Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: af+ALpHh/znSuZNoCZiGCxDq1tbWVgxtjq85vZ71FAQ=
Subject key identifier: 9D:B4:CC:0B:45:8E:BB:AC:59:EC:6B:B3:2B:E8:1E:03:D5:8E:41:0D
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0198D660C8DB74B7B4D7A9744894B12FEA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0CCC
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: mPCLsXw2/yXOtH0S227X8kta3zTOW14iqX0aOqgd9Vc=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:db:74:b7:b4:d7:a9:74:48:94:b1:2f:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=9db4cc0b458ebbac59ec6bb32be81e03d58e410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:87:ca:83:0e:ae:c9:65:09:28:b1:61:e5:
d0:5b:b3:73:22:3d:f0:ee:2f:26:bf:f5:84:5c:10:
f3:1f:45:a6:8e:39:49:f7:b8:9c:b7:2d:92:fa:48:
87:8c:41:32:d0:ba:de:e1:0d:60:6c:15:85:19:17:
ca:a4:20:47:b3:eb:de:12:63:e1:d1:e6:b5:64:aa:
60:50:16:09:6b:48:86:fe:ef:81:db:75:e1:b4:0b:
ab:4a:21:32:b3:d3:7d:6e:8b:0c:ee:8b:12:4e:3d:
d3:bc:bf:6c:ae:86:44:fd:3b:6a:b4:49:49:9e:0b:
2f:30:e8:8d:3f:7f:01:0a:1a:f9:3f:8e:70:2e:76:
4e:44:48:e7:47:49:dc:50:6a:17:1a:0e:4b:a0:75:
c3:07:2f:02:78:ba:a7:eb:59:f7:14:f9:ac:44:71:
1f:51:d5:27:df:30:6c:40:29:0f:de:49:a4:82:49:
a8:f2:90:e6:78:11:22:3b:ac:17:c1:24:2f:3a:df:
4a:70:98:88:95:b3:9e:e2:b0:57:3e:87:82:26:db:
a3:a5:15:82:ea:77:9f:2c:3e:b7:e9:9d:59:04:a4:
d1:d8:34:75:09:6c:8d:9a:b2:74:1d:e8:b9:6c:48:
a2:cd:ba:ba:87:f0:be:47:47:ec:80:da:76:33:b1:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B4:CC:0B:45:8E:BB:AC:59:EC:6B:B3:2B:E8:1E:03:D5:8E:41:0D
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:39:88:cd:72:bf:4c:0f:4f:cf:a3:b7:c5:ee:01:77:eb:96:
b5:2d:68:0e:e1:62:1d:f1:38:3e:df:5e:e4:06:72:6d:4a:f4:
17:2b:86:cf:d9:90:86:06:d2:38:7c:5d:c4:1f:2c:e9:6e:77:
d2:3b:83:bf:3b:95:ac:74:64:4c:46:6a:b7:b7:d9:cc:8e:79:
fb:ad:dc:e8:1c:69:cb:45:9a:cf:3d:9a:79:2f:da:09:77:ca:
6f:9c:97:b0:b4:59:78:1c:28:73:dc:a5:70:93:36:65:01:8e:
f3:97:6c:3b:ca:06:03:07:10:9a:d0:0b:49:dc:27:ec:67:47:
7e:7b:b7:cd:99:49:b2:66:b8:91:a3:3a:43:80:73:5a:79:a6:
08:f4:8d:61:19:3b:3a:2b:65:3b:cb:11:89:f4:2c:57:ad:89:
52:55:ec:16:30:fe:19:0b:05:94:0f:04:f6:dd:da:7e:e1:db:
32:5b:e0:0c:7d:a3:16:c7:04:43:e3:55:bf:9f:1f:82:d0:55:
d3:71:6d:4e:c5:cd:3a:c1:ac:54:9f:f7:7d:6c:06:c4:06:83:
c7:e6:b7:a3:fa:f3:da:96:54:52:f3:f4:dd:aa:6a:94:d2:0d:
47:7a:eb:bc:93:33:00:79:b0:8e:e2:55:34:35:bd:47:04:82:
d8:ef:05:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMjbdLe016l0SJSxL+oLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx
ZGQ3ZjAwHhcNMjUwODIzMTAwMjAzWhcNMjUwODI0MTAwMjAzWjAzMTEwLwYDVQQD
Eyg5ZGI0Y2MwYjQ1OGViYmFjNTllYzZiYjMyYmU4MWUwM2Q1OGU0MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiHyoMOrsllCSixYeXQW7NzIj3w
7i8mv/WEXBDzH0WmjjlJ97icty2S+kiHjEEy0Lre4Q1gbBWFGRfKpCBHs+veEmPh
0ea1ZKpgUBYJa0iG/u+B23XhtAurSiEys9N9bosM7osSTj3TvL9sroZE/TtqtElJ
ngsvMOiNP38BChr5P45wLnZOREjnR0ncUGoXGg5LoHXDBy8CeLqn61n3FPmsRHEf
UdUn3zBsQCkP3kmkgkmo8pDmeBEiO6wXwSQvOt9KcJiIlbOe4rBXPoeCJtujpRWC
6nefLD636Z1ZBKTR2DR1CWyNmrJ0Hei5bEiizbq6h/C+R0fsgNp2M7Hu9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ20zAtFjrusWexrsyvoHgPVjkENMB8GA1UdIwQY
MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt
YTRmN2IwODhiYzFhLzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh
LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTmIzXK/
TA9Pz6O3xe4Bd+uWtS1oDuFiHfE4Pt9e5AZybUr0FyuGz9mQhgbSOHxdxB8s6W53
0juDvzuVrHRkTEZqt7fZzI55+63c6Bxpy0Wazz2aeS/aCXfKb5yXsLRZeBwoc9yl
cJM2ZQGO85dsO8oGAwcQmtALSdwn7GdHfnu3zZlJsma4kaM6Q4BzWnmmCPSNYRk7
OitlO8sRifQsV62JUlXsFjD+GQsFlA8E9t3afuHbMlvgDH2jFscEQ+NVv58fgtBV
03FtTsXNOsGsVJ/3fWwGxAaDx+a3o/rz2pZUUvP03apqlNINR3rrvJMzAHmwjuJV
NDW9RwSC2O8Fxw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:30 2025 by rpki-client