Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: oLN+z9NX5Pz49mo2ngGnJRve8OWLqezWU1P5bWXWezM=
Subject key identifier: 98:E0:DC:8A:51:23:8E:26:52:C9:63:60:36:23:29:A9:2D:1A:CE:25
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 0197B6328B5691A6E5C291922FC1EE16CBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:55 +0000
Manifest this update: Sat 28 Jun 2025 11:00:55 +0000
Manifest next update: Sun 29 Jun 2025 11:00:55 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: i1MeUp6VvxaEjD8ybXB9AbhC7eBdsaruiu4d0mq3INY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8b:56:91:a6:e5:c2:91:92:2f:c1:ee:16:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Jun 28 11:00:55 2025 GMT
Not After : Jun 29 11:00:55 2025 GMT
Subject: CN=98e0dc8a51238e2652c96360362329a92d1ace25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:be:99:3f:c3:07:79:86:bd:1f:e6:d6:a7:
1c:9a:c5:96:66:42:bd:7f:cf:1a:a9:6c:46:f8:1d:
58:7c:9e:4d:42:fb:a9:eb:89:d8:d6:6b:56:10:04:
77:56:92:6b:09:ce:42:a8:f8:8f:11:f8:2d:97:e1:
1f:6d:fa:a3:93:2d:46:f3:ea:6c:ce:ba:e6:4a:50:
e0:3a:3d:c5:0e:11:7f:5a:37:73:8c:2f:f6:b1:10:
cd:8d:3d:ca:71:28:04:7d:ea:cf:6d:6f:59:2a:97:
5f:65:4a:09:a8:3e:34:70:bc:9f:cc:5e:ae:8b:79:
74:19:da:bc:7e:2b:97:6d:6c:99:89:46:c5:e6:20:
4b:40:5b:23:a7:fd:8a:7a:de:13:98:2c:3b:9a:d6:
ca:db:d9:e5:44:33:9c:8a:b9:1c:c9:2e:87:45:9d:
52:e8:fe:42:64:7d:28:22:5f:80:4d:17:fe:51:1f:
0c:f6:40:ea:04:de:36:e2:57:20:c4:65:29:08:81:
27:3e:ab:d2:7d:e8:8d:c2:68:28:09:ba:34:eb:ec:
83:fd:b1:4f:8e:33:b1:21:1b:14:47:ee:d5:bf:c4:
8b:9d:4e:9c:0f:ca:5e:da:83:e4:ca:22:4b:2e:ec:
2f:6c:5e:ba:b5:41:2f:cd:78:1d:d5:23:cb:05:95:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E0:DC:8A:51:23:8E:26:52:C9:63:60:36:23:29:A9:2D:1A:CE:25
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:5d:7c:4c:9b:e6:58:ca:b1:41:07:b8:1a:fe:f8:16:2f:
72:c7:b2:5b:40:41:3a:24:f4:83:a2:ef:ba:62:3a:e9:09:a4:
6a:55:7a:03:78:b6:90:c3:58:7a:37:b2:14:f6:07:94:27:a4:
99:4b:a8:34:0d:6c:1e:dd:0a:e4:98:a5:5b:4e:23:37:e7:c9:
e1:4c:8f:02:50:c2:13:16:c5:e8:3e:b8:78:f3:ec:50:dd:3a:
b0:25:a2:cd:66:d5:d4:f7:b5:3f:ef:c7:63:fb:06:11:4c:d0:
6b:56:7b:28:05:9f:43:5a:67:7e:de:d3:f8:b7:6f:a5:ec:25:
a1:47:e4:8b:58:08:d9:c4:fb:06:c4:34:96:77:57:52:81:05:
b6:0c:94:9d:38:8d:75:34:44:61:9f:01:6a:d0:c0:9f:27:0e:
41:c4:69:a4:8e:3c:cf:2a:6f:6d:aa:48:ff:30:85:f2:47:dc:
bb:91:47:36:6e:14:75:2f:cf:ba:0a:23:41:7a:05:0e:d3:ee:
fe:e9:e5:c4:4f:c0:c0:bb:27:93:f7:a6:ef:6c:5e:1f:db:9b:
b0:f7:30:d0:50:e5:85:14:d7:a2:ea:be:12:ad:c1:2c:6c:bd:
9a:31:4c:46:e8:9a:8e:20:ee:9e:f2:8c:5a:9f:dc:f6:2c:ea:
a4:a2:a1:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MotWkablwpGSL8HuFsuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjUwNjI4MTEwMDU1WhcNMjUwNjI5MTEwMDU1WjAzMTEwLwYDVQQD
Eyg5OGUwZGM4YTUxMjM4ZTI2NTJjOTYzNjAzNjIzMjlhOTJkMWFjZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVq+mT/DB3mGvR/m1qccmsWWZkK9
f88aqWxG+B1YfJ5NQvup64nY1mtWEAR3VpJrCc5CqPiPEfgtl+Efbfqjky1G8+ps
zrrmSlDgOj3FDhF/WjdzjC/2sRDNjT3KcSgEferPbW9ZKpdfZUoJqD40cLyfzF6u
i3l0Gdq8fiuXbWyZiUbF5iBLQFsjp/2Ket4TmCw7mtbK29nlRDOcirkcyS6HRZ1S
6P5CZH0oIl+ATRf+UR8M9kDqBN424lcgxGUpCIEnPqvSfeiNwmgoCbo06+yD/bFP
jjOxIRsUR+7Vv8SLnU6cD8pe2oPkyiJLLuwvbF66tUEvzXgd1SPLBZVLMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjg3IpRI44mUsljYDYjKaktGs4lMB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJZdfEyb
5ljKsUEHuBr++BYvcseyW0BBOiT0g6LvumI66QmkalV6A3i2kMNYejeyFPYHlCek
mUuoNA1sHt0K5JilW04jN+fJ4UyPAlDCExbF6D64ePPsUN06sCWizWbV1Pe1P+/H
Y/sGEUzQa1Z7KAWfQ1pnft7T+LdvpewloUfki1gI2cT7BsQ0lndXUoEFtgyUnTiN
dTREYZ8BatDAnycOQcRppI48zypvbapI/zCF8kfcu5FHNm4UdS/PugojQXoFDtPu
/unlxE/AwLsnk/em72xeH9ubsPcw0FDlhRTXouq+Eq3BLGy9mjFMRuiajiDunvKM
Wp/c9izqpKKhkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:51 2025 by rpki-client