Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: ngWd7DTayjrxgEmvcDYG1vgnJ3h7LTw/6g8q9XHiXo0=
Subject key identifier: 73:F7:87:FA:A8:D3:00:12:2D:02:64:21:CE:C6:9E:72:59:43:50:C7
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 0198D473DF8177B4888BDB2F611171719E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: JWPb+zLHwStcWIPwUMdjDWjFqUf3Nng2G/6kW+/+46k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:df:81:77:b4:88:8b:db:2f:61:11:71:71:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=73f787faa8d300122d026421cec69e72594350c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:6d:2b:32:f4:e3:44:3f:03:6d:27:36:a4:
3e:90:fd:ad:f5:86:4d:4d:35:e0:0d:e8:10:3b:7d:
73:bf:35:77:49:37:a0:65:eb:b1:30:c0:01:13:75:
32:f9:84:63:4d:07:be:bc:4d:9e:c5:e3:94:d1:96:
35:72:1c:4f:65:21:d0:40:5f:f0:e3:d0:80:b5:90:
98:dc:38:16:cd:11:77:b7:5c:79:08:a5:ce:63:06:
75:02:e5:4b:a1:15:d8:51:61:97:1f:77:74:7c:5b:
54:77:e1:44:4a:f0:af:1e:75:4e:2e:c1:12:b9:58:
06:e5:9f:98:89:ec:32:82:f0:88:41:5b:ea:11:aa:
cf:f7:9e:38:8f:17:ee:49:9a:2d:51:ba:14:83:be:
2f:88:b6:e8:71:31:a9:6d:11:4e:b3:23:48:46:d9:
6f:7d:57:89:ba:ff:84:8f:a2:a9:39:86:6e:92:a9:
a0:1f:18:14:60:9b:9e:7e:31:ca:67:4c:18:6f:f1:
e3:d3:86:2f:e3:14:39:dd:7d:7e:02:83:8a:c4:1a:
af:93:47:c9:d2:94:f2:bb:b4:be:7c:19:6c:0d:9b:
5e:14:8b:ce:05:2e:02:e0:01:c5:76:de:05:09:00:
59:2c:40:ac:d2:3c:1b:07:00:95:53:1d:8e:8c:97:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:87:FA:A8:D3:00:12:2D:02:64:21:CE:C6:9E:72:59:43:50:C7
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:59:b4:8b:87:af:75:c7:66:31:85:60:13:3e:56:f4:19:fc:
43:4c:ca:6c:16:de:a7:1a:75:5a:b0:fe:7b:61:6c:e4:c9:35:
9c:b3:ed:65:f5:10:67:10:91:a3:2e:34:3b:41:0d:5a:db:8c:
03:0f:cd:f6:30:4f:45:6a:8a:8c:34:9f:47:88:5f:8f:b8:c9:
fe:50:66:93:c1:27:20:31:a2:5c:fc:2c:58:99:57:c6:f1:b0:
58:12:da:4d:c8:d9:61:11:61:41:5f:c5:cf:e8:79:90:78:cb:
9b:60:cb:81:41:e3:3a:2d:da:13:fb:f9:18:31:9c:a2:f1:ed:
b6:69:ba:53:ea:8d:4b:53:dc:8d:bd:6c:31:87:cf:3d:0e:42:
cb:0f:6e:10:7f:c3:3e:fa:5b:f0:65:73:94:f7:53:aa:c7:06:
3b:18:e2:84:2d:cb:03:fc:a5:10:98:a7:98:06:26:4c:11:6f:
e4:16:88:b5:52:91:87:3e:74:8f:d4:81:64:2c:36:3e:ae:24:
33:6a:27:be:8b:f3:e9:cb:a3:11:e1:bb:e9:91:2d:0c:86:01:
e2:80:89:c4:5a:e6:72:31:bb:3b:81:a4:08:2f:b3:56:0d:4e:
cd:e7:c6:f7:35:56:b8:73:ed:b5:f0:3b:d3:b8:76:89:b8:b9:
96:c3:a2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9+Bd7SIi9svYRFxcZ6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjUwODIzMDEwMzQwWhcNMjUwODI0MDEwMzQwWjAzMTEwLwYDVQQD
Eyg3M2Y3ODdmYWE4ZDMwMDEyMmQwMjY0MjFjZWM2OWU3MjU5NDM1MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm99tKzL040Q/A20nNqQ+kP2t9YZN
TTXgDegQO31zvzV3STegZeuxMMABE3Uy+YRjTQe+vE2exeOU0ZY1chxPZSHQQF/w
49CAtZCY3DgWzRF3t1x5CKXOYwZ1AuVLoRXYUWGXH3d0fFtUd+FESvCvHnVOLsES
uVgG5Z+YiewygvCIQVvqEarP9544jxfuSZotUboUg74viLbocTGpbRFOsyNIRtlv
fVeJuv+Ej6KpOYZukqmgHxgUYJuefjHKZ0wYb/Hj04Yv4xQ53X1+AoOKxBqvk0fJ
0pTyu7S+fBlsDZteFIvOBS4C4AHFdt4FCQBZLECs0jwbBwCVUx2OjJdwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP3h/qo0wASLQJkIc7GnnJZQ1DHMB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFm0i4ev
dcdmMYVgEz5W9Bn8Q0zKbBbepxp1WrD+e2Fs5Mk1nLPtZfUQZxCRoy40O0ENWtuM
Aw/N9jBPRWqKjDSfR4hfj7jJ/lBmk8EnIDGiXPwsWJlXxvGwWBLaTcjZYRFhQV/F
z+h5kHjLm2DLgUHjOi3aE/v5GDGcovHttmm6U+qNS1Pcjb1sMYfPPQ5Cyw9uEH/D
Pvpb8GVzlPdTqscGOxjihC3LA/ylEJinmAYmTBFv5BaItVKRhz50j9SBZCw2Pq4k
M2onvovz6cujEeG76ZEtDIYB4oCJxFrmcjG7O4GkCC+zVg1OzefG9zVWuHPttfA7
07h2ibi5lsOigg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client