
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: ar+qlaKLrIY66QwXTnAgTtiRWVIOxKeUCJfAuLPU2gQ=
Subject key identifier: A4:72:EB:4A:74:0A:84:AC:CA:AD:1D:13:2C:9D:BC:30:F0:15:A7:C8
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01988B7D685B79EFE269B0834ADBE28D2D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 157A
Signing time: Fri 08 Aug 2025 21:01:48 +0000
Manifest this update: Fri 08 Aug 2025 21:01:48 +0000
Manifest next update: Sat 09 Aug 2025 21:01:48 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: uhmylSC2vIus4jpIpBXL3ZZXoe2QTXcUAJHqH4wHqhQ=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:68:5b:79:ef:e2:69:b0:83:4a:db:e2:8d:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Aug 8 21:01:48 2025 GMT
Not After : Aug 9 21:01:48 2025 GMT
Subject: CN=a472eb4a740a84accaad1d132c9dbc30f015a7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:81:31:31:7f:95:94:35:cf:34:e0:3b:b4:
cf:55:72:5f:e0:44:09:bf:63:f2:1c:e5:03:ec:71:
a5:17:cc:89:f3:65:13:df:4f:02:f9:87:98:10:ac:
fa:ce:09:35:3e:8b:c4:31:96:3f:88:f9:70:09:cd:
f2:cc:26:c0:67:b4:4e:2e:fc:ab:f5:45:27:39:0d:
ca:7e:d4:4b:d2:73:29:cc:c8:3c:94:2e:96:f3:3e:
ea:d3:d3:09:ee:fe:29:88:6a:88:70:f8:9c:b0:56:
7a:13:a9:2e:97:83:78:b8:66:ac:e1:a9:3f:a4:4a:
2b:91:c0:f6:14:40:7c:aa:4c:b7:71:8f:e3:68:aa:
47:30:fb:9d:ce:29:82:b3:dc:6c:b1:2b:b5:c3:b2:
6b:28:ff:1a:a7:67:5f:94:d1:67:47:8f:b0:6d:f9:
3b:9f:0e:0a:9e:c5:2a:d2:44:c4:58:20:25:66:6b:
30:86:d3:27:7c:8f:00:d8:16:ad:e9:5c:3b:88:15:
e1:58:6f:e4:be:ee:64:14:05:3f:23:b0:5c:94:71:
3d:d4:b7:ba:a9:30:ba:1f:91:1a:ad:3d:0e:8f:2d:
54:df:a6:aa:b1:b0:45:12:34:1b:88:c9:3d:6a:f1:
c0:10:44:70:e5:ac:ca:ec:09:ef:ce:5c:e6:1f:4d:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:EB:4A:74:0A:84:AC:CA:AD:1D:13:2C:9D:BC:30:F0:15:A7:C8
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:d6:54:77:33:21:e9:3e:41:9b:77:98:3d:ee:a5:d5:61:
8e:25:2f:0d:34:6d:6b:a6:11:97:2a:a7:28:68:7e:89:79:a4:
6b:79:9b:8e:54:28:1e:b9:11:66:66:b2:46:e0:1b:09:4d:8d:
fc:e5:12:00:cf:50:ab:f7:db:60:c0:d7:43:55:b3:96:26:6a:
a4:1c:96:8e:61:f0:ff:af:35:bf:d1:da:1a:80:02:8f:1d:1b:
da:e0:16:2c:5f:91:e8:38:9b:ce:b4:de:26:a6:e9:73:93:8d:
10:df:76:60:b6:0e:2e:37:17:2e:ac:5d:58:5b:e7:fa:bd:e0:
76:fa:ab:89:7e:77:00:b2:87:b0:39:bf:b8:42:b6:80:8f:54:
10:4b:c0:a0:24:be:1d:c8:8b:f8:20:a0:2a:65:f1:ec:87:d4:
03:71:91:1e:0c:58:e9:51:ab:69:3f:5a:89:8b:ac:2b:b2:f9:
01:d3:a2:e3:1e:d6:42:6f:a5:e2:f6:5a:27:ba:1b:af:84:72:
fb:ba:97:94:07:4b:f8:9d:a0:20:3a:78:18:93:88:81:08:0d:
81:29:b1:23:60:de:6b:e6:7f:25:30:16:d0:62:b5:c8:a2:9e:
d9:e2:bd:15:2f:09:a9:81:3d:27:3f:34:59:a0:d3:0d:5b:71:
3d:a7:9b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfWhbee/iabCDStvijS2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUwODA4MjEwMTQ4WhcNMjUwODA5MjEwMTQ4WjAzMTEwLwYDVQQD
EyhhNDcyZWI0YTc0MGE4NGFjY2FhZDFkMTMyYzlkYmMzMGYwMTVhN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOWBMTF/lZQ1zzTgO7TPVXJf4EQJ
v2PyHOUD7HGlF8yJ82UT308C+YeYEKz6zgk1PovEMZY/iPlwCc3yzCbAZ7ROLvyr
9UUnOQ3KftRL0nMpzMg8lC6W8z7q09MJ7v4piGqIcPicsFZ6E6kul4N4uGas4ak/
pEorkcD2FEB8qky3cY/jaKpHMPudzimCs9xssSu1w7JrKP8ap2dflNFnR4+wbfk7
nw4KnsUq0kTEWCAlZmswhtMnfI8A2Bat6Vw7iBXhWG/kvu5kFAU/I7BclHE91Le6
qTC6H5EarT0Ojy1U36aqsbBFEjQbiMk9avHAEERw5azK7AnvzlzmH007TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRy60p0CoSsyq0dEyydvDDwFafIMB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1vWVHcz
Iek+QZt3mD3updVhjiUvDTRta6YRlyqnKGh+iXmka3mbjlQoHrkRZmayRuAbCU2N
/OUSAM9Qq/fbYMDXQ1WzliZqpByWjmHw/681v9HaGoACjx0b2uAWLF+R6DibzrTe
Jqbpc5ONEN92YLYOLjcXLqxdWFvn+r3gdvqriX53ALKHsDm/uEK2gI9UEEvAoCS+
HciL+CCgKmXx7IfUA3GRHgxY6VGraT9aiYusK7L5AdOi4x7WQm+l4vZaJ7obr4Ry
+7qXlAdL+J2gIDp4GJOIgQgNgSmxI2Dea+Z/JTAW0GK1yKKe2eK9FS8JqYE9Jz80
WaDTDVtxPaebNg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:21 2025 by rpki-client