Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File: Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier: VWjx+TcXTOlswS8RJEhOClyulIw33Dy6nCujPWImwto=
Subject key identifier: 3C:06:94:CE:3A:9D:FF:58:D6:02:76:1B:57:8B:91:BE:15:2A:7F:7A
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 0198D54E479045DE9B1FAB3DD4D75BE57CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: CGuNx9HbLLQJKmJX1yZrtm2CJcvWBljaNH9V6ZOiky0=)
3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:47:90:45:de:9b:1f:ab:3d:d4:d7:5b:e5:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=3c0694ce3a9dff58d602761b578b91be152a7f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:fd:3e:6d:d4:21:95:55:12:29:6d:69:45:
9c:a3:9e:14:50:e5:33:3d:9b:27:c8:5c:7c:fc:48:
a2:02:27:44:d0:51:3e:99:69:65:70:6d:cf:c2:00:
a4:2a:7b:e1:26:7b:98:64:d0:40:fb:2e:01:4a:70:
2b:9d:54:5d:e2:5e:f5:6a:28:73:35:78:f8:35:71:
31:06:b1:bf:db:6a:bf:d5:5e:8c:a1:f7:53:60:bb:
44:5d:4c:98:f8:f4:d1:fa:f3:f5:f7:f6:d9:a3:38:
6d:85:73:b3:cf:77:83:a2:1d:d6:3f:27:d2:9f:0c:
bb:d2:44:24:f5:cf:88:c3:ad:08:4a:f2:1e:2a:9e:
de:45:88:68:f5:e1:3d:e3:fa:9d:4c:ff:c4:3e:e1:
6b:6c:c6:bc:38:f8:48:91:bf:d3:9e:d2:e2:62:3c:
f8:e7:e4:fc:0f:a0:26:8e:7b:f5:f2:1f:63:b4:34:
8b:1f:b9:9d:d8:9e:26:b4:9c:6b:f2:87:22:b0:c0:
a0:3e:48:10:d0:79:df:b0:16:d4:8f:9d:ab:76:53:
45:2d:7f:0e:6c:22:c0:92:d2:47:8e:f5:6f:d7:79:
ab:db:72:9d:38:6e:bc:24:fe:72:d9:d7:12:a4:7c:
9b:51:f4:8d:7c:16:ce:7c:d8:0d:bb:3d:32:89:86:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:94:CE:3A:9D:FF:58:D6:02:76:1B:57:8B:91:BE:15:2A:7F:7A
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:61:4e:06:58:bf:cb:35:d4:28:39:00:06:71:e3:27:3a:ca:
85:b2:ae:8f:c7:d7:b7:01:b4:03:5b:47:c7:c1:ba:9e:00:c8:
fb:90:b9:a7:6e:9c:50:7b:76:ed:a5:7d:a1:01:50:de:cf:4c:
eb:1e:8e:eb:ad:7b:66:d8:3c:0f:7b:ea:1b:02:65:be:67:80:
6e:02:f8:af:99:a3:59:83:27:77:6a:3b:f0:5e:09:98:8b:0d:
d3:03:5a:c1:d5:9b:7c:d5:f6:5a:f3:ad:d5:32:3c:b2:8f:79:
49:37:8f:4f:72:66:3b:d6:84:4f:f2:0f:55:0a:a6:29:77:e2:
30:ae:16:bd:96:0e:2f:a0:17:a0:7e:95:74:52:59:61:53:53:
5b:c4:c8:88:a6:ed:fd:7e:5f:98:64:d3:1f:60:8d:e5:2b:9c:
1a:79:5e:cf:75:3e:0f:c7:d2:e7:9d:ec:a3:f3:0d:c4:7d:ac:
e6:aa:7f:84:28:39:ce:34:22:6a:90:d0:2f:69:50:03:7b:9f:
03:b2:6c:9a:69:9f:68:24:a6:97:62:8a:63:69:c0:45:28:64:
9d:0e:c1:de:24:4f:30:43:96:30:5a:10:e4:59:df:65:c6:b0:
3a:3b:33:09:83:32:95:5d:57:37:77:98:81:b2:23:02:0e:64:
eb:e5:30:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkeQRd6bH6s91Ndb5XzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGU2NDBmOWQ2M2JhOTQzYTk3YjNkYzEwZDRjNjg0NGE1
ZDNkYzEwHhcNMjUwODIzMDUwMjEzWhcNMjUwODI0MDUwMjEzWjAzMTEwLwYDVQQD
EygzYzA2OTRjZTNhOWRmZjU4ZDYwMjc2MWI1NzhiOTFiZTE1MmE3ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UX9Pm3UIZVVEiltaUWco54UUOUz
PZsnyFx8/EiiAidE0FE+mWllcG3PwgCkKnvhJnuYZNBA+y4BSnArnVRd4l71aihz
NXj4NXExBrG/22q/1V6MofdTYLtEXUyY+PTR+vP19/bZozhthXOzz3eDoh3WPyfS
nwy70kQk9c+Iw60ISvIeKp7eRYho9eE94/qdTP/EPuFrbMa8OPhIkb/TntLiYjz4
5+T8D6Amjnv18h9jtDSLH7md2J4mtJxr8ocisMCgPkgQ0HnfsBbUj52rdlNFLX8O
bCLAktJHjvVv13mr23KdOG68JP5y2dcSpHybUfSNfBbOfNgNuz0yiYaiBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwGlM46nf9Y1gJ2G1eLkb4VKn96MB8GA1UdIwQY
MBaAFDMOZA+dY7qUOpez3BDUxoRKXT3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYt
NWExNzcxOWQ0NDllLzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYtNWExNzcxOWQ0NDll
LzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2FOBli/
yzXUKDkABnHjJzrKhbKuj8fXtwG0A1tHx8G6ngDI+5C5p26cUHt27aV9oQFQ3s9M
6x6O6617Ztg8D3vqGwJlvmeAbgL4r5mjWYMnd2o78F4JmIsN0wNawdWbfNX2WvOt
1TI8so95STePT3JmO9aET/IPVQqmKXfiMK4WvZYOL6AXoH6VdFJZYVNTW8TIiKbt
/X5fmGTTH2CN5SucGnlez3U+D8fS553so/MNxH2s5qp/hCg5zjQiapDQL2lQA3uf
A7JsmmmfaCSml2KKY2nARShknQ7B3iRPMEOWMFoQ5FnfZcawOjszCYMylV1XN3eY
gbIjAg5k6+Uw/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client