
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: luyW4P3S7Bf5WWaZ7ZQ+y+b4CulPzvAZScWF9ZPHmmo=
Subject key identifier: DB:1E:B2:06:07:5E:2B:24:C2:F9:24:E4:12:64:30:0E:31:9C:8F:E8
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 0197B77C4A8A697A540C70676D6F97DD4A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: mq6llvRYHLiOhZOiHWzQzLAGYbQecGTYfCFAZEVHP6Q=)
2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4a:8a:69:7a:54:0c:70:67:6d:6f:97:dd:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=db1eb206075e2b24c2f924e41264300e319c8fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:17:8f:f5:f7:58:a6:b2:4f:f5:d5:1c:37:
df:39:47:e6:4d:d9:4d:97:f9:bf:cb:0c:42:66:fc:
97:f1:e8:8d:9f:48:45:1f:d8:ea:17:d5:d6:e2:c0:
7b:2c:3b:a8:a0:a2:9e:24:f8:88:2a:08:4a:51:b6:
21:07:77:1f:c2:18:5f:b4:c0:2c:8f:ce:7c:98:00:
c0:e6:f7:96:85:97:7e:a7:cc:57:1e:57:8e:d6:4d:
a2:3a:7e:91:80:b1:0c:bf:59:11:47:13:eb:e3:31:
b0:0f:de:4a:81:e1:89:71:3f:de:46:a0:fa:1c:df:
07:0a:99:37:1c:0b:64:33:a1:b1:38:6d:a4:43:da:
08:c8:7c:eb:a3:cf:30:df:32:c1:ea:1a:3f:ed:a2:
5f:d8:af:5d:e3:8c:cc:0a:a7:2b:d8:3c:82:55:db:
76:5c:9d:45:d6:e2:40:33:28:45:5c:0d:41:1b:7d:
3b:66:7b:95:61:c1:6a:6c:11:f4:96:fe:0c:a4:d7:
ad:38:67:58:60:54:24:af:af:94:ae:1e:4e:05:92:
76:ab:b8:14:8a:1c:0a:91:23:76:11:08:cb:53:f3:
6d:eb:f1:e7:8c:8b:88:7f:db:85:9d:04:03:c7:6d:
05:f0:0d:c0:4a:3f:a4:22:7c:ec:80:fa:28:f4:c3:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:B2:06:07:5E:2B:24:C2:F9:24:E4:12:64:30:0E:31:9C:8F:E8
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6f:45:e7:62:91:d9:a5:5c:3c:f4:a9:b1:d2:b1:32:43:74:
ff:7a:90:eb:2a:35:ca:b3:08:95:8b:a6:49:a0:c9:b6:7d:2c:
d9:26:31:03:8e:ae:29:1a:58:4b:59:23:5f:b0:ee:c2:03:a0:
32:28:6e:58:10:02:55:1e:19:ac:99:06:04:53:37:58:28:f5:
00:87:d6:70:ca:3b:82:86:94:0c:4b:22:a6:2f:ea:8f:a1:f1:
f4:a6:44:5d:58:11:79:86:af:f9:7b:a4:e4:27:4b:87:14:b7:
41:64:46:92:01:5e:29:62:0d:c6:cf:2f:04:35:64:64:6f:7b:
fe:5f:e6:6e:18:3e:53:18:a7:29:4e:81:2f:48:31:2e:29:12:
24:7b:e6:c9:6a:a4:c6:22:5f:03:c0:15:64:9a:77:b8:81:04:
ed:84:86:5a:18:6e:af:79:be:c5:d4:e1:d5:4a:5d:09:bd:ab:
a3:e0:d0:46:fc:5d:aa:03:41:77:ff:1e:ec:00:a2:de:0a:50:
c7:15:59:af:1c:ea:3a:0a:23:ed:62:5a:dd:d2:8b:10:1a:fe:
c6:41:0c:79:db:2f:9c:c0:ac:4e:50:f3:f3:b6:1a:50:ce:88:
c9:32:bb:46:62:ae:a0:f1:b4:cc:3a:57:c2:8f:d9:73:f8:74:
9d:99:37:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEqKaXpUDHBnbW+X3UplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2UxYjlmZmIyZTczZDJjOTdmMDg5MzA2M2NhYmIyY2I3
NDY3OTAwHhcNMjUwNjI4MTcwMTA1WhcNMjUwNjI5MTcwMTA1WjAzMTEwLwYDVQQD
EyhkYjFlYjIwNjA3NWUyYjI0YzJmOTI0ZTQxMjY0MzAwZTMxOWM4ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3okXj/X3WKayT/XVHDffOUfmTdlN
l/m/ywxCZvyX8eiNn0hFH9jqF9XW4sB7LDuooKKeJPiIKghKUbYhB3cfwhhftMAs
j858mADA5veWhZd+p8xXHleO1k2iOn6RgLEMv1kRRxPr4zGwD95KgeGJcT/eRqD6
HN8HCpk3HAtkM6GxOG2kQ9oIyHzro88w3zLB6ho/7aJf2K9d44zMCqcr2DyCVdt2
XJ1F1uJAMyhFXA1BG307ZnuVYcFqbBH0lv4MpNetOGdYYFQkr6+Urh5OBZJ2q7gU
ihwKkSN2EQjLU/Nt6/HnjIuIf9uFnQQDx20F8A3ASj+kInzsgPoo9MM3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsesgYHXiskwvkk5BJkMA4xnI/oMB8GA1UdIwQY
MBaAFNDOG5/7LnPSyX8IkwY8q7LLdGeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgt
YjlmYjUzYTJmMDNjLzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgtYjlmYjUzYTJmMDNj
LzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW9F52KR
2aVcPPSpsdKxMkN0/3qQ6yo1yrMIlYumSaDJtn0s2SYxA46uKRpYS1kjX7DuwgOg
MihuWBACVR4ZrJkGBFM3WCj1AIfWcMo7goaUDEsipi/qj6Hx9KZEXVgReYav+Xuk
5CdLhxS3QWRGkgFeKWINxs8vBDVkZG97/l/mbhg+UxinKU6BL0gxLikSJHvmyWqk
xiJfA8AVZJp3uIEE7YSGWhhur3m+xdTh1UpdCb2ro+DQRvxdqgNBd/8e7ACi3gpQ
xxVZrxzqOgoj7WJa3dKLEBr+xkEMedsvnMCsTlDz87YaUM6IyTK7RmKuoPG0zDpX
wo/Zc/h0nZk3XA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:10 2025 by rpki-client