Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: 1Hnl9ChPiM0GIyItmuY1MEQBfNiVHBQ0PkWRakfvUiE=
Subject key identifier: 76:09:04:E3:DA:3C:B9:F0:F1:8A:43:12:91:53:F7:0E:88:FF:04:0A
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0198D8BD8EFECC6CAC49776C7DA12A750C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 21:02:38 +0000
Manifest this update: Sat 23 Aug 2025 21:02:38 +0000
Manifest next update: Sun 24 Aug 2025 21:02:38 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: JyMFQDbHC5GSeT6VhAOhwjfP4Ock05I8qllRF2iWSD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:8e:fe:cc:6c:ac:49:77:6c:7d:a1:2a:75:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Aug 23 21:02:38 2025 GMT
Not After : Aug 24 21:02:38 2025 GMT
Subject: CN=760904e3da3cb9f0f18a43129153f70e88ff040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:7e:d8:a5:17:7f:a4:d5:45:11:d2:05:eb:
2b:88:a2:75:3c:4a:ae:28:41:83:2e:a4:ae:bd:65:
a9:ef:d3:6d:f4:eb:68:b7:80:1a:5b:bd:bc:0e:70:
f8:94:11:39:15:2e:3a:5e:30:4b:47:3d:85:ce:ae:
6c:b2:a2:72:e1:5a:2e:8a:a4:91:91:ee:f9:36:ee:
53:41:e4:8e:d0:57:39:8b:07:6d:a2:8c:72:4a:e9:
7f:2e:05:f3:d7:6f:c3:a5:dc:c9:50:8d:48:d5:6e:
8b:63:01:6b:c4:1e:69:2d:b0:5a:dd:37:bf:9d:d0:
df:9a:87:de:e8:82:29:ab:f3:7b:38:87:15:7f:17:
6e:b5:d0:3e:62:a5:ae:5d:a9:84:cc:54:38:53:6f:
55:0d:57:6b:50:43:f7:78:90:36:b5:6f:0d:ba:95:
a4:95:a4:48:95:cb:6e:f8:3f:68:f6:18:2e:a5:04:
9a:08:17:92:5a:d0:2f:82:95:f6:8b:50:5c:1c:2a:
6b:70:44:08:10:e0:f0:ad:bc:93:58:ea:04:05:21:
69:72:ca:93:d2:71:6e:bb:61:11:a3:1d:62:f3:a0:
47:e6:f7:ff:db:cb:36:d1:31:61:03:df:45:5f:44:
d8:09:d1:d2:a6:2f:37:78:4f:1b:2d:c7:68:71:66:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:04:E3:DA:3C:B9:F0:F1:8A:43:12:91:53:F7:0E:88:FF:04:0A
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:ef:ac:87:ae:2f:51:46:07:bc:0c:1a:5f:1d:88:40:3d:
ff:f4:11:f4:40:e7:1b:a0:25:98:93:b7:1e:93:4a:91:f3:18:
06:e1:2c:2a:f7:ff:b1:e3:ca:c0:3b:9f:7d:e0:5b:f1:bb:95:
96:e4:9c:82:b4:f9:83:c8:26:63:51:fc:4e:e5:cd:bb:57:71:
bf:f3:06:13:35:a6:6f:d5:db:28:2f:0a:59:11:b2:aa:6a:a9:
57:21:2e:cc:4b:d9:74:9f:83:e1:40:a4:64:06:07:27:71:dc:
7c:e4:36:e7:01:14:14:16:04:d1:80:61:59:ca:c2:d8:5e:bb:
ed:d0:4d:da:f8:26:ac:0e:49:a5:74:87:b1:ab:45:d0:94:c6:
12:c9:f2:f7:2f:72:fc:d3:e0:4a:ae:08:2a:7b:06:54:be:0b:
20:15:10:2a:70:28:31:6f:7a:e3:a2:9f:2d:a2:a6:99:70:34:
4b:d6:8d:74:14:a7:f7:f8:6c:73:0c:18:5f:8c:58:2d:f3:93:
01:e2:14:f9:02:64:a8:32:d8:3d:09:d7:6b:34:ba:1c:90:42:
d0:4a:23:83:66:32:41:78:99:f2:a1:2d:60:9c:37:38:af:84:
b7:46:e8:a5:d8:f5:c9:c9:6c:d7:04:4d:2a:5e:60:7b:bf:8b:
07:24:2e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvY7+zGysSXdsfaEqdQwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjFlMzdlYWI2ZWY2MzI2OTMzZTVmYTM3NDhkMDdkODMw
MjZkYjAwHhcNMjUwODIzMjEwMjM4WhcNMjUwODI0MjEwMjM4WjAzMTEwLwYDVQQD
Eyg3NjA5MDRlM2RhM2NiOWYwZjE4YTQzMTI5MTUzZjcwZTg4ZmYwNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MJ+2KUXf6TVRRHSBesriKJ1PEqu
KEGDLqSuvWWp79Nt9Otot4AaW728DnD4lBE5FS46XjBLRz2Fzq5ssqJy4VouiqSR
ke75Nu5TQeSO0Fc5iwdtooxySul/LgXz12/DpdzJUI1I1W6LYwFrxB5pLbBa3Te/
ndDfmofe6IIpq/N7OIcVfxdutdA+YqWuXamEzFQ4U29VDVdrUEP3eJA2tW8NupWk
laRIlctu+D9o9hgupQSaCBeSWtAvgpX2i1BcHCprcEQIEODwrbyTWOoEBSFpcsqT
0nFuu2ERox1i86BH5vf/28s20TFhA99FX0TYCdHSpi83eE8bLcdocWZVdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYJBOPaPLnw8YpDEpFT9w6I/wQKMB8GA1UdIwQY
MBaAFJgh436rbvYyaTPl+jdI0H2DAm2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQt
YWVmYTc1N2UwYzM4LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQtYWVmYTc1N2UwYzM4
LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJzvrIeu
L1FGB7wMGl8diEA9//QR9EDnG6AlmJO3HpNKkfMYBuEsKvf/sePKwDuffeBb8buV
luScgrT5g8gmY1H8TuXNu1dxv/MGEzWmb9XbKC8KWRGyqmqpVyEuzEvZdJ+D4UCk
ZAYHJ3HcfOQ25wEUFBYE0YBhWcrC2F677dBN2vgmrA5JpXSHsatF0JTGEsny9y9y
/NPgSq4IKnsGVL4LIBUQKnAoMW9646KfLaKmmXA0S9aNdBSn9/hscwwYX4xYLfOT
AeIU+QJkqDLYPQnXazS6HJBC0Eojg2YyQXiZ8qEtYJw3OK+Et0bopdj1ycls1wRN
Kl5ge7+LByQuPw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:29 2025 by rpki-client