Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier: QV4rFhMV2R9Oc/QKr4xRHm0WSXi5GCDfTxcszVanoUI=
Subject key identifier: 61:29:2D:84:02:EF:A6:7F:2C:A0:83:0E:C2:9C:B2:01:D3:41:9E:2F
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 0197B6A133A679D346A3BD5C8B2B2258B2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number: 0A31
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: RTNUD0L6Fnjp4jK6gvDYpQCSyHs0qi65UHDJoDntReg=)
3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:33:a6:79:d3:46:a3:bd:5c:8b:2b:22:58:b2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=61292d8402efa67f2ca0830ec29cb201d3419e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:69:2b:ee:3b:19:9b:3f:6e:e9:3e:dd:fb:
16:ff:8a:52:f8:c2:6e:a1:f4:34:99:99:c6:13:8f:
ba:6f:9e:fa:f6:75:d0:0f:a5:76:88:bd:f6:b6:bb:
ce:de:a4:65:92:a9:83:34:01:e5:a0:c3:08:1f:2c:
1d:60:4d:9b:8c:8c:13:f8:fb:bf:56:49:ec:fa:be:
9b:59:b0:f5:a7:e7:6a:30:f9:b6:76:3d:13:6c:0a:
26:01:f4:7a:9e:59:80:02:44:34:f3:f5:44:1b:b7:
22:04:9b:e9:48:a9:d6:bb:5b:9e:b2:83:50:c4:e9:
2c:32:95:80:b1:0d:25:37:9b:76:1e:f1:04:e4:af:
ff:57:21:48:e9:6b:8b:b4:57:b9:11:7a:b2:13:90:
67:5b:c1:46:a7:2c:fa:9a:ec:c3:23:ce:aa:90:32:
3b:36:80:cb:08:22:55:10:ea:46:c7:5a:79:a0:de:
38:36:e4:ae:0c:2a:2a:9c:42:14:e4:c4:cc:40:e8:
f9:5f:9a:7c:02:ce:84:34:c0:b2:fd:65:7b:00:2f:
22:9b:bc:bb:14:48:5e:df:6c:85:28:df:a5:08:b5:
d4:19:cf:a8:43:63:42:40:28:6e:8a:ac:c9:5a:76:
51:5e:a0:05:b9:f1:c9:ce:2d:e1:5c:f9:cc:b3:ce:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:2D:84:02:EF:A6:7F:2C:A0:83:0E:C2:9C:B2:01:D3:41:9E:2F
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:4a:2d:4e:80:b1:5b:25:72:f6:ff:49:ab:e1:a8:aa:46:
34:82:26:b1:b8:2c:f9:e4:bf:ad:22:06:f7:1b:2d:a6:27:3c:
a6:17:e6:f2:80:5d:64:f3:71:2e:c8:5b:fe:8b:9c:eb:9a:05:
51:5e:78:db:cc:38:53:da:89:ce:4d:18:c9:8c:55:38:ec:84:
b1:6e:26:28:7e:fb:e2:6d:02:4b:d7:60:74:f5:17:54:11:27:
33:9f:f2:54:7f:eb:df:b6:88:04:8b:c7:e1:6c:5f:eb:c2:be:
0e:52:59:93:de:a7:df:44:72:48:83:7d:ed:45:c2:82:04:ef:
ec:91:b6:1c:d0:ad:01:da:29:a1:97:cc:75:8b:8f:93:8b:60:
04:f4:11:02:d3:17:44:88:aa:df:f0:99:17:ff:fc:72:23:33:
3a:19:95:3c:3c:3b:0a:23:39:35:73:86:23:e5:4e:2a:b2:a9:
61:87:f7:75:71:45:21:a6:2d:0d:0c:67:86:88:ef:24:2f:b8:
72:6f:9b:a2:e4:99:e0:df:df:ff:4c:d8:e8:3d:af:8e:f1:7b:
f5:8b:20:56:ff:e3:35:18:64:d6:c3:2a:a6:0c:89:d9:f7:a6:
e0:48:0e:b4:be:b1:03:6d:6b:dd:8b:59:9e:ae:2c:e8:72:38:
b0:e0:e6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTOmedNGo71ciysiWLLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1
YjcyZTEwHhcNMjUwNjI4MTMwMTQ3WhcNMjUwNjI5MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg2MTI5MmQ4NDAyZWZhNjdmMmNhMDgzMGVjMjljYjIwMWQzNDE5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VFpK+47GZs/buk+3fsW/4pS+MJu
ofQ0mZnGE4+6b5769nXQD6V2iL32trvO3qRlkqmDNAHloMMIHywdYE2bjIwT+Pu/
Vkns+r6bWbD1p+dqMPm2dj0TbAomAfR6nlmAAkQ08/VEG7ciBJvpSKnWu1uesoNQ
xOksMpWAsQ0lN5t2HvEE5K//VyFI6WuLtFe5EXqyE5BnW8FGpyz6muzDI86qkDI7
NoDLCCJVEOpGx1p5oN44NuSuDCoqnEIU5MTMQOj5X5p8As6ENMCy/WV7AC8im7y7
FEhe32yFKN+lCLXUGc+oQ2NCQChuiqzJWnZRXqAFufHJzi3hXPnMs87nDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEpLYQC76Z/LKCDDsKcsgHTQZ4vMB8GA1UdIwQY
MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt
NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl
LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqtKLU6A
sVslcvb/SavhqKpGNIImsbgs+eS/rSIG9xstpic8phfm8oBdZPNxLshb/ouc65oF
UV5428w4U9qJzk0YyYxVOOyEsW4mKH774m0CS9dgdPUXVBEnM5/yVH/r37aIBIvH
4Wxf68K+DlJZk96n30RySIN97UXCggTv7JG2HNCtAdopoZfMdYuPk4tgBPQRAtMX
RIiq3/CZF//8ciMzOhmVPDw7CiM5NXOGI+VOKrKpYYf3dXFFIaYtDQxnhojvJC+4
cm+bouSZ4N/f/0zY6D2vjvF79YsgVv/jNRhk1sMqpgyJ2fem4EgOtL6xA21r3YtZ
nq4s6HI4sODm0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client