Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: m0z2Ig7HVEsON8zAxxed5a9PJcGKIIitej4M3W1YRAw=
Subject key identifier: EC:84:FC:85:B1:8E:00:B6:08:7A:87:8A:17:CF:C6:59:11:EB:A2:56
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 0198D66083EF251976BD303421262DC2B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: 0K+n3XUIWmrTbot9+5403uNDOzIedU83pqX3QZBN2Lw=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:83:ef:25:19:76:bd:30:34:21:26:2d:c2:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=ec84fc85b18e00b6087a878a17cfc65911eba256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:10:fe:00:00:7b:fd:12:9e:f6:fc:b6:d6:
2b:de:14:7a:51:2a:09:a0:b3:c9:4a:1d:3c:9b:6d:
9e:c7:d5:cd:52:dc:3b:98:3e:08:83:af:70:9f:af:
ad:04:c8:43:04:44:82:4d:f8:d4:ce:b0:e3:09:13:
03:8f:49:f1:89:d3:43:6e:c0:72:d6:01:50:56:5d:
60:22:66:dc:27:93:06:de:b5:5c:f7:9a:35:a6:23:
8e:70:6d:bc:c4:7b:03:62:9e:b3:e9:08:a8:e2:47:
c5:c3:45:bc:9b:75:a8:e0:ff:20:3c:69:fc:4f:79:
fa:2f:f4:ae:19:41:15:3a:10:3c:88:bb:6d:eb:a5:
a2:ab:25:53:79:70:d7:b3:5b:30:f0:0e:d5:88:8a:
67:c4:04:78:46:5a:e9:d8:a8:d0:ec:c4:7d:2c:b6:
b2:de:d1:dc:a3:13:da:66:2c:4f:44:e0:5d:fe:28:
b7:d2:74:79:40:94:31:bf:d1:8e:79:47:fe:ba:b1:
79:db:42:de:41:28:97:bd:8e:51:13:fe:93:3c:ec:
d8:ec:57:79:df:6b:a0:47:5b:3b:5e:78:fc:2e:21:
b2:33:0f:93:b5:33:4e:36:6f:cb:52:6f:0d:30:a7:
cc:1e:07:58:27:92:91:a8:78:c1:10:02:7b:7d:e8:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:FC:85:B1:8E:00:B6:08:7A:87:8A:17:CF:C6:59:11:EB:A2:56
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b6:c7:65:11:5f:c8:f9:a6:4d:38:f5:75:24:ef:2e:18:ee:
58:40:ad:c4:a7:14:e7:bd:95:bd:3f:09:f9:f5:f0:7e:6b:a5:
8d:1b:21:f6:47:91:bb:07:d0:0d:92:35:bb:38:6f:54:7e:42:
bf:82:3b:33:17:87:f7:c6:34:22:71:9d:65:97:0a:90:08:c6:
ce:21:c9:91:5b:b1:52:19:d6:05:e4:1e:e1:16:6f:7e:84:9f:
47:9c:56:6a:a0:7b:2f:50:a1:26:06:b4:de:6f:da:48:e0:9f:
0c:5d:52:15:6c:c9:80:d8:8a:f7:da:19:11:29:94:ba:e2:a8:
dd:6b:88:f4:1f:d4:3d:59:1a:73:fa:74:4b:ea:99:02:fc:4f:
ac:7b:16:f3:df:6a:9c:12:b8:1a:e5:34:12:3e:37:51:63:26:
fe:dc:36:6a:db:11:10:af:99:d6:d5:53:ba:65:77:30:1b:5d:
3e:9f:2d:9b:61:84:e3:e3:fa:8b:13:92:0b:8a:cd:5b:ae:e9:
ac:70:97:5c:74:69:58:e9:b7:25:29:4a:f5:91:bb:27:d0:17:
ab:a6:34:8d:76:7f:88:4f:47:5c:7d:eb:08:3b:eb:fd:63:36:
41:93:a3:1e:6c:97:5f:8f:cb:f9:1a:80:92:7d:11:7d:0e:8e:
5a:fc:29:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYIPvJRl2vTA0ISYtwrn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj
YzY0YTkwHhcNMjUwODIzMTAwMTQ1WhcNMjUwODI0MTAwMTQ1WjAzMTEwLwYDVQQD
EyhlYzg0ZmM4NWIxOGUwMGI2MDg3YTg3OGExN2NmYzY1OTExZWJhMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwEQ/gAAe/0Snvb8ttYr3hR6USoJ
oLPJSh08m22ex9XNUtw7mD4Ig69wn6+tBMhDBESCTfjUzrDjCRMDj0nxidNDbsBy
1gFQVl1gImbcJ5MG3rVc95o1piOOcG28xHsDYp6z6Qio4kfFw0W8m3Wo4P8gPGn8
T3n6L/SuGUEVOhA8iLtt66WiqyVTeXDXs1sw8A7ViIpnxAR4Rlrp2KjQ7MR9LLay
3tHcoxPaZixPROBd/ii30nR5QJQxv9GOeUf+urF520LeQSiXvY5RE/6TPOzY7Fd5
32ugR1s7Xnj8LiGyMw+TtTNONm/LUm8NMKfMHgdYJ5KRqHjBEAJ7feh81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyE/IWxjgC2CHqHihfPxlkR66JWMB8GA1UdIwQY
MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt
Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi
LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7bHZRFf
yPmmTTj1dSTvLhjuWECtxKcU572VvT8J+fXwfmuljRsh9keRuwfQDZI1uzhvVH5C
v4I7MxeH98Y0InGdZZcKkAjGziHJkVuxUhnWBeQe4RZvfoSfR5xWaqB7L1ChJga0
3m/aSOCfDF1SFWzJgNiK99oZESmUuuKo3WuI9B/UPVkac/p0S+qZAvxPrHsW899q
nBK4GuU0Ej43UWMm/tw2atsREK+Z1tVTumV3MBtdPp8tm2GE4+P6ixOSC4rNW67p
rHCXXHRpWOm3JSlK9ZG7J9AXq6Y0jXZ/iE9HXH3rCDvr/WM2QZOjHmyXX4/L+RqA
kn0RfQ6OWvwppw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:46 2025 by rpki-client