Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: ZNBl/swPwOaLXbLJlKcEY1dMrbhdz2Le8KvviR0T6Mw=
Subject key identifier: 6A:09:F2:AB:68:32:D5:2C:34:A1:D1:E1:F0:0F:49:95:20:DB:96:49
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 0198D4DFCC818482A895EDB40A8361776E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: v/vhc4FkfnMzjCTwoFw4nBcrQB0bOURxXP6ik3zFafg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cc:81:84:82:a8:95:ed:b4:0a:83:61:77:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=6a09f2ab6832d52c34a1d1e1f00f499520db9649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:b1:63:3a:7f:7b:46:d9:3a:2f:71:8c:2e:
9d:73:9a:69:6a:ad:f7:58:f7:1f:14:b2:45:8b:0a:
d3:b1:68:77:ca:fd:a8:61:18:a9:cb:49:1b:6c:38:
7b:dc:ca:ea:e6:12:5d:62:fb:22:26:14:83:76:9c:
eb:7b:0d:b4:4d:d0:8e:0f:1d:20:f1:d8:97:c0:9d:
29:d1:6e:82:75:5e:b4:8e:80:eb:06:0a:55:7a:ad:
d5:51:a4:10:f3:da:54:65:ff:61:22:25:cc:f1:05:
1a:7c:1a:14:be:67:45:86:b7:7f:a4:56:b2:da:8a:
e3:8a:5b:b9:53:21:52:5d:be:7a:f1:ad:c2:99:40:
1f:a5:3a:bb:5c:04:35:f3:30:ab:b2:a9:6c:5b:00:
bb:a6:3e:b3:fe:6e:23:88:a9:e3:a8:74:06:b7:65:
74:c2:7d:06:a9:3c:52:88:37:a8:27:3b:3e:64:2c:
23:7f:c4:f1:cd:37:85:85:68:c9:54:07:fb:da:d5:
6b:57:8f:b1:6f:c4:4e:7f:ca:30:3e:6f:c9:20:5c:
e3:e9:f3:cc:65:63:87:26:1e:be:9c:27:d8:ae:59:
4c:af:b7:9b:64:89:d7:df:43:b4:1b:c4:c8:cd:8e:
b7:ab:0c:c8:66:05:d6:24:41:8f:36:8d:01:2a:76:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:F2:AB:68:32:D5:2C:34:A1:D1:E1:F0:0F:49:95:20:DB:96:49
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:15:80:63:2b:e2:1c:53:60:93:a5:6f:76:6a:9f:46:3a:6c:
d9:87:88:16:07:88:78:ac:e4:c2:c3:d3:e9:03:f2:6c:86:7c:
20:a6:05:bf:49:25:a5:bd:6d:90:ba:46:5f:40:07:9f:10:4a:
a5:bf:2c:ae:39:50:8d:76:25:e1:97:86:15:30:c5:32:d7:69:
03:f0:8b:78:f6:1a:6d:d0:8b:99:58:28:31:63:62:6c:4e:18:
e6:96:f2:9b:64:9d:af:b0:44:16:f2:e6:bc:f1:a2:71:d5:51:
4e:59:9d:30:66:a6:22:24:7b:45:6d:e6:c2:ce:c1:88:17:99:
45:e5:32:b6:8a:09:91:72:da:0b:44:21:cb:6f:51:46:e2:e3:
45:0e:a8:97:75:0d:93:f9:d7:90:23:19:9a:2b:d0:85:a5:9d:
e2:d3:0a:d2:f2:49:ee:aa:33:d9:55:8b:e5:2e:7a:98:de:be:
b3:1b:42:50:8d:8e:0e:6b:3a:5a:90:2e:e2:d7:a4:30:a2:d7:
c3:d2:53:ef:a7:56:34:fb:cf:57:b6:55:31:ab:53:57:b5:9a:
f5:05:e3:86:3e:2e:0f:ea:f8:06:90:7c:56:18:f7:05:21:56:
22:22:52:41:bd:05:b7:f9:61:35:0f:bf:8a:29:f6:5f:c1:62:
94:84:56:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38yBhIKole20CoNhd24MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm
NzNjYjUwHhcNMjUwODIzMDMwMTMzWhcNMjUwODI0MDMwMTMzWjAzMTEwLwYDVQQD
Eyg2YTA5ZjJhYjY4MzJkNTJjMzRhMWQxZTFmMDBmNDk5NTIwZGI5NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqCxYzp/e0bZOi9xjC6dc5ppaq33
WPcfFLJFiwrTsWh3yv2oYRipy0kbbDh73Mrq5hJdYvsiJhSDdpzrew20TdCODx0g
8diXwJ0p0W6CdV60joDrBgpVeq3VUaQQ89pUZf9hIiXM8QUafBoUvmdFhrd/pFay
2orjilu5UyFSXb568a3CmUAfpTq7XAQ18zCrsqlsWwC7pj6z/m4jiKnjqHQGt2V0
wn0GqTxSiDeoJzs+ZCwjf8TxzTeFhWjJVAf72tVrV4+xb8ROf8owPm/JIFzj6fPM
ZWOHJh6+nCfYrllMr7ebZInX30O0G8TIzY63qwzIZgXWJEGPNo0BKna4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoJ8qtoMtUsNKHR4fAPSZUg25ZJMB8GA1UdIwQY
MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct
MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj
LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxWAYyvi
HFNgk6VvdmqfRjps2YeIFgeIeKzkwsPT6QPybIZ8IKYFv0klpb1tkLpGX0AHnxBK
pb8srjlQjXYl4ZeGFTDFMtdpA/CLePYabdCLmVgoMWNibE4Y5pbym2Sdr7BEFvLm
vPGicdVRTlmdMGamIiR7RW3mws7BiBeZReUytooJkXLaC0Qhy29RRuLjRQ6ol3UN
k/nXkCMZmivQhaWd4tMK0vJJ7qoz2VWL5S56mN6+sxtCUI2ODms6WpAu4tekMKLX
w9JT76dWNPvPV7ZVMatTV7Wa9QXjhj4uD+r4BpB8Vhj3BSFWIiJSQb0Ft/lhNQ+/
iin2X8FilIRWAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:24 2025 by rpki-client