Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: yIMQMWgOJZdV11VRTgZsARHbHkWb3WmnFrXMnCyXG/A=
Subject key identifier: DC:1B:CD:A6:7C:8A:99:4B:62:74:2C:00:EF:0D:23:F9:1F:D5:B7:0B
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 0198D7732F6043774B239973D196C50EB1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 1450
Signing time: Sat 23 Aug 2025 15:01:46 +0000
Manifest this update: Sat 23 Aug 2025 15:01:46 +0000
Manifest next update: Sun 24 Aug 2025 15:01:46 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: ncV75t+tbmLOWCTiZMKWOZbZEmvWpM/PzV9JpQWam6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:2f:60:43:77:4b:23:99:73:d1:96:c5:0e:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Aug 23 15:01:46 2025 GMT
Not After : Aug 24 15:01:46 2025 GMT
Subject: CN=dc1bcda67c8a994b62742c00ef0d23f91fd5b70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:ec:7a:f3:2a:90:ee:5a:b4:7c:ec:2f:46:
f8:ab:fc:de:29:c6:83:87:ac:f8:7f:e9:92:bc:2b:
7b:2f:8a:e4:5f:38:cb:52:ce:67:e8:09:56:65:e2:
98:fe:2e:f3:ff:70:a2:56:c3:b8:39:fb:dd:07:dd:
80:7e:fa:31:68:f9:46:a1:d8:7d:be:40:6d:39:4c:
32:cd:34:e0:e6:83:86:32:6a:0f:2d:02:e9:b8:c1:
02:ce:6e:a0:01:23:2d:70:cf:eb:c7:d7:f6:4c:1a:
84:7f:e3:9a:66:cb:67:80:49:48:eb:47:c9:d0:6e:
49:a3:16:7b:61:19:76:c6:3a:f7:08:ed:45:41:89:
c4:7e:46:75:d2:fa:1c:0a:65:0d:38:f0:1e:a0:85:
6b:f9:29:69:c9:79:ef:d8:42:3c:1e:18:61:98:1c:
d9:49:8f:fa:b1:69:19:b3:7d:6a:58:f7:7c:6d:0c:
b8:7a:16:ec:38:43:1a:92:dc:d0:10:34:cf:97:2e:
1f:17:0a:bc:80:69:09:bb:99:14:81:a2:d5:53:12:
6f:a6:d7:5f:88:14:34:1c:fb:59:6e:74:f1:68:05:
f5:ab:bf:03:d7:a2:ac:0d:66:0e:24:f6:51:c3:97:
50:48:90:57:85:ca:fa:b5:c2:e5:1e:bd:b9:e4:9c:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:CD:A6:7C:8A:99:4B:62:74:2C:00:EF:0D:23:F9:1F:D5:B7:0B
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:68:ce:6b:69:2d:24:6d:c9:c2:67:50:5d:ab:66:51:f5:
f1:a9:60:58:8e:34:38:d5:24:72:2e:13:61:d6:f8:e9:06:28:
9f:b0:88:cd:e7:7a:d8:e6:61:43:cf:c2:20:39:e0:2c:76:2d:
0e:f9:4c:3f:05:ff:93:60:ca:d5:c3:e1:2e:ef:b0:72:99:6f:
27:04:69:ad:d3:bb:c1:de:d8:d1:05:26:11:45:c2:d0:e6:d2:
01:0f:27:ca:86:9c:79:4c:0a:27:b0:21:70:9d:fa:61:db:62:
cf:02:ab:58:ba:c6:82:0d:eb:b9:f9:32:19:d9:33:79:b2:e0:
93:77:cd:f3:bc:51:0d:6c:21:f8:1a:b4:0c:f4:cb:56:91:36:
a9:a3:b0:1a:a5:ee:95:16:10:1f:cf:9a:10:9f:f4:51:0d:b5:
5b:bb:16:e3:7d:22:f9:df:95:83:50:d7:9d:db:60:bc:70:64:
23:c4:c3:3d:7e:98:92:f8:3e:e9:93:4b:2e:82:0b:71:3e:66:
bc:dc:65:fb:d1:1f:fe:ad:60:70:d8:62:3e:70:8e:d0:d7:22:
6f:42:05:07:6f:ca:25:23:ba:5e:f0:3b:c8:f1:3b:17:20:7d:
da:b3:f5:bb:75:ed:1e:d7:c8:91:40:3f:5a:0b:c8:3c:6e:ff:
fa:4f:42:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXcy9gQ3dLI5lz0ZbFDrHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNzkyZGU3MGYzM2I4Mjg4MjU0MmJlZjIzYjE4ZGE5NzUz
OGNhMDQwHhcNMjUwODIzMTUwMTQ2WhcNMjUwODI0MTUwMTQ2WjAzMTEwLwYDVQQD
EyhkYzFiY2RhNjdjOGE5OTRiNjI3NDJjMDBlZjBkMjNmOTFmZDViNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52jsevMqkO5atHzsL0b4q/zeKcaD
h6z4f+mSvCt7L4rkXzjLUs5n6AlWZeKY/i7z/3CiVsO4OfvdB92AfvoxaPlGodh9
vkBtOUwyzTTg5oOGMmoPLQLpuMECzm6gASMtcM/rx9f2TBqEf+OaZstngElI60fJ
0G5JoxZ7YRl2xjr3CO1FQYnEfkZ10vocCmUNOPAeoIVr+SlpyXnv2EI8HhhhmBzZ
SY/6sWkZs31qWPd8bQy4ehbsOEMaktzQEDTPly4fFwq8gGkJu5kUgaLVUxJvptdf
iBQ0HPtZbnTxaAX1q78D16KsDWYOJPZRw5dQSJBXhcr6tcLlHr255JyvQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwbzaZ8iplLYnQsAO8NI/kf1bcLMB8GA1UdIwQY
MBaAFJt5LecPM7goglQr7yOxjal1OMoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgt
MDcxN2RhMDUzNTg1LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgtMDcxN2RhMDUzNTg1
LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEZozmtp
LSRtycJnUF2rZlH18algWI40ONUkci4TYdb46QYon7CIzed62OZhQ8/CIDngLHYt
DvlMPwX/k2DK1cPhLu+wcplvJwRprdO7wd7Y0QUmEUXC0ObSAQ8nyoaceUwKJ7Ah
cJ36YdtizwKrWLrGgg3rufkyGdkzebLgk3fN87xRDWwh+Bq0DPTLVpE2qaOwGqXu
lRYQH8+aEJ/0UQ21W7sW430i+d+Vg1DXndtgvHBkI8TDPX6Ykvg+6ZNLLoILcT5m
vNxl+9Ef/q1gcNhiPnCO0Ncib0IFB2/KJSO6XvA7yPE7FyB92rP1u3XtHtfIkUA/
WgvIPG7/+k9Cqg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:49 2025 by rpki-client