Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: Tp+mBYNr7JnwzZHoBbMjHNyRb6bRU/kfamfhfEfW7cY=
Subject key identifier: 33:6E:99:77:0F:5C:CD:83:30:9D:8C:03:B2:64:F9:8D:3B:7B:5B:84
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0197C7262FE3D865D32756F7494C5CF58788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 13B1
Signing time: Tue 01 Jul 2025 18:00:57 +0000
Manifest this update: Tue 01 Jul 2025 18:00:57 +0000
Manifest next update: Wed 02 Jul 2025 18:00:57 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: HHQySsc2sVncpl_R112Rp7UBme8.roa (hash: o5Y2R7hIF0WuEuOP3GMyoZ2q0qHpF5bawNz2lBwugJ8=)
4: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
5: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
6: ZBchq6XY20TTbsyHdd1bA4NXQDI.roa (hash: cXsbXY9mXAQImf4zNq8oJbYuL59z2XDzDCo4Q8qeQoc=)
7: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: 5XJuMluNlzxBbkXCkpkNBO1gN2xpJKz7GyQ335hiQU8=)
8: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:2f:e3:d8:65:d3:27:56:f7:49:4c:5c:f5:87:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jul 1 18:00:57 2025 GMT
Not After : Jul 2 18:00:57 2025 GMT
Subject: CN=336e99770f5ccd83309d8c03b264f98d3b7b5b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:04:aa:a5:c2:f2:06:92:15:53:9d:fe:09:
11:6c:c8:12:b0:c7:d7:29:4b:2d:9a:db:08:42:63:
97:83:1f:21:f5:51:d1:1e:c7:a5:a1:6b:2c:7e:11:
b5:d5:9a:63:f3:ed:04:4a:3f:a0:8e:b6:9c:e1:c6:
a2:2d:3e:d4:b9:70:b1:63:0b:6a:6c:03:d4:e8:78:
ad:a3:66:8b:75:9a:ae:3e:af:da:28:ea:ad:a0:1f:
5a:0e:45:26:96:95:2f:47:8a:71:b4:7e:f2:82:23:
fa:7c:4f:1c:e8:2a:e7:33:7b:f1:b2:93:a6:86:62:
45:76:e0:63:b1:0c:5d:c4:4f:2b:db:cc:5d:96:c2:
14:65:13:03:ef:ff:ad:82:38:87:75:40:46:61:e0:
bd:61:0f:dd:2d:6e:cc:25:cb:c5:8f:6e:6e:57:16:
70:55:25:9f:3c:88:44:18:9a:eb:5b:69:d8:16:45:
65:ac:66:21:5b:22:6a:9f:69:0e:a6:f6:43:33:b7:
75:5e:8c:90:cb:d7:59:37:b9:78:fb:aa:e7:e5:16:
6b:02:5a:4a:3e:e7:b5:5c:43:d5:b1:0e:b2:bb:ea:
de:54:2f:0a:7e:4a:0b:f7:54:00:cf:21:fc:3d:64:
02:33:3e:78:61:26:98:15:42:d7:51:6f:1f:6e:d3:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:99:77:0F:5C:CD:83:30:9D:8C:03:B2:64:F9:8D:3B:7B:5B:84
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:da:5a:e6:01:2a:f3:92:dd:5b:67:2a:74:7b:5d:92:01:76:
e0:f1:a1:e6:ba:49:f8:46:e4:76:02:1e:74:70:f3:bd:59:cb:
b1:86:23:5a:53:e2:07:06:a5:0d:e5:ef:44:94:53:5f:2c:71:
b5:14:12:ae:d4:c7:f4:15:04:ab:c8:a9:45:76:79:b6:63:d2:
ad:c2:64:9d:8e:a5:6f:c7:46:de:f6:c4:61:79:70:f6:0c:80:
54:0d:c1:eb:de:03:45:b5:79:86:37:49:ab:07:1b:66:b4:89:
bb:a6:6e:b3:c7:7e:c4:b1:4f:2a:ef:6e:55:3e:96:b0:83:ce:
d6:f2:73:d2:1c:10:59:e7:e5:44:9d:b2:23:1e:66:b5:94:b0:
31:30:01:59:f3:b7:db:e7:72:e2:c9:77:95:6d:ce:06:12:97:
67:ef:ec:62:b5:30:20:72:26:bf:00:d7:04:43:ba:6c:d6:5c:
e8:4a:64:db:4b:2c:b0:03:bf:c3:f8:48:48:7a:73:62:e9:d1:
a9:56:f6:88:b9:5a:96:c3:47:79:76:a1:63:07:ba:a5:08:33:
e8:7c:0b:bc:48:44:e1:21:30:67:f0:a9:53:82:2a:91:44:07:
36:6f:63:b5:48:34:0b:c7:82:b0:be:74:ca:4e:79:a2:82:ac:
80:f0:5c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHJi/j2GXTJ1b3SUxc9YeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjUwNzAxMTgwMDU3WhcNMjUwNzAyMTgwMDU3WjAzMTEwLwYDVQQD
EygzMzZlOTk3NzBmNWNjZDgzMzA5ZDhjMDNiMjY0Zjk4ZDNiN2I1Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nkEqqXC8gaSFVOd/gkRbMgSsMfX
KUstmtsIQmOXgx8h9VHRHseloWssfhG11Zpj8+0ESj+gjrac4caiLT7UuXCxYwtq
bAPU6Hito2aLdZquPq/aKOqtoB9aDkUmlpUvR4pxtH7ygiP6fE8c6CrnM3vxspOm
hmJFduBjsQxdxE8r28xdlsIUZRMD7/+tgjiHdUBGYeC9YQ/dLW7MJcvFj25uVxZw
VSWfPIhEGJrrW2nYFkVlrGYhWyJqn2kOpvZDM7d1XoyQy9dZN7l4+6rn5RZrAlpK
Pue1XEPVsQ6yu+reVC8KfkoL91QAzyH8PWQCMz54YSaYFULXUW8fbtNrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNumXcPXM2DMJ2MA7Jk+Y07e1uEMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdpa5gEq
85LdW2cqdHtdkgF24PGh5rpJ+EbkdgIedHDzvVnLsYYjWlPiBwalDeXvRJRTXyxx
tRQSrtTH9BUEq8ipRXZ5tmPSrcJknY6lb8dG3vbEYXlw9gyAVA3B694DRbV5hjdJ
qwcbZrSJu6Zus8d+xLFPKu9uVT6WsIPO1vJz0hwQWeflRJ2yIx5mtZSwMTABWfO3
2+dy4sl3lW3OBhKXZ+/sYrUwIHImvwDXBEO6bNZc6Epk20sssAO/w/hISHpzYunR
qVb2iLlalsNHeXahYwe6pQgz6HwLvEhE4SEwZ/CpU4IqkUQHNm9jtUg0C8eCsL50
yk55ooKsgPBcJQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:45:28 2025 by rpki-client