Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: zn3qNYnnFqUpWp6IHSqV67R6EdoPqblIrrNIm+98meg=
Subject key identifier: F1:99:95:DE:D0:3B:04:81:8D:13:1F:09:97:91:FD:26:D2:2E:33:94
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 0197CA5EB15009769DE8FD70103D7E90947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 09:01:32 +0000
Manifest this update: Wed 02 Jul 2025 09:01:32 +0000
Manifest next update: Thu 03 Jul 2025 09:01:32 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: fBBMIG/H885Y8EjA2aPQzBRzhJUd9XxktL5/CHcSYMk=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:b1:50:09:76:9d:e8:fd:70:10:3d:7e:90:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jul 2 09:01:32 2025 GMT
Not After : Jul 3 09:01:32 2025 GMT
Subject: CN=f19995ded03b04818d131f099791fd26d22e3394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:27:ac:20:15:64:74:7d:a9:cf:0a:7b:fc:
80:b3:86:b7:5f:01:4b:76:ba:bf:38:03:68:3a:32:
f0:9f:70:c3:6f:6e:d2:a3:b6:20:0b:a6:78:5c:34:
96:17:bc:20:e1:92:e6:ba:16:ba:7a:31:39:a7:e2:
f5:c6:1a:fb:53:b1:72:52:d8:cc:50:ff:30:3f:09:
5f:e4:47:f2:7d:bf:95:16:ce:23:43:bb:f3:88:6d:
6f:4c:ec:04:66:2d:21:a2:ab:94:f8:a7:8c:e8:01:
47:e0:d2:c5:07:ed:33:82:47:af:c8:cf:99:b3:c2:
02:04:a6:db:77:51:5c:6d:8e:32:d1:78:06:12:6c:
d5:fa:8c:25:3a:bd:f3:2e:80:67:b3:b9:69:9e:14:
90:e9:a7:e8:54:7a:36:73:60:dc:70:3a:72:cf:8e:
3c:03:78:e9:e4:80:0d:44:57:85:05:e5:c8:24:e3:
c1:1f:a5:e1:fc:0b:6f:9c:eb:9e:a5:67:1b:5a:da:
a9:eb:dd:e7:9a:94:6b:be:9f:94:e1:fa:83:16:4a:
24:cb:89:e8:a8:22:da:77:d0:7f:fe:94:79:c8:29:
a2:97:a9:d1:2c:31:6d:d6:ca:fd:37:90:cc:13:cf:
eb:46:58:50:00:05:ed:0b:62:63:9a:ef:19:71:5d:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:95:DE:D0:3B:04:81:8D:13:1F:09:97:91:FD:26:D2:2E:33:94
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:2b:85:88:a4:d6:01:ef:47:2a:dd:04:9b:75:44:c1:05:
00:89:54:5f:40:92:2c:21:e8:64:75:ce:62:6c:d3:03:26:97:
6f:6a:47:6b:88:5a:e2:ba:1c:87:18:d3:1f:3e:3e:47:5d:f7:
69:95:38:ee:59:5a:6d:9c:4d:56:73:ec:62:ab:9d:94:3c:4a:
df:28:69:b0:3d:c4:6f:04:b7:1f:ca:4b:54:3a:9c:44:b4:a1:
69:be:ed:3f:ab:d9:fc:18:ec:58:e5:6a:31:97:29:f9:29:74:
e7:c3:72:e8:a5:51:09:f2:b2:7c:44:1d:4e:4a:ba:8f:1c:7d:
22:14:31:ca:cd:ee:89:10:d5:ac:33:67:fe:05:29:1a:c4:4e:
02:98:a1:ac:72:ad:06:90:e3:c5:59:f6:77:90:45:bf:a5:bc:
cc:35:5c:3f:6d:27:81:90:82:cd:28:f8:8b:ba:09:d4:f8:8d:
6e:41:6c:b7:6a:65:39:bb:fa:a1:b6:f5:ab:8c:cc:09:11:4e:
b3:e8:07:53:f5:ff:65:44:5a:f4:41:9e:bc:ab:ea:3c:c6:e9:
93:3b:1c:80:d2:70:cb:e0:dd:64:12:06:c3:48:76:2e:e0:72:
50:6b:a3:2c:2b:1e:c6:78:e1:0f:e0:aa:de:93:c9:2a:92:f8:
d6:88:24:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXrFQCXad6P1wED1+kJR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy
MDg0NTcwHhcNMjUwNzAyMDkwMTMyWhcNMjUwNzAzMDkwMTMyWjAzMTEwLwYDVQQD
EyhmMTk5OTVkZWQwM2IwNDgxOGQxMzFmMDk5NzkxZmQyNmQyMmUzMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUnrCAVZHR9qc8Ke/yAs4a3XwFL
drq/OANoOjLwn3DDb27So7YgC6Z4XDSWF7wg4ZLmuha6ejE5p+L1xhr7U7FyUtjM
UP8wPwlf5Efyfb+VFs4jQ7vziG1vTOwEZi0hoquU+KeM6AFH4NLFB+0zgkevyM+Z
s8ICBKbbd1FcbY4y0XgGEmzV+owlOr3zLoBns7lpnhSQ6afoVHo2c2DccDpyz448
A3jp5IANRFeFBeXIJOPBH6Xh/AtvnOuepWcbWtqp693nmpRrvp+U4fqDFkoky4no
qCLad9B//pR5yCmil6nRLDFt1sr9N5DME8/rRlhQAAXtC2Jjmu8ZcV3CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGZld7QOwSBjRMfCZeR/SbSLjOUMB8GA1UdIwQY
MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORQrhYik
1gHvRyrdBJt1RMEFAIlUX0CSLCHoZHXOYmzTAyaXb2pHa4ha4rochxjTHz4+R133
aZU47llabZxNVnPsYqudlDxK3yhpsD3EbwS3H8pLVDqcRLShab7tP6vZ/BjsWOVq
MZcp+Sl058Ny6KVRCfKyfEQdTkq6jxx9IhQxys3uiRDVrDNn/gUpGsROApihrHKt
BpDjxVn2d5BFv6W8zDVcP20ngZCCzSj4i7oJ1PiNbkFst2plObv6obb1q4zMCRFO
s+gHU/X/ZURa9EGevKvqPMbpkzscgNJwy+DdZBIGw0h2LuByUGujLCsexnjhD+Cq
3pPJKpL41ogkSg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:55:02 2025 by rpki-client