Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: 71Rmc1tgbjNOBfd/iMAmKnfsVi18HPa+1RueBdHB13g=
Subject key identifier: A1:8A:A3:EA:64:C3:DC:AA:15:7D:7E:AF:01:B4:E5:BD:24:C7:5A:D2
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 01977D8C07F36F8444F911588B1216DAC813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0C18
Signing time: Tue 17 Jun 2025 11:00:18 +0000
Manifest this update: Tue 17 Jun 2025 11:00:18 +0000
Manifest next update: Wed 18 Jun 2025 11:00:18 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: bNxm6vGSiL5eWqrTo6CgwsosZGJv2faQ5ItsrAeULOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:07:f3:6f:84:44:f9:11:58:8b:12:16:da:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Jun 17 11:00:18 2025 GMT
Not After : Jun 18 11:00:18 2025 GMT
Subject: CN=a18aa3ea64c3dcaa157d7eaf01b4e5bd24c75ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:c8:a5:d0:d3:e8:4b:c9:96:b7:f7:14:5b:
6e:c4:2d:8e:92:74:1f:c0:ef:5d:e6:d8:f7:43:10:
23:52:d3:c0:92:da:4c:14:7a:e5:a0:d1:6f:1a:2a:
df:d0:a7:5b:84:a3:ff:92:78:14:79:f1:42:1c:9a:
12:ee:35:aa:3b:68:bf:2a:d4:e5:63:b3:e2:d2:17:
bb:66:96:fc:01:d3:79:52:40:6c:9f:b4:04:26:d3:
64:8a:0d:a5:28:8c:80:54:e1:e5:3f:a0:b1:cb:31:
d9:20:0d:94:04:81:b3:bb:c0:00:00:40:9b:75:08:
17:38:08:87:37:52:6d:e0:4f:13:bf:5d:a2:c0:b8:
66:5f:04:06:6b:b2:10:5b:3a:24:4f:86:ac:bb:97:
88:7b:69:c4:3b:96:f2:c5:62:99:81:bc:2a:5b:c3:
d1:74:96:89:b0:00:46:a5:37:14:78:5b:54:26:be:
44:3d:2c:32:42:68:eb:a6:e0:a0:19:69:53:87:09:
86:ca:e1:48:eb:35:91:36:1b:92:8e:c8:6f:f3:76:
41:27:5b:a3:62:9d:7b:72:33:50:2c:1e:81:e7:de:
28:46:2f:df:73:51:c8:fe:27:ff:37:be:8c:44:da:
78:74:dc:79:00:ba:b1:26:86:05:dc:d4:68:2c:50:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:A3:EA:64:C3:DC:AA:15:7D:7E:AF:01:B4:E5:BD:24:C7:5A:D2
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:6d:ea:d9:66:f1:c9:87:b0:70:79:68:96:90:0f:7b:e0:
b1:72:04:a2:63:07:20:1c:40:59:16:68:99:08:22:93:66:bc:
90:ed:58:c2:19:60:7b:0f:e6:72:4e:90:f1:8c:e0:cf:09:0d:
13:5b:fd:0e:1c:9f:48:76:c2:0d:9a:fb:d3:c3:8d:d0:56:ce:
1c:03:9e:ce:e3:58:18:3e:43:9b:1f:13:86:24:9e:1d:3e:cd:
0d:51:33:30:56:52:25:42:5e:ed:cf:34:c3:bd:e5:87:09:ce:
f1:9d:19:6f:6e:34:01:38:19:f3:9b:27:87:52:11:f4:45:37:
39:02:c1:8a:2c:08:fe:d8:86:9b:72:53:83:1e:7f:d5:90:89:
89:9b:a8:12:c6:c8:8c:4e:d1:3a:c4:6b:1a:68:5c:a4:79:fe:
59:21:96:06:04:e5:8b:0b:c6:30:5a:e9:7c:61:e5:01:58:8c:
c8:83:e0:c6:4d:58:d7:6d:42:78:c5:ac:2c:6c:d5:cd:b3:32:
7f:27:d9:45:da:fd:80:b9:c0:b6:4c:26:7d:32:fa:14:d1:8e:
09:25:a1:45:d0:63:2c:0f:3d:56:40:48:2c:b9:68:2e:e4:e9:
55:8d:9b:be:0e:b0:2e:70:53:c9:c9:6b:3f:e7:a1:f3:d9:2d:
44:c3:13:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9jAfzb4RE+RFYixIW2sgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl
NzUyZjMwHhcNMjUwNjE3MTEwMDE4WhcNMjUwNjE4MTEwMDE4WjAzMTEwLwYDVQQD
EyhhMThhYTNlYTY0YzNkY2FhMTU3ZDdlYWYwMWI0ZTViZDI0Yzc1YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz/IpdDT6EvJlrf3FFtuxC2OknQf
wO9d5tj3QxAjUtPAktpMFHrloNFvGirf0KdbhKP/kngUefFCHJoS7jWqO2i/KtTl
Y7Pi0he7Zpb8AdN5UkBsn7QEJtNkig2lKIyAVOHlP6CxyzHZIA2UBIGzu8AAAECb
dQgXOAiHN1Jt4E8Tv12iwLhmXwQGa7IQWzokT4asu5eIe2nEO5byxWKZgbwqW8PR
dJaJsABGpTcUeFtUJr5EPSwyQmjrpuCgGWlThwmGyuFI6zWRNhuSjshv83ZBJ1uj
Yp17cjNQLB6B594oRi/fc1HI/if/N76MRNp4dNx5ALqxJoYF3NRoLFAnfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGKo+pkw9yqFX1+rwG05b0kx1rSMB8GA1UdIwQY
MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt
OWMxZjY5YTI0MmJhLzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh
LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCBt6tlm
8cmHsHB5aJaQD3vgsXIEomMHIBxAWRZomQgik2a8kO1Ywhlgew/mck6Q8YzgzwkN
E1v9DhyfSHbCDZr708ON0FbOHAOezuNYGD5Dmx8ThiSeHT7NDVEzMFZSJUJe7c80
w73lhwnO8Z0Zb240ATgZ85snh1IR9EU3OQLBiiwI/tiGm3JTgx5/1ZCJiZuoEsbI
jE7ROsRrGmhcpHn+WSGWBgTliwvGMFrpfGHlAViMyIPgxk1Y121CeMWsLGzVzbMy
fyfZRdr9gLnAtkwmfTL6FNGOCSWhRdBjLA89VkBILLloLuTpVY2bvg6wLnBTyclr
P+eh89ktRMMTDw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:38:58 2025 by rpki-client