Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: WbS5tY2P1a40ed0SxAUow+A6p93mkaxu1GRwT/DlLmY=
Subject key identifier: EE:A0:E3:C2:04:5E:6E:53:DA:2A:B8:A1:7D:30:27:ED:AD:E9:A1:FC
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 0197B7B37BED8ED9EB21FA51DFDB801EB4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: uKK3/kWk1VAaKFE8F/ommbZNR3qWFpXenyVPq5Mppz4=)
2: v9geoE7KmWCRnCztGaTkN5bSNF0.roa (hash: yJ1Hvyh5t82gNQ9PRDa/lCyqTlzjssbfVD5EEeI11lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7b:ed:8e:d9:eb:21:fa:51:df:db:80:1e:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=eea0e3c2045e6e53da2ab8a17d3027edade9a1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:2c:76:3b:7c:13:3c:da:5a:42:a7:98:d3:
2c:c2:81:0d:5e:1b:20:26:e7:24:04:2c:24:0e:c8:
5d:19:da:fc:a9:fa:bd:5d:e5:45:79:20:08:34:c3:
94:b9:e5:8d:2b:81:96:f7:d4:f5:46:21:3b:74:83:
dc:a4:29:63:d2:0f:13:7a:af:be:3b:d8:4a:9e:99:
26:e0:f4:4d:d8:f7:b9:53:2a:f9:ad:b7:59:50:02:
9b:a4:c4:ab:8d:9d:18:ec:fa:66:40:b8:ae:55:c9:
e6:6f:6c:d2:6f:1b:4a:fb:81:a5:53:1e:dc:4f:b8:
d0:f6:51:f6:6b:59:ff:df:66:21:84:8f:93:f5:e7:
55:6c:15:36:46:3f:61:5e:35:ce:d8:c4:68:0d:10:
cd:15:20:c8:ae:2c:17:06:b5:5b:8d:a9:04:ad:e8:
49:0e:c6:38:cb:0c:c2:2c:0c:cc:76:0d:11:a0:f9:
0a:b6:6d:c3:ef:c5:10:67:6e:30:76:04:42:ca:26:
b6:10:46:4f:6a:27:6a:8a:c2:b1:59:4f:84:47:a6:
9e:87:87:a4:21:97:75:55:04:50:db:e0:d5:20:b3:
39:c6:f7:0f:da:0e:6f:75:b0:1a:b8:49:42:52:50:
b2:24:9c:e5:e4:29:c7:73:cd:bb:6a:61:a1:fb:a3:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:E3:C2:04:5E:6E:53:DA:2A:B8:A1:7D:30:27:ED:AD:E9:A1:FC
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:58:93:92:e8:b3:25:85:45:e2:2c:e9:77:fa:f0:2e:ce:
19:82:25:ad:57:76:52:21:cf:e3:f6:d8:bd:6b:36:a1:26:26:
17:ed:bd:e2:ff:2e:9a:a9:a6:fb:2c:a4:ac:5c:aa:56:40:cb:
8d:c6:ce:2e:fc:17:28:bf:19:62:73:64:55:4b:77:a7:81:f5:
3a:01:5c:d0:2d:7d:7d:47:a1:41:43:68:f1:be:42:54:4e:d0:
c2:da:e8:27:72:b9:13:94:51:63:af:54:8f:74:70:2c:33:29:
f5:e6:7f:84:1a:77:f4:20:86:6f:3d:8e:ef:a7:a9:79:16:6e:
ad:0c:c6:0d:cf:84:81:65:bb:5d:2c:3c:c6:ca:a3:9a:41:68:
04:71:d0:4f:d6:e2:ee:8f:70:50:01:57:fc:b0:f5:86:1a:57:
06:09:e1:af:db:0e:aa:cc:33:51:cf:f5:5a:cc:bf:02:94:bc:
39:78:4c:3c:af:74:f3:01:b4:a0:a7:2a:ef:48:a8:4a:3e:b2:
0f:00:8d:3e:0a:b0:ce:38:b3:02:5c:b7:33:5a:6f:a4:41:c9:
88:6c:b1:2e:96:ab:36:d1:bf:cd:bb:03:d2:f2:1d:43:86:6b:
e8:bb:d5:a3:69:a1:7a:4b:ac:49:2b:ff:7c:0a:e8:a9:6a:96:
d5:4e:55:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3vtjtnrIfpR39uAHrTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjUwNjI4MTgwMTIyWhcNMjUwNjI5MTgwMTIyWjAzMTEwLwYDVQQD
EyhlZWEwZTNjMjA0NWU2ZTUzZGEyYWI4YTE3ZDMwMjdlZGFkZTlhMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ0sdjt8EzzaWkKnmNMswoENXhsg
JuckBCwkDshdGdr8qfq9XeVFeSAINMOUueWNK4GW99T1RiE7dIPcpClj0g8Teq++
O9hKnpkm4PRN2Pe5Uyr5rbdZUAKbpMSrjZ0Y7PpmQLiuVcnmb2zSbxtK+4GlUx7c
T7jQ9lH2a1n/32YhhI+T9edVbBU2Rj9hXjXO2MRoDRDNFSDIriwXBrVbjakErehJ
DsY4ywzCLAzMdg0RoPkKtm3D78UQZ24wdgRCyia2EEZPaidqisKxWU+ER6aeh4ek
IZd1VQRQ2+DVILM5xvcP2g5vdbAauElCUlCyJJzl5CnHc827amGh+6OORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6g48IEXm5T2iq4oX0wJ+2t6aH8MB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7tYk5Lo
syWFReIs6Xf68C7OGYIlrVd2UiHP4/bYvWs2oSYmF+294v8umqmm+yykrFyqVkDL
jcbOLvwXKL8ZYnNkVUt3p4H1OgFc0C19fUehQUNo8b5CVE7QwtroJ3K5E5RRY69U
j3RwLDMp9eZ/hBp39CCGbz2O76epeRZurQzGDc+EgWW7XSw8xsqjmkFoBHHQT9bi
7o9wUAFX/LD1hhpXBgnhr9sOqswzUc/1Wsy/ApS8OXhMPK908wG0oKcq70ioSj6y
DwCNPgqwzjizAly3M1pvpEHJiGyxLparNtG/zbsD0vIdQ4Zr6LvVo2mhekusSSv/
fAroqWqW1U5VVw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:36 2025 by rpki-client