Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File: MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier: XeqabhG0O/yxu1mK/OdaJahoY6HXwrWeG2pR3b04VXY=
Subject key identifier: 96:1A:C1:96:2F:E8:CE:94:29:2C:A9:79:3F:97:AA:49:3A:BE:E5:EB
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 0197CA27379B981BD48BB95299D5B8EE3845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number: 10D4
Signing time: Wed 02 Jul 2025 08:00:57 +0000
Manifest this update: Wed 02 Jul 2025 08:00:57 +0000
Manifest next update: Thu 03 Jul 2025 08:00:57 +0000
Files and hashes: 1: DfvtpBc-nvqHEzH62KyAmVwM6wc.roa (hash: vQtE9Py9eSZNLr1/cVugAFwNdN9RtLbpzhnSE7YveL8=)
2: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: S/7XTFNcYYQ/RPM+WGAYbpACIKkwy7EdHKxiI2OVPUg=)
3: pckV3Ny46TaKVnOLD2SsKXbY_nE.roa (hash: wXkkeRI/oAjuXh/YFmny+LydKMS24wNW7vGV6jYr8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:37:9b:98:1b:d4:8b:b9:52:99:d5:b8:ee:38:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: Jul 2 08:00:57 2025 GMT
Not After : Jul 3 08:00:57 2025 GMT
Subject: CN=961ac1962fe8ce94292ca9793f97aa493abee5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:36:8c:fb:43:01:25:fc:c2:c3:36:dc:15:
0c:09:23:30:c4:e8:27:21:f2:6b:f7:a6:cb:5c:0e:
00:3d:7a:1e:95:4f:62:b7:84:ae:ec:91:1e:39:b9:
91:64:cf:60:0c:a2:b4:50:ef:a1:e1:86:bf:33:33:
1c:a3:88:33:66:6a:61:32:ca:4e:06:ec:3e:fe:b2:
3c:87:f4:e2:d2:f8:46:47:0d:0d:7e:5b:fd:f5:2a:
1e:e9:0b:7a:58:f3:d3:46:62:28:5a:3d:06:6f:de:
87:64:71:12:7c:1c:fc:c0:a5:08:5a:92:d0:68:84:
d9:c8:c8:e7:f2:0e:68:6e:42:80:31:eb:9f:71:74:
61:c9:89:c4:9b:86:00:5b:84:a3:c1:c8:e8:78:9a:
dd:33:4b:2f:b9:65:00:d5:b7:a4:0f:f2:f1:74:49:
e9:11:3f:b6:6c:72:7d:ea:43:63:cc:18:62:91:fc:
7a:47:0a:ca:2a:6a:78:b7:a7:f1:9d:38:f0:48:27:
ca:ba:6b:2f:65:1e:5c:89:75:a0:55:7f:4e:af:d1:
32:b0:23:6c:b9:dc:c0:6c:f5:1a:b5:d7:bc:ca:3c:
9c:88:68:94:44:9e:3b:dc:63:ec:7f:83:be:ac:8a:
ed:42:08:f5:1b:ed:3e:49:f0:06:f6:b7:4d:a5:98:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:C1:96:2F:E8:CE:94:29:2C:A9:79:3F:97:AA:49:3A:BE:E5:EB
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9d:b7:75:1c:88:9b:b6:db:66:06:8a:de:08:2f:13:1e:cb:
2e:35:79:9b:3c:e5:a5:46:6d:f7:aa:00:02:04:75:0e:2e:d7:
20:93:26:ae:64:7e:26:c5:b3:87:0d:aa:6e:81:e8:49:00:ac:
7b:6d:e4:e6:a5:91:ce:b5:8b:a7:fb:15:a2:20:df:44:a3:a4:
09:e9:e6:bc:0b:56:b4:47:31:60:e2:88:38:92:e7:7e:e4:77:
0f:62:ed:1b:80:9b:a0:16:60:45:94:11:80:e6:bd:6e:64:8d:
28:18:19:e7:b8:cf:8e:75:2f:85:a8:b8:ea:8b:d8:9d:db:b6:
20:df:0b:d7:5c:71:ab:0a:eb:9a:e9:85:4d:0a:6e:66:b4:18:
1a:47:e6:3c:22:b0:b1:0f:7b:9a:d4:7e:25:e9:0d:81:b1:ad:
8e:37:f7:79:a0:5d:e7:00:47:12:a9:2d:88:99:73:63:9c:09:
11:ae:ad:43:42:6d:a0:df:38:3d:47:e5:4a:d1:9a:e0:24:27:
09:2a:ba:de:59:64:8e:13:4b:aa:6d:51:d7:6d:e5:af:23:60:
09:3e:41:17:2b:c7:b1:62:a7:fe:c7:d7:da:91:40:3d:a9:6a:
f4:cb:bf:a5:99:5d:34:0a:30:79:58:0e:d5:d8:7f:a5:50:be:
db:45:90:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKJzebmBvUi7lSmdW47jhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODhmYWUzZWJiYjNkNzRmZWVkZGNmNTA3ZjgzZTY3ZGI4
ODUwYTIwHhcNMjUwNzAyMDgwMDU3WhcNMjUwNzAzMDgwMDU3WjAzMTEwLwYDVQQD
Eyg5NjFhYzE5NjJmZThjZTk0MjkyY2E5NzkzZjk3YWE0OTNhYmVlNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCg2jPtDASX8wsM23BUMCSMwxOgn
IfJr96bLXA4APXoelU9it4Su7JEeObmRZM9gDKK0UO+h4Ya/MzMco4gzZmphMspO
Buw+/rI8h/Ti0vhGRw0Nflv99Soe6Qt6WPPTRmIoWj0Gb96HZHESfBz8wKUIWpLQ
aITZyMjn8g5obkKAMeufcXRhyYnEm4YAW4SjwcjoeJrdM0svuWUA1bekD/LxdEnp
ET+2bHJ96kNjzBhikfx6RwrKKmp4t6fxnTjwSCfKumsvZR5ciXWgVX9Or9EysCNs
udzAbPUatde8yjyciGiURJ473GPsf4O+rIrtQgj1G+0+SfAG9rdNpZghzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYawZYv6M6UKSypeT+Xqkk6vuXrMB8GA1UdIwQY
MBaAFDGI+uPruz10/u3c9Qf4PmfbiFCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmIt
Yjg1M2RmZjg3NjVjLzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmItYjg1M2RmZjg3NjVj
LzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ23dRyI
m7bbZgaK3ggvEx7LLjV5mzzlpUZt96oAAgR1Di7XIJMmrmR+JsWzhw2qboHoSQCs
e23k5qWRzrWLp/sVoiDfRKOkCenmvAtWtEcxYOKIOJLnfuR3D2LtG4CboBZgRZQR
gOa9bmSNKBgZ57jPjnUvhai46ovYndu2IN8L11xxqwrrmumFTQpuZrQYGkfmPCKw
sQ97mtR+JekNgbGtjjf3eaBd5wBHEqktiJlzY5wJEa6tQ0JtoN84PUflStGa4CQn
CSq63llkjhNLqm1R123lryNgCT5BFyvHsWKn/sfX2pFAPalq9Mu/pZldNAoweVgO
1dh/pVC+20WQnA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:53:26 2025 by rpki-client