Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: xRiccRWIisAsHwJKSObzTWKP8+VRhnjKK1Zz1JVcaU4=
Subject key identifier: 88:2C:E1:52:6E:47:6B:E3:2F:DD:F6:84:EC:1B:1E:4A:AC:0F:5A:FA
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0197B70EC34BC332C5DCB7FE27602CA72D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: cbKIkom4LEETg+KVnb8WSHRdqC7zZRdYQUWXW2RV/4M=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c3:4b:c3:32:c5:dc:b7:fe:27:60:2c:a7:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=882ce1526e476be32fddf684ec1b1e4aac0f5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:06:22:a2:c0:71:ce:90:16:ff:d7:19:0a:
30:9e:38:12:69:eb:c9:db:b9:ab:a6:c6:52:dd:ae:
cf:00:c3:15:62:14:35:ac:19:7e:c1:9d:95:3f:4e:
5d:61:41:73:31:b6:f9:c5:ae:82:f0:e8:fb:0e:ab:
f9:54:1a:4a:a0:37:6b:df:56:22:4a:d2:0e:84:8b:
f7:99:17:c5:6c:6f:40:aa:af:88:94:0d:07:b6:ad:
79:1d:8f:c4:a6:6a:61:e4:a8:26:e0:ef:ee:d7:11:
c4:05:3d:87:f0:aa:db:e6:df:1a:af:57:02:6f:9a:
9f:26:11:dc:e9:77:f1:c8:99:74:18:b2:e6:28:95:
81:d4:5a:94:50:ba:bc:e1:d9:01:79:17:ef:2b:3b:
0d:29:bd:cd:80:5c:85:48:2c:e6:08:7d:05:08:f4:
98:ef:9b:f7:9a:66:51:b0:40:ad:e0:51:f3:c7:82:
0b:6f:7a:87:55:0e:60:85:2d:b1:96:e0:d8:00:ae:
3b:13:e9:42:0a:91:09:0d:62:01:99:b9:aa:83:18:
e9:39:7f:18:0a:a9:69:fb:ed:e3:20:8e:e8:a3:e6:
dd:67:96:df:cf:c0:07:2d:f4:42:59:60:73:ae:d7:
ed:d8:04:0e:bb:01:da:1a:58:14:1a:bf:cc:10:9d:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:E1:52:6E:47:6B:E3:2F:DD:F6:84:EC:1B:1E:4A:AC:0F:5A:FA
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ce:bc:7b:a5:8b:82:fa:a0:06:7b:89:62:aa:09:3e:be:18:
3b:68:3c:85:a4:08:88:26:69:9c:7e:b0:11:5e:2f:c7:3e:22:
a2:20:50:46:76:16:fc:04:a1:3d:32:22:a8:ac:8b:ae:72:74:
70:e9:12:ec:f6:b5:c2:5a:bd:f9:03:87:fc:86:ff:a2:ec:f0:
6a:1f:5b:09:27:f4:a8:c8:93:c0:8e:e4:e0:e5:5b:f8:0e:6c:
c7:42:ed:14:d1:85:9e:ec:c4:5b:96:56:cf:b6:bc:c4:22:d8:
95:27:6f:3f:c3:0c:14:e7:12:b9:09:46:6b:42:12:fb:5d:16:
8e:ea:e6:40:ee:84:ff:2b:32:b9:21:26:64:28:40:b4:d6:18:
52:b6:f4:bd:fc:49:56:8a:e2:79:a2:e6:bb:b8:be:cf:1b:c1:
43:e9:2f:1e:c2:2a:ae:8d:2a:8d:40:0d:5e:21:1c:d4:72:a6:
71:53:dd:e8:35:0e:0c:e0:83:c4:91:2d:d1:30:9a:5f:ee:82:
b6:c9:81:d0:55:ab:ef:07:3d:28:65:cb:1f:f5:79:a8:0f:44:
ad:f6:6e:cb:37:10:4c:06:b2:ad:44:4b:28:89:44:b1:b3:70:
e6:f1:6b:53:34:23:c2:c8:1a:e6:61:ea:7d:6a:67:4b:97:40:
20:ae:26:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsNLwzLF3Lf+J2Aspy0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm
NDRmYmEwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
Eyg4ODJjZTE1MjZlNDc2YmUzMmZkZGY2ODRlYzFiMWU0YWFjMGY1YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumIGIqLAcc6QFv/XGQownjgSaevJ
27mrpsZS3a7PAMMVYhQ1rBl+wZ2VP05dYUFzMbb5xa6C8Oj7Dqv5VBpKoDdr31Yi
StIOhIv3mRfFbG9Aqq+IlA0Htq15HY/Epmph5Kgm4O/u1xHEBT2H8Krb5t8ar1cC
b5qfJhHc6XfxyJl0GLLmKJWB1FqUULq84dkBeRfvKzsNKb3NgFyFSCzmCH0FCPSY
75v3mmZRsECt4FHzx4ILb3qHVQ5ghS2xluDYAK47E+lCCpEJDWIBmbmqgxjpOX8Y
Cqlp++3jII7oo+bdZ5bfz8AHLfRCWWBzrtft2AQOuwHaGlgUGr/MEJ0EiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgs4VJuR2vjL932hOwbHkqsD1r6MB8GA1UdIwQY
MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt
YWVhYzE2MjI3YzI1LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1
LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAds68e6WL
gvqgBnuJYqoJPr4YO2g8haQIiCZpnH6wEV4vxz4ioiBQRnYW/AShPTIiqKyLrnJ0
cOkS7Pa1wlq9+QOH/Ib/ouzwah9bCSf0qMiTwI7k4OVb+A5sx0LtFNGFnuzEW5ZW
z7a8xCLYlSdvP8MMFOcSuQlGa0IS+10WjurmQO6E/ysyuSEmZChAtNYYUrb0vfxJ
VorieaLmu7i+zxvBQ+kvHsIqro0qjUANXiEc1HKmcVPd6DUODOCDxJEt0TCaX+6C
tsmB0FWr7wc9KGXLH/V5qA9ErfZuyzcQTAayrURLKIlEsbNw5vFrUzQjwsga5mHq
fWpnS5dAIK4m3A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:44 2025 by rpki-client