Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: 96V+G0jJlxP/5jkgW8UnbhbGBl/FlstocgPcl9PJJVA=
Subject key identifier: 5D:EF:14:61:4C:93:4B:FB:4C:88:A3:5B:66:5F:28:4D:C2:E1:59:BB
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0198D4DFD5FA354C33B78C99975FA5BA5AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0BBA
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: vij9bnUoJQNx167UCW3DkC71gF1W5SScGJP/YDincso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d5:fa:35:4c:33:b7:8c:99:97:5f:a5:ba:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=5def14614c934bfb4c88a35b665f284dc2e159bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:c6:78:d6:b5:ee:e2:c1:91:49:dd:77:0b:
94:a2:3b:ef:04:06:8b:ef:c7:45:69:0a:d3:e2:59:
d7:a0:62:16:c6:6f:f8:46:4c:14:80:15:78:05:d9:
b5:99:cb:dd:c1:04:57:43:92:c8:f8:23:84:1f:b5:
d4:63:32:d3:24:81:0d:e5:3d:dd:a5:84:df:f7:9f:
dd:6a:e7:da:7a:36:37:c5:67:cf:e8:80:73:44:1d:
97:01:ec:59:ba:32:76:17:93:8d:13:16:46:58:70:
14:ab:4a:81:cd:01:ed:ef:f3:15:f7:55:cd:48:9c:
4f:6a:7d:b9:db:ce:06:5e:94:84:86:d8:d2:ee:af:
41:06:53:7c:27:68:fd:34:6a:21:c1:d9:c3:67:3a:
bb:57:85:90:0e:36:30:48:f8:e1:b3:2e:20:b8:8e:
e3:2c:56:c9:66:c7:ee:4d:fc:62:7d:c1:5d:17:b6:
13:49:35:d4:95:bc:ab:37:bb:73:7a:65:29:b7:2c:
93:f9:4a:8e:5b:70:34:10:47:0a:23:4f:44:2c:30:
f1:a2:43:21:0c:92:5f:d9:e7:75:b6:99:f6:f3:3e:
91:24:ee:82:d2:41:d5:99:be:de:53:d3:1b:cf:aa:
23:78:4b:16:e7:0e:c6:76:4b:d8:52:46:84:01:18:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:14:61:4C:93:4B:FB:4C:88:A3:5B:66:5F:28:4D:C2:E1:59:BB
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:45:ba:30:1a:1b:87:1b:0d:23:24:24:b5:4a:44:1d:cd:47:
08:54:55:8a:3f:48:d7:95:6c:a6:7e:02:a0:b7:4a:ed:b5:be:
50:cf:97:6a:13:4e:c6:f5:c9:d4:82:df:a8:ad:06:de:d8:b0:
6a:6e:6b:c1:62:91:69:b1:1c:74:80:17:c1:dd:dc:bc:58:d6:
af:5d:cd:bb:4c:30:75:0b:6e:5e:1d:7b:0c:56:e9:07:3f:ff:
e2:72:d3:47:ec:63:91:7b:05:84:95:07:4e:2e:92:81:8b:84:
4e:bc:31:59:b4:cf:e2:96:f5:b3:da:35:58:fd:33:fa:b1:ca:
9d:86:b5:a9:a3:e4:0d:6c:b7:48:35:c9:1f:e1:92:94:d3:63:
6c:b2:f5:ee:1d:43:c9:8b:cf:9c:cc:ab:c6:77:86:25:4a:20:
96:04:5c:09:03:0a:8a:a1:19:d9:21:45:71:61:cb:f1:1a:55:
34:2a:3a:47:16:48:fe:29:43:ae:7e:03:d5:f1:93:a3:25:5e:
a6:2f:00:96:de:2b:32:26:12:16:15:4a:eb:72:7f:6a:b8:4a:
18:b8:7a:ff:0a:a1:86:f5:62:87:e0:ea:da:65:05:89:c4:91:
33:59:80:7a:2b:47:bd:b6:81:a7:ff:62:23:09:c8:e0:55:83:
94:51:ba:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39X6NUwzt4yZl1+lulroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz
MDMxZDkwHhcNMjUwODIzMDMwMTM1WhcNMjUwODI0MDMwMTM1WjAzMTEwLwYDVQQD
Eyg1ZGVmMTQ2MTRjOTM0YmZiNGM4OGEzNWI2NjVmMjg0ZGMyZTE1OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzvGeNa17uLBkUnddwuUojvvBAaL
78dFaQrT4lnXoGIWxm/4RkwUgBV4Bdm1mcvdwQRXQ5LI+COEH7XUYzLTJIEN5T3d
pYTf95/daufaejY3xWfP6IBzRB2XAexZujJ2F5ONExZGWHAUq0qBzQHt7/MV91XN
SJxPan25284GXpSEhtjS7q9BBlN8J2j9NGohwdnDZzq7V4WQDjYwSPjhsy4guI7j
LFbJZsfuTfxifcFdF7YTSTXUlbyrN7tzemUptyyT+UqOW3A0EEcKI09ELDDxokMh
DJJf2ed1tpn28z6RJO6C0kHVmb7eU9Mbz6ojeEsW5w7GdkvYUkaEARgHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3vFGFMk0v7TIijW2ZfKE3C4Vm7MB8GA1UdIwQY
MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt
YjZkNGM0ZmMwYzIxLzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx
LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkW6MBob
hxsNIyQktUpEHc1HCFRVij9I15Vspn4CoLdK7bW+UM+XahNOxvXJ1ILfqK0G3tiw
am5rwWKRabEcdIAXwd3cvFjWr13Nu0wwdQtuXh17DFbpBz//4nLTR+xjkXsFhJUH
Ti6SgYuETrwxWbTP4pb1s9o1WP0z+rHKnYa1qaPkDWy3SDXJH+GSlNNjbLL17h1D
yYvPnMyrxneGJUoglgRcCQMKiqEZ2SFFcWHL8RpVNCo6RxZI/ilDrn4D1fGToyVe
pi8Alt4rMiYSFhVK63J/arhKGLh6/wqhhvVih+Dq2mUFicSRM1mAeitHvbaBp/9i
IwnI4FWDlFG66w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client