Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier: 7ZuDgrYV6K1/rC2BTK+v4BLFkXY1jwqiv0YAsUIJ9UM=
Subject key identifier: E6:E3:4E:14:AA:71:12:F4:CF:02:70:E8:31:C0:59:65:C0:84:29:75
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 0198D4739B8907486D199BEE68D9A96E1A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number: 0F5F
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: 64ndJXu6I+n6BRVJ8xZ4z9Sy5TzSIMbYetwFnrd1Hbs=)
2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9b:89:07:48:6d:19:9b:ee:68:d9:a9:6e:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=e6e34e14aa7112f4cf0270e831c05965c0842975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:8e:3e:d1:98:42:ab:ec:67:cd:db:cd:c0:
14:d8:0e:1b:2e:a8:08:a5:3f:2a:35:af:c1:82:c3:
d0:94:e4:ad:12:ab:46:22:53:a5:8c:45:be:1c:1a:
d3:2c:03:38:89:5e:89:af:3b:d4:04:a4:92:d5:24:
c3:ae:b9:73:9a:69:5e:e6:a5:f0:0e:45:c7:b3:6b:
bc:18:f6:af:4f:07:da:70:28:da:16:97:af:90:89:
0a:27:1a:c3:2a:39:47:1a:fd:af:2d:33:f5:52:75:
95:bb:8c:09:e5:74:cc:34:6f:2c:db:a2:cb:b8:12:
09:23:fe:c2:98:5e:02:21:99:99:08:10:30:5d:77:
bb:0b:24:87:22:a3:9a:88:b8:89:e1:4c:5d:34:61:
8e:d4:7e:47:83:3d:6a:b5:27:b7:f3:e0:4b:4b:33:
99:6a:6a:16:49:ee:41:21:b1:49:a6:0a:ea:30:77:
86:b0:76:85:b5:72:aa:ec:5e:32:f9:a1:7b:8d:98:
ff:7e:37:21:85:08:5d:0a:d9:52:36:28:56:c5:2c:
43:22:1b:63:e2:5c:b9:30:c2:ad:57:bd:37:7b:8f:
b0:e4:b0:20:0d:03:14:b6:a0:4e:2d:c3:7a:6a:6b:
44:e0:ac:f6:0b:03:56:81:70:07:92:62:74:37:8d:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:4E:14:AA:71:12:F4:CF:02:70:E8:31:C0:59:65:C0:84:29:75
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c0:7c:92:50:a2:61:eb:46:18:08:2f:19:9d:93:05:4c:94:
d1:80:3a:33:62:f5:25:5a:25:6e:55:bf:3a:70:ab:1c:af:36:
06:3e:b1:3c:d2:8d:cd:59:ce:bc:95:6b:9e:6c:4e:12:5c:17:
30:54:4e:bd:71:b0:4b:92:84:c1:1a:af:fa:90:bd:63:b5:5d:
d0:fb:3c:80:d0:29:9f:18:b9:6f:08:ba:68:83:58:b0:71:25:
88:7b:7b:b1:90:a8:25:f8:44:4e:d0:5d:3e:0b:5a:44:0a:74:
9b:e4:dd:7e:5d:a1:71:17:36:f4:3e:52:0c:88:6a:ff:19:84:
b7:7e:c6:5a:fe:d4:42:b5:4c:9f:b2:32:9b:5b:61:91:17:ad:
c4:20:b8:1b:71:1f:bc:66:ce:38:99:62:4b:f1:21:3a:11:29:
3e:fa:b5:90:be:86:90:c6:91:1a:5c:07:6f:ac:3a:ee:a9:b0:
ff:d2:a1:af:4d:75:0d:bf:8b:86:8e:20:d7:97:29:cf:f0:e7:
4c:92:67:95:c5:59:4e:6c:d2:49:5f:1e:9a:fa:3d:fe:d7:9e:
b1:8d:e1:0f:a8:e2:d1:ca:67:00:62:b5:f8:1e:97:0b:90:3f:
67:a6:0c:f1:02:27:65:19:ba:59:c4:3e:e9:04:7d:49:ba:3f:
9c:b8:c8:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc5uJB0htGZvuaNmpbhpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTFhOWVjMGFhOTFiOTMyYWMzYzM1ODZjZmNhY2YwY2Ey
OWY1ODAwHhcNMjUwODIzMDEwMzIyWhcNMjUwODI0MDEwMzIyWjAzMTEwLwYDVQQD
EyhlNmUzNGUxNGFhNzExMmY0Y2YwMjcwZTgzMWMwNTk2NWMwODQyOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzyOPtGYQqvsZ83bzcAU2A4bLqgI
pT8qNa/BgsPQlOStEqtGIlOljEW+HBrTLAM4iV6JrzvUBKSS1STDrrlzmmle5qXw
DkXHs2u8GPavTwfacCjaFpevkIkKJxrDKjlHGv2vLTP1UnWVu4wJ5XTMNG8s26LL
uBIJI/7CmF4CIZmZCBAwXXe7CySHIqOaiLiJ4UxdNGGO1H5Hgz1qtSe38+BLSzOZ
amoWSe5BIbFJpgrqMHeGsHaFtXKq7F4y+aF7jZj/fjchhQhdCtlSNihWxSxDIhtj
4ly5MMKtV703e4+w5LAgDQMUtqBOLcN6amtE4Kz2CwNWgXAHkmJ0N42vwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObjThSqcRL0zwJw6DHAWWXAhCl1MB8GA1UdIwQY
MBaAFDNRqewKqRuTKsPDWGz8rPDKKfWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgt
NjY4OWY4NzJmYzg3LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgtNjY4OWY4NzJmYzg3
LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcB8klCi
YetGGAgvGZ2TBUyU0YA6M2L1JVolblW/OnCrHK82Bj6xPNKNzVnOvJVrnmxOElwX
MFROvXGwS5KEwRqv+pC9Y7Vd0Ps8gNApnxi5bwi6aINYsHEliHt7sZCoJfhETtBd
PgtaRAp0m+Tdfl2hcRc29D5SDIhq/xmEt37GWv7UQrVMn7Iym1thkRetxCC4G3Ef
vGbOOJliS/EhOhEpPvq1kL6GkMaRGlwHb6w67qmw/9Khr011Db+Lho4g15cpz/Dn
TJJnlcVZTmzSSV8emvo9/teesY3hD6ji0cpnAGK1+B6XC5A/Z6YM8QInZRm6WcQ+
6QR9Sbo/nLjI2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:11 2025 by rpki-client