Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: bhGv7ZNdGU2PYQuHYWyISwRV/SB23eFwDgmup9bSTLA=
Subject key identifier: 70:5A:F1:FA:E2:91:6E:68:60:CF:FC:5D:F8:40:9D:00:A9:8A:9E:12
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0197BB8FCEFB5633A23DFF10BE5116CAF577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 12E7
Signing time: Sun 29 Jun 2025 12:00:53 +0000
Manifest this update: Sun 29 Jun 2025 12:00:53 +0000
Manifest next update: Mon 30 Jun 2025 12:00:53 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 4FLq6OD46wd5vppVcPtXQ6DHlyJz0uUMMCs1dFWSWX0=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:8f:ce:fb:56:33:a2:3d:ff:10:be:51:16:ca:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jun 29 12:00:53 2025 GMT
Not After : Jun 30 12:00:53 2025 GMT
Subject: CN=705af1fae2916e6860cffc5df8409d00a98a9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:d6:54:d0:5e:8b:91:7c:f2:1e:c8:e7:2e:
ce:b2:d6:98:80:48:e7:a9:e6:ac:93:fc:d2:6e:7e:
22:47:f6:53:10:f4:a5:f5:aa:27:2d:90:40:7b:e4:
9d:80:ae:ac:78:18:9c:72:f4:2b:5b:f0:6e:42:23:
dc:cd:1c:60:2d:c8:47:fd:f5:79:7c:b0:d9:d6:f0:
01:fb:ce:e3:46:3b:75:53:08:0e:46:97:71:dc:9b:
14:df:22:cf:ea:12:98:18:48:44:40:4f:0d:aa:ff:
c5:b5:8c:60:91:31:56:f8:a9:22:24:92:05:d3:ab:
16:42:56:6d:e8:cb:e0:b7:02:17:cc:be:8b:cd:c4:
e6:c4:58:80:27:7c:45:2b:7e:9b:d0:4d:7a:40:a2:
b4:3c:af:47:f3:33:a1:1f:08:2e:23:15:ef:bd:99:
74:81:08:ee:b0:8b:05:db:a9:81:06:ae:2e:87:48:
9e:0a:02:fb:b9:a5:cc:32:84:48:5d:ee:1d:f1:e1:
28:dc:13:26:8b:6c:a5:d5:75:ee:e0:21:f2:a7:80:
3c:5f:1c:a1:c9:05:3d:da:31:97:a7:ea:69:cc:39:
9c:88:1a:a9:19:3d:2f:72:76:b1:34:8c:d8:3c:eb:
22:f1:c4:a7:15:01:bd:9f:00:00:f0:78:67:af:bd:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:F1:FA:E2:91:6E:68:60:CF:FC:5D:F8:40:9D:00:A9:8A:9E:12
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:c0:ac:37:03:ab:92:97:73:c8:9c:dc:d2:33:b9:1d:b8:
fe:3d:16:49:de:20:59:4d:03:73:1a:08:d4:b8:a8:22:86:84:
57:89:13:12:03:93:8f:f8:00:c5:c8:7d:37:e0:da:b1:e3:79:
46:73:93:49:a8:61:93:01:96:8c:20:25:32:1f:e6:a7:9d:58:
f7:6f:a0:9a:7f:5e:68:db:ea:85:40:71:c7:59:ae:6e:6a:74:
b5:da:7a:36:81:28:06:b3:19:b7:23:fc:77:0a:ce:28:36:e2:
cf:2d:11:67:89:28:7f:87:9d:2e:5a:ee:aa:6f:eb:ea:66:21:
cf:cc:08:ae:79:03:e4:7b:50:67:d1:57:99:91:fb:14:17:a2:
07:4e:52:fa:4d:02:d1:40:c6:be:89:e4:47:d1:04:dd:37:5b:
ef:2e:bd:49:a6:bc:50:3e:97:59:0d:56:e3:5c:2d:ba:42:5a:
2a:d9:ac:07:cd:29:74:d9:61:1e:52:fa:ed:ce:95:0e:97:a5:
d3:b1:1a:07:69:03:21:d9:2f:77:dd:23:53:13:f3:4e:ed:e7:
f6:8a:0d:32:a0:d6:b6:92:61:90:5c:2b:3f:df:6d:5e:bc:f9:
96:c3:e3:06:b9:c8:e3:9b:e4:38:f1:82:e0:c3:42:ce:70:b7:
4d:36:08:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7j877VjOiPf8QvlEWyvV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz
MTQ3ZDgwHhcNMjUwNjI5MTIwMDUzWhcNMjUwNjMwMTIwMDUzWjAzMTEwLwYDVQQD
Eyg3MDVhZjFmYWUyOTE2ZTY4NjBjZmZjNWRmODQwOWQwMGE5OGE5ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/WVNBei5F88h7I5y7OstaYgEjn
qeask/zSbn4iR/ZTEPSl9aonLZBAe+SdgK6seBiccvQrW/BuQiPczRxgLchH/fV5
fLDZ1vAB+87jRjt1UwgORpdx3JsU3yLP6hKYGEhEQE8Nqv/FtYxgkTFW+KkiJJIF
06sWQlZt6MvgtwIXzL6LzcTmxFiAJ3xFK36b0E16QKK0PK9H8zOhHwguIxXvvZl0
gQjusIsF26mBBq4uh0ieCgL7uaXMMoRIXe4d8eEo3BMmi2yl1XXu4CHyp4A8Xxyh
yQU92jGXp+ppzDmciBqpGT0vcnaxNIzYPOsi8cSnFQG9nwAA8Hhnr70rAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBa8frikW5oYM/8XfhAnQCpip4SMB8GA1UdIwQY
MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt
ZDQ5MzQ0OTNhNjc5LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5
LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF7ArDcD
q5KXc8ic3NIzuR24/j0WSd4gWU0DcxoI1LioIoaEV4kTEgOTj/gAxch9N+DaseN5
RnOTSahhkwGWjCAlMh/mp51Y92+gmn9eaNvqhUBxx1mubmp0tdp6NoEoBrMZtyP8
dwrOKDbizy0RZ4kof4edLlruqm/r6mYhz8wIrnkD5HtQZ9FXmZH7FBeiB05S+k0C
0UDGvonkR9EE3Tdb7y69Saa8UD6XWQ1W41wtukJaKtmsB80pdNlhHlL67c6VDpel
07EaB2kDIdkvd90jUxPzTu3n9ooNMqDWtpJhkFwrP99tXrz5lsPjBrnI45vkOPGC
4MNCznC3TTYIqA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:44:07 2025 by rpki-client