Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: jjQECPgRTtfyDCvciOxIgx+wootSXAOalkJQX1s0jk8=
Subject key identifier: 51:08:1E:52:7C:5F:96:9B:02:F4:EA:6A:B6:65:67:7A:B6:96:1D:EC
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 0198D65FB1C256DA9D1BE9C79864EC19B822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 13F2
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=)
2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: bEZo94kczfO+qWukOnksdu0bjebn1uZyUFW6t52XIsU=)
3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b1:c2:56:da:9d:1b:e9:c7:98:64:ec:19:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=51081e527c5f969b02f4ea6ab665677ab6961dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:bb:0d:3b:59:36:f9:e1:f3:b0:44:5a:a5:
6c:8d:63:ef:83:80:03:e8:53:e9:03:fb:3c:6b:38:
7e:d9:31:dc:23:7b:37:a9:17:13:eb:f9:93:b7:4e:
ad:a8:91:7a:4a:3b:6a:7d:00:4f:23:e4:b8:bd:23:
83:3a:5c:07:59:87:40:b1:70:a9:b5:5b:3f:ef:3e:
2c:17:83:6c:0a:66:7f:56:73:11:d3:e2:7c:d9:3f:
61:cf:9a:6a:75:8a:35:99:c6:7c:8e:ad:b7:51:1a:
82:c4:9a:fe:22:ff:0b:46:03:ae:41:db:b1:e8:4f:
c5:7d:22:7e:77:96:70:33:7c:63:b9:80:3c:65:da:
01:9a:62:93:e5:f8:3f:cc:cf:64:4b:d7:88:f1:1d:
4b:b3:d9:07:24:89:79:4a:d7:67:07:fd:8e:30:1a:
00:25:d3:e3:6c:77:f4:28:95:ed:31:7b:28:ba:d9:
be:1d:c7:c6:14:b6:f6:e5:ce:54:dc:2a:11:2c:1c:
a6:90:08:60:41:59:9c:50:4a:05:8d:e2:82:e5:93:
e0:64:30:8b:d0:d6:c7:e9:f9:10:6c:67:56:82:85:
8f:68:16:63:4a:17:ec:78:97:02:d7:7a:b4:50:6d:
80:03:0b:6e:4a:bb:e4:3d:85:a3:c9:60:a9:26:47:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:1E:52:7C:5F:96:9B:02:F4:EA:6A:B6:65:67:7A:B6:96:1D:EC
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:91:74:5b:da:ad:a6:ba:e8:a0:47:41:3a:87:d5:f9:8d:
9b:08:24:cf:78:49:62:e5:c1:e7:8a:35:90:d7:ce:0d:c4:62:
d3:42:02:59:38:ee:2f:46:36:16:92:1e:61:1a:a7:c1:78:5b:
9e:0d:bd:a1:2f:8d:69:1c:ea:5a:01:8b:04:d3:0a:83:50:d7:
ff:e9:1c:be:a0:35:f1:b8:89:95:01:d0:61:bd:d6:22:ed:72:
0a:93:81:7f:1a:e6:d2:05:3c:e0:da:5a:e5:84:da:3e:d8:a6:
29:cb:ac:8c:7f:da:3f:e3:78:7b:c3:17:f7:62:3e:37:78:20:
e1:30:fa:c4:2a:0d:a7:e3:a3:b5:1c:b4:39:eb:fe:1f:2e:4c:
e3:b3:3f:4c:54:d3:cf:27:a7:e7:40:c7:9d:a5:58:e3:9b:b5:
10:fb:9a:ad:68:35:d1:54:bc:f1:fb:05:b9:57:84:27:26:3b:
d1:c4:32:ab:d4:fc:59:62:6d:f9:5c:90:20:4b:40:51:2b:19:
9b:e3:28:c5:06:05:90:13:3e:a7:19:32:6c:de:39:e7:53:11:
af:59:cd:31:d9:96:0e:0e:dc:0b:c6:94:30:9e:f4:0f:f0:25:
9c:48:7f:e1:15:3c:68:1d:76:eb:88:6f:f6:90:d7:32:eb:5b:
ab:90:ed:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX7HCVtqdG+nHmGTsGbgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy
OThkNmEwHhcNMjUwODIzMTAwMDUyWhcNMjUwODI0MTAwMDUyWjAzMTEwLwYDVQQD
Eyg1MTA4MWU1MjdjNWY5NjliMDJmNGVhNmFiNjY1Njc3YWI2OTYxZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWK7DTtZNvnh87BEWqVsjWPvg4AD
6FPpA/s8azh+2THcI3s3qRcT6/mTt06tqJF6SjtqfQBPI+S4vSODOlwHWYdAsXCp
tVs/7z4sF4NsCmZ/VnMR0+J82T9hz5pqdYo1mcZ8jq23URqCxJr+Iv8LRgOuQdux
6E/FfSJ+d5ZwM3xjuYA8ZdoBmmKT5fg/zM9kS9eI8R1Ls9kHJIl5StdnB/2OMBoA
JdPjbHf0KJXtMXsoutm+HcfGFLb25c5U3CoRLBymkAhgQVmcUEoFjeKC5ZPgZDCL
0NbH6fkQbGdWgoWPaBZjShfseJcC13q0UG2AAwtuSrvkPYWjyWCpJkeWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEIHlJ8X5abAvTqarZlZ3q2lh3sMB8GA1UdIwQY
MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt
OTczNDgzMzZmMzNhLzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh
LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlSRdFva
raa66KBHQTqH1fmNmwgkz3hJYuXB54o1kNfODcRi00ICWTjuL0Y2FpIeYRqnwXhb
ng29oS+NaRzqWgGLBNMKg1DX/+kcvqA18biJlQHQYb3WIu1yCpOBfxrm0gU84Npa
5YTaPtimKcusjH/aP+N4e8MX92I+N3gg4TD6xCoNp+OjtRy0Oev+Hy5M47M/TFTT
zyen50DHnaVY45u1EPuarWg10VS88fsFuVeEJyY70cQyq9T8WWJt+VyQIEtAUSsZ
m+MoxQYFkBM+pxkybN4551MRr1nNMdmWDg7cC8aUMJ70D/AlnEh/4RU8aB1264hv
9pDXMutbq5DtJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:25 2025 by rpki-client