Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: T5KddCSPqwPNKxQkQ+ucJQCYsk52lJzcoYG/cdIniVQ=
Subject key identifier: 91:FA:86:18:69:73:D4:C9:97:A9:A0:CE:0D:A6:78:3B:9E:AE:C2:EF
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 0197684E9718433B07FA8E0ADDE6959ADCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 14A1
Signing time: Fri 13 Jun 2025 08:01:10 +0000
Manifest this update: Fri 13 Jun 2025 08:01:10 +0000
Manifest next update: Sat 14 Jun 2025 08:01:10 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: 7CxNm4qlkPqa4K8vnkFFFILHyr+hdOPzLBLkNd8Df8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:97:18:43:3b:07:fa:8e:0a:dd:e6:95:9a:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Jun 13 08:01:10 2025 GMT
Not After : Jun 14 08:01:10 2025 GMT
Subject: CN=91fa86186973d4c997a9a0ce0da6783b9eaec2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:c8:e8:2f:bb:d9:0c:29:a0:b4:3e:16:93:
0e:cf:46:1b:82:39:69:d6:cc:ef:31:66:49:70:45:
19:cd:0a:64:ab:b4:45:cc:f0:c7:ae:e3:02:df:5d:
5b:7b:98:aa:31:d7:f3:64:9b:3d:27:97:c2:5b:9a:
98:1e:1c:97:3c:7e:ae:dd:24:78:09:f3:2f:a6:d0:
c4:ff:a2:5c:88:0d:d4:f8:ff:8d:0d:88:c1:1d:2c:
ab:69:c0:5c:14:a9:18:00:ee:f3:0a:5a:a3:34:69:
3f:f5:88:6d:92:53:de:69:b1:1d:1e:4c:f4:20:cc:
18:0a:e0:70:04:dc:a0:52:3f:a4:17:ca:ed:b2:6d:
59:04:d6:aa:ff:f5:d1:ea:19:40:cb:9e:82:bd:ae:
da:c8:55:fb:7d:5e:3c:f7:78:a5:1c:a7:42:ef:89:
93:11:08:e4:e0:0c:3c:c4:1f:87:14:1a:38:46:f8:
0d:e8:15:20:6c:37:c7:0d:47:8a:83:ab:62:db:1d:
59:8a:99:17:1e:df:74:10:d4:cc:07:24:bb:1e:ee:
43:3c:b2:aa:65:74:0d:c0:1b:95:02:5f:f5:b4:4f:
07:62:5e:28:9d:b9:26:fa:a5:65:61:0b:c4:cc:ab:
4f:2c:2a:75:b0:8b:78:78:47:9b:e6:71:b2:71:1b:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FA:86:18:69:73:D4:C9:97:A9:A0:CE:0D:A6:78:3B:9E:AE:C2:EF
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:df:93:b8:ba:e4:7f:26:de:58:fd:fc:33:00:af:a7:bf:
41:a2:97:3b:6d:a9:4e:51:ad:e9:01:e4:eb:ab:8e:d0:ea:96:
20:9a:45:9d:e3:4d:33:c9:e1:72:eb:da:7d:3d:29:79:61:08:
42:e2:a5:e1:e6:83:0b:41:e0:3f:e7:75:31:47:7a:d7:1a:4e:
d0:35:e2:46:60:7a:76:63:0c:f1:92:78:a4:6e:95:35:43:22:
f0:47:86:df:b9:98:5a:93:48:fd:6a:2e:a4:3a:b9:46:d5:c3:
6e:6f:98:98:73:6f:de:19:7f:0b:b8:22:2c:ad:db:f6:5e:60:
1c:37:79:2f:33:99:3e:94:2f:3b:5d:f7:aa:42:4f:20:88:94:
29:8d:3c:c6:0a:99:80:98:f7:da:ad:f3:3c:be:42:d7:02:69:
88:46:a0:f9:a2:ae:c0:1a:26:f3:21:6b:04:b8:62:33:a1:9c:
13:13:d9:50:e2:d5:00:ea:4d:44:97:96:8b:4c:54:e5:8a:e1:
96:bb:8b:52:30:f5:2a:af:f4:f6:b4:01:9e:b6:47:68:7e:d1:
76:35:2c:e6:e5:ec:3a:09:f1:16:15:e7:df:e9:e6:07:3c:55:
77:44:82:ae:c4:f7:c3:de:12:4f:1f:bf:d0:63:b7:54:ab:27:
54:17:39:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTpcYQzsH+o4K3eaVmtyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYWUzOTk5ODRkNzM3NGIyYThlMGFmNzJkMmJmY2YxMDVj
ODYxNTQwHhcNMjUwNjEzMDgwMTEwWhcNMjUwNjE0MDgwMTEwWjAzMTEwLwYDVQQD
Eyg5MWZhODYxODY5NzNkNGM5OTdhOWEwY2UwZGE2NzgzYjllYWVjMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyErI6C+72QwpoLQ+FpMOz0Ybgjlp
1szvMWZJcEUZzQpkq7RFzPDHruMC311be5iqMdfzZJs9J5fCW5qYHhyXPH6u3SR4
CfMvptDE/6JciA3U+P+NDYjBHSyracBcFKkYAO7zClqjNGk/9YhtklPeabEdHkz0
IMwYCuBwBNygUj+kF8rtsm1ZBNaq//XR6hlAy56Cva7ayFX7fV4893ilHKdC74mT
EQjk4Aw8xB+HFBo4RvgN6BUgbDfHDUeKg6ti2x1ZipkXHt90ENTMByS7Hu5DPLKq
ZXQNwBuVAl/1tE8HYl4onbkm+qVlYQvEzKtPLCp1sIt4eEeb5nGycRtQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH6hhhpc9TJl6mgzg2meDuersLvMB8GA1UdIwQY
MBaAFDOuOZmE1zdLKo4K9y0r/PEFyGFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMt
MWE4ZGFmZjExZTBjLzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMtMWE4ZGFmZjExZTBj
LzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoXfk7i6
5H8m3lj9/DMAr6e/QaKXO22pTlGt6QHk66uO0OqWIJpFneNNM8nhcuvafT0peWEI
QuKl4eaDC0HgP+d1MUd61xpO0DXiRmB6dmMM8ZJ4pG6VNUMi8EeG37mYWpNI/Wou
pDq5RtXDbm+YmHNv3hl/C7giLK3b9l5gHDd5LzOZPpQvO133qkJPIIiUKY08xgqZ
gJj32q3zPL5C1wJpiEag+aKuwBom8yFrBLhiM6GcExPZUOLVAOpNRJeWi0xU5Yrh
lruLUjD1Kq/09rQBnrZHaH7RdjUs5uXsOgnxFhXn3+nmBzxVd0SCrsT3w94STx+/
0GO3VKsnVBc5Iw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:15 2025 by rpki-client