Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: UkMgxcRlbESa+gI30u8CIdSOh2IvvMQ7pO00As/hD+Q=
Subject key identifier: 9F:EF:FB:B7:AA:05:9D:3F:FC:96:A8:EC:AC:AD:C4:5B:B9:01:78:34
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0197B6A06E662B7A6B6482E43FE1961D3217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 09DA
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: 4uKyyIL+eZwSDqg36+vD7F8wjbVdPR+Dfc/vcwrIK84=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6e:66:2b:7a:6b:64:82:e4:3f:e1:96:1d:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=9feffbb7aa059d3ffc96a8ecacadc45bb9017834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:13:05:ce:32:05:ab:77:60:e4:7e:f5:bd:
5b:f7:9b:fd:b8:f6:b4:cf:bf:89:45:39:aa:2a:c5:
06:e6:d1:a9:d7:fc:fe:97:b2:7d:e6:75:7a:a5:be:
2a:4b:03:84:7e:6e:fc:67:ca:cc:47:db:11:ad:e5:
60:56:b8:7a:ec:26:37:77:73:6f:47:b0:c6:21:b7:
38:cc:92:70:be:8a:e2:70:03:ec:a5:37:40:de:38:
8d:cb:9a:f1:10:24:36:ad:04:36:35:ec:4e:37:c4:
52:68:db:44:51:8f:21:8b:90:28:52:be:6e:01:9c:
fc:01:a4:74:59:8c:0c:cf:9e:b8:6e:8d:21:14:4c:
61:53:c3:74:06:fa:b6:b8:f7:b5:b2:04:d3:72:d1:
33:74:ea:2d:23:b4:05:ff:fb:1b:09:04:e6:8f:7b:
a3:53:30:50:41:9a:b6:3b:78:88:74:a9:fe:ac:58:
bc:4f:ff:d7:91:5f:fa:fd:a4:31:d3:83:0b:3e:00:
aa:2b:88:7e:8b:bb:bf:37:7e:05:0b:27:71:5d:33:
96:48:21:fa:ff:46:70:2c:31:8a:34:04:3b:5d:86:
b8:53:95:16:00:a3:d2:4f:67:01:26:49:e3:fb:97:
08:21:4c:ee:3f:cb:0c:a2:3b:7e:8f:43:8f:af:48:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:FB:B7:AA:05:9D:3F:FC:96:A8:EC:AC:AD:C4:5B:B9:01:78:34
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:40:67:b9:e0:4b:7e:86:e0:7d:01:88:0a:1c:7e:73:64:
cb:a0:87:de:99:d8:62:b0:6e:28:0c:6f:5e:4f:a1:d9:4b:fd:
5e:f3:96:96:e1:ed:ad:ed:78:21:2f:bb:02:a5:ac:b3:a4:ed:
4c:85:36:f4:82:a2:37:40:1d:80:66:9a:95:eb:31:dd:35:f4:
54:f4:9f:cd:46:1f:c1:50:81:03:d9:80:a0:36:b4:03:1c:18:
50:2e:a7:dd:6f:31:0f:00:3c:81:04:84:2e:98:65:e0:5c:c9:
08:9c:49:2b:a6:f6:76:6b:ae:68:31:38:47:ab:a2:86:ea:d8:
04:e3:12:e1:09:49:30:8f:b4:0b:9d:f1:e1:24:45:c6:b9:c6:
db:6b:63:0b:16:95:65:88:b2:e3:88:95:d1:7a:1a:e9:73:9e:
44:ae:a0:2d:af:77:2b:9a:db:3a:af:59:4c:d6:06:a9:ed:0d:
4e:bb:2d:73:b6:c6:26:cb:89:92:00:2b:b5:d7:2c:ce:b2:60:
d0:8f:4b:77:be:29:a0:d4:c2:52:f8:66:ba:88:a8:b9:26:0f:
5b:6f:07:b4:de:0e:6d:42:9f:56:e9:72:ee:6f:f8:d4:99:4a:
32:b7:93:fa:03:9c:8b:09:bd:4c:18:7e:5f:05:5b:26:d5:b9:
13:63:dc:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oG5mK3prZILkP+GWHTIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjUwNjI4MTMwMDU2WhcNMjUwNjI5MTMwMDU2WjAzMTEwLwYDVQQD
Eyg5ZmVmZmJiN2FhMDU5ZDNmZmM5NmE4ZWNhY2FkYzQ1YmI5MDE3ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCoTBc4yBat3YOR+9b1b95v9uPa0
z7+JRTmqKsUG5tGp1/z+l7J95nV6pb4qSwOEfm78Z8rMR9sRreVgVrh67CY3d3Nv
R7DGIbc4zJJwvoricAPspTdA3jiNy5rxECQ2rQQ2NexON8RSaNtEUY8hi5AoUr5u
AZz8AaR0WYwMz564bo0hFExhU8N0Bvq2uPe1sgTTctEzdOotI7QF//sbCQTmj3uj
UzBQQZq2O3iIdKn+rFi8T//XkV/6/aQx04MLPgCqK4h+i7u/N34FCydxXTOWSCH6
/0ZwLDGKNAQ7XYa4U5UWAKPST2cBJknj+5cIIUzuP8sMojt+j0OPr0iBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/v+7eqBZ0//Jao7KytxFu5AXg0MB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq5AZ7ng
S36G4H0BiAocfnNky6CH3pnYYrBuKAxvXk+h2Uv9XvOWluHtre14IS+7AqWss6Tt
TIU29IKiN0AdgGaalesx3TX0VPSfzUYfwVCBA9mAoDa0AxwYUC6n3W8xDwA8gQSE
Lphl4FzJCJxJK6b2dmuuaDE4R6uihurYBOMS4QlJMI+0C53x4SRFxrnG22tjCxaV
ZYiy44iV0Xoa6XOeRK6gLa93K5rbOq9ZTNYGqe0NTrstc7bGJsuJkgArtdcszrJg
0I9Ld74poNTCUvhmuoiouSYPW28HtN4ObUKfVuly7m/41JlKMreT+gOciwm9TBh+
XwVbJtW5E2PccA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:23 2025 by rpki-client