:2a:44:f7:
52:77:dc:e1:3a:f4:8f:22:92:3a:5d:3c:c2:e7:57:37:65:45:
8c:63:b0:ca:87:04:41:28:0b:41:03:71:d6:49:52:7f:c2:08:
6f:1d:fe:0c:e0:4d:de:45:ec:27:3d:7e:2c:eb:01:4e:3f:4b:
af:93:4a:41:c3:91:f3:47:d3:bd:33:31:32:20:a5:78:a1:83:
11:ae:56:9b:56:a7:eb:62:ae:64:04:e3:ca:02:07:58:4d:93:
b0:9b:cb:44:68:dc:1d:eb:45:df:9a:78:1a:5f:be:01:17:52:
27:eb:73:45:75:7d:1a:05:2b:34:6c:5d:6d:25:cd:62:c0:d9:
43:73:cb:b3:ce:3e:ac:5c:98:27:73:9e:28:9f:8d:bf:89:ad:
41:9d:45:b3:f2:06:db:e4:57:1e:83:d6:88:40:9d:50:dd:6e:
5c:e3:9f:e0:02:90:83:b4:0b:9a:3f:b4:2e:c1:01:b8:18:e1:
d1:a2:9b:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKs21wbt39sHZBmtzlHVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjUwNjE0MDIwMDMzWhcNMjUwNjE1MDIwMDMzWjAzMTEwLwYDVQQD
EyhiYTUzMTE4OWQ2OTM0N2UzNDhhMGU0ZWFhYTRhMmYwMTNmY2UyN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHI0iYt3koRyd3JW3ACukBgotRU/
YiZaQpxXrmuBPXgzbIKUrqmt26xaYvdYQ31cDYNj46mSK2SX+F6GMlKp1986YDwb
tBAiY3Hee+nibGcmaNwlfEFY6uro7ZB7OIit/cFg6G9x7iZ8Fu6ASTfPuJ0kH3wJ
5M8nM4OGxo/JLioGYSxBgJSxk2DlZl/YiShaI1VsG3TFjbqy3EWwgR7Rbl+N5+cF
Sq5L+2pOSsUfhSKOFJ4XnW9Sl4XouUJvbvQ6pJXcPdQXQpzB2C5bDFokT0AShIRq
STCuYKIH1+GrUEOnTwU5wTgHPXmsnA2xxgxf2HVLykPeS9xgVNp3gziOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpTEYnWk0fjSKDk6qpKLwE/zifoMB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHObFSJNQ
4r3sGoLbvdLNTnpdKRa/D6Fy8IobUU3tdJXsYRXoU2wa75QA3FvktoJjHjDhAaEY
EjfjTjpP3xZcYkc5JiOmKkT3Unfc4Tr0jyKSOl08wudXN2VFjGOwyocEQSgLQQNx
1klSf8IIbx3+DOBN3kXsJz1+LOsBTj9Lr5NKQcOR80fTvTMxMiCleKGDEa5Wm1an
62KuZATjygIHWE2TsJvLRGjcHetF35p4Gl++ARdSJ+tzRXV9GgUrNGxdbSXNYsDZ
Q3PLs84+rFyYJ3OeKJ+Nv4mtQZ1Fs/IG2+RXHoPWiECdUN1uXOOf4AKQg7QLmj+0
LsEBuBjh0aKbtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:11 2025 by rpki-client