Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: BeFw5Yv0eLI9hhpuYTcOjT/hoKcFVWBrJqOfgCOmEgs=
Subject key identifier: 0E:A6:CB:D4:46:42:20:BC:B2:A0:7A:8B:13:87:0A:1C:3F:36:7C:88
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 0197B820D84FDEFAA3D6F0F7F22C3A3B0273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: /4yjIh6rWMqHpTzfwKE2m48nXjHnMfV1MC0bFB8Bw3o=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d8:4f:de:fa:a3:d6:f0:f7:f2:2c:3a:3b:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=0ea6cbd4464220bcb2a07a8b13870a1c3f367c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:0d:3f:f4:03:f9:a5:21:3c:b3:58:89:a8:
bc:6c:80:72:c2:26:f9:b0:5e:ce:98:52:b8:c2:ed:
8c:7f:dc:4c:82:e7:ee:67:84:8a:24:3a:df:60:71:
c1:82:6c:af:3b:6b:96:f6:63:a3:c9:4c:a1:e2:c9:
cb:c5:07:30:ea:1b:55:6d:7b:7e:4b:6c:03:e0:de:
0a:e9:cb:02:4f:ec:04:4e:4b:a4:ae:df:2c:e5:2f:
cf:be:98:d3:9b:75:14:09:6f:39:d6:70:9b:ee:7d:
1b:95:0d:0f:ed:d8:e8:1b:6c:49:31:db:7b:b9:6a:
f9:fb:c9:a4:98:79:df:99:e3:76:f3:80:63:09:3c:
f9:ea:69:0e:56:34:f3:bb:a7:c8:5f:f2:6f:aa:b3:
da:2f:44:f8:ad:e9:c9:d8:b7:a6:e6:6a:78:0a:0b:
6d:ea:84:41:c9:49:3c:a8:31:f8:83:9f:de:b2:84:
f9:06:09:2c:a6:f9:af:1e:75:b7:e4:e1:77:4e:93:
ec:c5:53:e7:b9:f5:01:9d:c9:b2:e5:dc:fe:51:50:
21:6f:ad:cc:32:d7:d6:73:b5:04:77:b3:05:be:d5:
8c:d3:b7:a4:8b:4b:7c:76:9b:39:5b:54:90:45:4c:
b3:ce:4a:5a:d0:c4:58:75:cc:12:07:7b:43:9c:cb:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:CB:D4:46:42:20:BC:B2:A0:7A:8B:13:87:0A:1C:3F:36:7C:88
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:17:2f:67:33:b1:d0:25:34:d5:f0:93:c1:b6:44:b0:0d:a7:
6b:74:ee:39:89:27:ad:3b:05:ac:a9:00:39:ac:c1:2c:c4:6b:
a9:90:af:0c:ba:a3:99:56:e9:c9:b9:50:7a:d3:e0:91:40:d1:
d9:82:6b:e7:7e:7d:6c:62:d9:86:f2:10:a8:7d:0d:ca:e5:45:
fa:35:18:74:87:7d:08:07:3e:a6:58:25:2a:a3:c4:80:9c:7e:
f6:f4:13:d6:3f:8f:bf:ac:9c:71:26:fd:e2:3d:4b:24:60:2b:
a0:37:26:f4:bc:f1:11:78:65:f3:b7:d8:29:09:fd:6b:1e:f8:
7b:02:77:14:15:c0:98:f7:b4:4c:75:f4:86:54:6f:41:6a:e5:
45:5a:b8:b4:c8:ef:ac:c7:c0:c8:52:a5:b1:9b:67:58:b2:65:
a2:ff:e6:33:c5:ef:8a:ab:5d:38:ad:f7:5f:80:f6:fa:d9:55:
f5:88:c9:a1:87:e9:28:7c:37:d7:29:02:00:d9:83:bb:56:22:
0e:58:c2:e3:47:ce:d6:a5:ab:f7:e0:1f:c3:d5:e1:84:9d:38:
4e:e4:93:8e:5a:ad:d2:f4:ff:49:ab:d1:c0:28:ca:e0:5e:c0:
9a:d9:ea:24:fe:eb:24:99:61:87:ec:0f:fc:55:cf:fc:6f:e9:
d6:22:fa:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4INhP3vqj1vD38iw6OwJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUwNjI4MjAwMDQ5WhcNMjUwNjI5MjAwMDQ5WjAzMTEwLwYDVQQD
EygwZWE2Y2JkNDQ2NDIyMGJjYjJhMDdhOGIxMzg3MGExYzNmMzY3Yzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WcNP/QD+aUhPLNYiai8bIBywib5
sF7OmFK4wu2Mf9xMgufuZ4SKJDrfYHHBgmyvO2uW9mOjyUyh4snLxQcw6htVbXt+
S2wD4N4K6csCT+wETkukrt8s5S/PvpjTm3UUCW851nCb7n0blQ0P7djoG2xJMdt7
uWr5+8mkmHnfmeN284BjCTz56mkOVjTzu6fIX/JvqrPaL0T4renJ2Lem5mp4Cgtt
6oRByUk8qDH4g5/esoT5BgkspvmvHnW35OF3TpPsxVPnufUBncmy5dz+UVAhb63M
MtfWc7UEd7MFvtWM07eki0t8dps5W1SQRUyzzkpa0MRYdcwSB3tDnMvQQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6my9RGQiC8sqB6ixOHChw/NnyIMB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBcvZzOx
0CU01fCTwbZEsA2na3TuOYknrTsFrKkAOazBLMRrqZCvDLqjmVbpyblQetPgkUDR
2YJr5359bGLZhvIQqH0NyuVF+jUYdId9CAc+plglKqPEgJx+9vQT1j+Pv6yccSb9
4j1LJGAroDcm9LzxEXhl87fYKQn9ax74ewJ3FBXAmPe0THX0hlRvQWrlRVq4tMjv
rMfAyFKlsZtnWLJlov/mM8XviqtdOK33X4D2+tlV9YjJoYfpKHw31ykCANmDu1Yi
DljC40fO1qWr9+Afw9XhhJ04TuSTjlqt0vT/SavRwCjK4F7AmtnqJP7rJJlhh+wP
/FXP/G/p1iL6WA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:03 2025 by rpki-client