Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: p3P8QzutW2XBkjImiqqx/w/GS3xBK9ui8uMzvU8mTbU=
Subject key identifier: 88:6D:3B:40:93:C8:27:BF:58:46:13:58:15:27:E5:29:B2:46:89:87
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0197B93367D3D1E5377D5AF3756B0FBFF622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 06AE
Signing time: Sun 29 Jun 2025 01:00:43 +0000
Manifest this update: Sun 29 Jun 2025 01:00:43 +0000
Manifest next update: Mon 30 Jun 2025 01:00:43 +0000
Files and hashes: 1: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (hash: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=)
2: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (hash: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=)
3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: t8AfLIMjq78qZOp6JX+xC7JKQyhlr0i5YvLXzSy97v8=)
4: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (hash: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:67:d3:d1:e5:37:7d:5a:f3:75:6b:0f:bf:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Jun 29 01:00:43 2025 GMT
Not After : Jun 30 01:00:43 2025 GMT
Subject: CN=886d3b4093c827bf584613581527e529b2468987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:44:a4:16:d9:88:b9:4a:8c:38:ba:29:a6:
67:55:7b:ce:e8:e2:b2:cd:d2:c7:ac:31:85:7a:68:
7e:a0:d2:5d:4e:fa:45:c8:9f:37:1b:63:49:de:fd:
a3:6e:fc:4c:c8:9b:e4:58:e0:da:c0:f8:97:16:11:
7d:ff:16:2e:df:06:dc:be:e8:db:65:38:ad:85:8f:
e9:3d:19:9a:6e:c2:c9:98:bb:36:4e:72:38:66:11:
ca:be:47:ca:f7:06:60:36:70:da:fe:95:f6:ec:b5:
23:8f:49:c9:4d:8d:a8:ca:98:48:d7:72:2c:0c:7d:
18:72:92:c1:a3:8b:0d:0a:8d:c9:0a:93:22:56:9d:
5d:04:0c:d7:94:d4:12:fa:18:70:1d:b7:45:1e:10:
22:3a:a1:ce:16:2d:0f:dd:15:8e:dc:a7:55:42:9a:
d3:0e:2b:9a:05:03:7a:24:54:96:0e:dd:5d:35:b8:
6e:3e:e7:26:74:cf:9e:b0:12:ae:15:04:61:59:81:
40:2d:ba:6a:77:c8:63:88:64:6b:ed:8e:c4:3a:e7:
9a:b0:23:92:89:18:e0:b0:69:e4:a2:2a:42:64:11:
40:c7:1c:8c:e6:d8:8a:99:cb:e1:ed:f6:a5:65:c0:
d9:68:3b:da:9b:26:b8:d3:bf:54:4d:ad:96:b1:ce:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:3B:40:93:C8:27:BF:58:46:13:58:15:27:E5:29:B2:46:89:87
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:37:32:a8:9a:85:c1:06:f1:ce:76:b8:ac:8c:3c:da:32:
de:86:40:b9:f4:4f:26:30:f5:d4:1f:05:4f:09:e7:a7:6d:1c:
69:d3:f3:32:4b:57:1e:79:13:ce:0c:38:8d:db:b4:97:b4:a5:
df:89:4b:30:91:e8:46:a5:cf:de:ff:d6:48:9e:a6:a2:25:63:
44:dc:3f:cd:fd:11:06:b1:1d:a3:ac:96:4c:41:c6:7a:a0:39:
55:2c:2e:12:90:5a:5e:71:c2:d4:8c:69:ee:46:24:51:ba:af:
20:89:48:87:0e:18:b4:7b:43:5f:4e:db:53:c3:81:fb:cf:a2:
5a:96:af:61:5b:e3:7c:af:da:af:67:33:45:e8:8e:cd:75:d5:
27:8b:1d:ad:5b:3f:41:e5:83:e1:a9:70:7c:de:a8:5e:a0:bf:
05:2d:23:53:5d:06:63:7f:e3:cb:cc:91:6c:21:12:1f:8b:29:
8c:6d:53:f9:3b:c9:67:01:b6:7e:35:cf:48:27:0b:9d:cb:19:
cd:77:72:8b:6e:09:67:0b:e9:19:0b:d1:8d:06:70:bf:ed:e6:
94:13:95:6c:f3:6a:23:58:52:d0:35:e1:4a:8b:c4:de:38:12:
84:b4:d5:16:8d:7d:a5:6a:d4:fb:e1:56:80:1f:df:03:cd:ef:
34:5e:e8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M2fT0eU3fVrzdWsPv/YiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi
ZTg2OGUwHhcNMjUwNjI5MDEwMDQzWhcNMjUwNjMwMDEwMDQzWjAzMTEwLwYDVQQD
Eyg4ODZkM2I0MDkzYzgyN2JmNTg0NjEzNTgxNTI3ZTUyOWIyNDY4OTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HVEpBbZiLlKjDi6KaZnVXvO6OKy
zdLHrDGFemh+oNJdTvpFyJ83G2NJ3v2jbvxMyJvkWODawPiXFhF9/xYu3wbcvujb
ZTithY/pPRmabsLJmLs2TnI4ZhHKvkfK9wZgNnDa/pX27LUjj0nJTY2oyphI13Is
DH0YcpLBo4sNCo3JCpMiVp1dBAzXlNQS+hhwHbdFHhAiOqHOFi0P3RWO3KdVQprT
DiuaBQN6JFSWDt1dNbhuPucmdM+esBKuFQRhWYFALbpqd8hjiGRr7Y7EOueasCOS
iRjgsGnkoipCZBFAxxyM5tiKmcvh7falZcDZaDvamya4079UTa2Wsc6GTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhtO0CTyCe/WEYTWBUn5SmyRomHMB8GA1UdIwQY
MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt
NTNmNTc1MDRlZjM1LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1
LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamQ3Mqia
hcEG8c52uKyMPNoy3oZAufRPJjD11B8FTwnnp20cadPzMktXHnkTzgw4jdu0l7Sl
34lLMJHoRqXP3v/WSJ6moiVjRNw/zf0RBrEdo6yWTEHGeqA5VSwuEpBaXnHC1Ixp
7kYkUbqvIIlIhw4YtHtDX07bU8OB+8+iWpavYVvjfK/ar2czReiOzXXVJ4sdrVs/
QeWD4alwfN6oXqC/BS0jU10GY3/jy8yRbCESH4spjG1T+TvJZwG2fjXPSCcLncsZ
zXdyi24JZwvpGQvRjQZwv+3mlBOVbPNqI1hS0DXhSovE3jgShLTVFo19pWrU++FW
gB/fA83vNF7oVA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:59 2025 by rpki-client