Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
File: MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json)
Hash identifier: b2uaZAZvhxA42BfZcPtNNm7Fy3XatgYDlreiNBNZ4Xc=
Subject key identifier: 8C:60:B7:96:E8:5A:C9:D8:B0:55:55:11:4D:D0:12:29:4A:44:61:61
Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Certificate serial: 0197B6D77DEE90C2FAFEA021412ACDECDB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
Manifest number: 1095
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: HqsZJgL9LBUTcewanQzxQHLDph8.roa (hash: UQ79eEyJ8LyCIFyjDtOvtd/bCzwLuuC1qKDG3mAmlzU=)
2: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: GFaknYqruAG90l7HgL9SAL2mizU58F4hL7LEQVb/Oo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7d:ee:90:c2:fa:fe:a0:21:41:2a:cd:ec:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=8c60b796e85ac9d8b05555114dd012294a446161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:fa:c1:ce:95:e8:2e:d4:62:fe:9b:05:b4:
c7:d6:73:21:95:d4:90:00:4c:46:5b:d9:ea:0d:76:
3c:ec:07:fe:a0:78:23:6a:74:93:15:1a:c4:02:58:
07:6a:7a:7e:9c:0f:4c:31:2c:07:1c:f2:0c:f3:f8:
d9:94:e0:56:66:07:52:d8:00:a5:8b:68:b5:b3:c2:
b4:20:74:c4:b4:26:96:1e:50:78:64:6a:78:e2:9d:
51:2c:54:d5:c9:fc:19:f4:fd:58:c6:e5:13:02:d7:
e8:97:ca:4c:55:e6:52:a8:99:e5:ea:7f:5f:37:32:
54:22:17:11:18:43:f8:9d:e5:da:b2:fe:96:66:c6:
ac:d5:97:69:5c:19:36:b6:9b:a9:f5:20:ff:07:82:
50:44:cc:f9:51:aa:ee:73:f2:2c:4f:f2:bb:de:ba:
40:90:23:2d:8e:4b:3e:9b:fa:75:38:4a:e9:79:33:
0d:6d:e7:4d:c8:15:ba:d4:69:b8:4f:2d:f4:98:0b:
fc:0d:12:74:8b:40:6c:9e:98:49:87:f5:22:04:a2:
3f:67:2e:bd:75:9c:73:ef:a5:9d:a6:69:ad:d8:06:
c8:48:af:fc:2b:eb:d3:66:7e:41:2d:9a:32:91:d3:
df:4c:8b:db:16:da:08:09:70:8a:7f:83:d1:99:9d:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:B7:96:E8:5A:C9:D8:B0:55:55:11:4D:D0:12:29:4A:44:61:61
X509v3 Authority Key Identifier:
keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:10:30:b0:a3:a2:dd:41:4a:b9:0a:86:5a:22:f3:94:04:c4:
e9:6c:99:54:6a:e4:26:1b:2e:46:22:92:c5:52:b1:56:96:d1:
ea:1d:fc:f4:66:3d:4a:bc:ca:cd:7c:7f:0d:8a:e2:fd:e2:b5:
52:2c:6e:2a:2f:e9:9d:3e:37:7a:eb:ea:bd:59:b3:60:df:c2:
fc:bd:ed:1d:80:94:7d:1a:2c:50:7b:51:5e:7b:23:4e:a6:b2:
5a:39:86:f9:cf:a1:c3:5d:7c:64:d1:6b:07:16:0a:ef:fd:93:
42:91:18:bb:7a:18:14:67:ea:5e:69:26:2a:8d:fa:e8:96:db:
2b:0c:97:52:59:ab:3a:5d:ec:0e:7c:95:4a:13:d3:03:dd:1b:
62:b5:43:1c:09:6a:ed:97:fe:14:65:f7:b0:d3:9b:d4:4a:6d:
b2:e1:48:f4:40:d3:0a:d9:de:03:2a:f9:37:08:24:11:f7:f8:
7e:f0:ac:50:0d:89:7a:74:3f:0a:e6:df:1a:21:ab:af:c8:0e:
40:91:01:05:fc:f8:8a:cd:a2:4f:73:83:50:37:be:e3:81:5b:
36:c9:21:8a:96:d7:4d:e4:43:2d:77:1b:57:91:cb:7c:42:f6:
2d:d4:2d:99:3a:66:39:fd:5e:68:25:72:0a:57:02:ab:90:5d:
a6:f3:27:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2133ukML6/qAhQSrN7NtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw
ZmVhYjUwHhcNMjUwNjI4MTQwMTA1WhcNMjUwNjI5MTQwMTA1WjAzMTEwLwYDVQQD
Eyg4YzYwYjc5NmU4NWFjOWQ4YjA1NTU1MTE0ZGQwMTIyOTRhNDQ2MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslv6wc6V6C7UYv6bBbTH1nMhldSQ
AExGW9nqDXY87Af+oHgjanSTFRrEAlgHanp+nA9MMSwHHPIM8/jZlOBWZgdS2ACl
i2i1s8K0IHTEtCaWHlB4ZGp44p1RLFTVyfwZ9P1YxuUTAtfol8pMVeZSqJnl6n9f
NzJUIhcRGEP4neXasv6WZsas1ZdpXBk2tpup9SD/B4JQRMz5Uaruc/IsT/K73rpA
kCMtjks+m/p1OErpeTMNbedNyBW61Gm4Ty30mAv8DRJ0i0BsnphJh/UiBKI/Zy69
dZxz76Wdpmmt2AbISK/8K+vTZn5BLZoykdPfTIvbFtoICXCKf4PRmZ06CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxgt5boWsnYsFVVEU3QEilKRGFhMB8GA1UdIwQY
MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt
Yjc5OTY4ZTBlMTc0LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0
LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhAwsKOi
3UFKuQqGWiLzlATE6WyZVGrkJhsuRiKSxVKxVpbR6h389GY9SrzKzXx/DYri/eK1
UixuKi/pnT43euvqvVmzYN/C/L3tHYCUfRosUHtRXnsjTqayWjmG+c+hw118ZNFr
BxYK7/2TQpEYu3oYFGfqXmkmKo366JbbKwyXUlmrOl3sDnyVShPTA90bYrVDHAlq
7Zf+FGX3sNOb1EptsuFI9EDTCtneAyr5NwgkEff4fvCsUA2JenQ/CubfGiGrr8gO
QJEBBfz4is2iT3ODUDe+44FbNskhipbXTeRDLXcbV5HLfEL2LdQtmTpmOf1eaCVy
ClcCq5BdpvMnTw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:48 2025 by rpki-client