Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: XgrRrmAHPU7y4cRXjpVEfE3ROz204BhxJhipUqicppw=
Subject key identifier: BD:52:3C:8A:06:91:D5:4A:7C:44:E5:C7:A3:41:74:BB:BB:4C:CC:6F
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 0197B820EB113CB7EC6464A4A5708D12410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 15C8
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: DNtnbvJyFX3vGs4Q6JEG_ZsHFQg.roa (hash: K+AhFAZDpy/NkiLJfIEeAFYckiqA8OuE/Pb388Cb1M4=)
2: VdxEEuOoMeJjzuf1tOIRu5y_cuY.roa (hash: AIf8SEV2T1VKgT7ROpLNSZ5BKqfUXSKlfSWrsWX9IKQ=)
3: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: B0eA21BvxLgSlgfc7/RF5foBjJu569SfwZ/PYIzlD50=)
5: wGg8NKByP-F8-49JwKsHJej-0ks.roa (hash: 6NeYKXnfUfbfp0JVHojhaiZ+F9KjenhMqxsTxiHArrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:eb:11:3c:b7:ec:64:64:a4:a5:70:8d:12:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=bd523c8a0691d54a7c44e5c7a34174bbbb4ccc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:2f:12:81:96:cb:9f:75:8a:93:12:79:59:
13:9e:11:1e:67:d2:a8:12:e6:be:d8:02:82:15:79:
2c:ae:5a:a4:d4:88:17:b7:6a:58:b7:92:a0:6a:13:
4d:b4:3b:17:fa:63:6e:d0:a3:e7:fe:72:b2:99:a9:
90:4b:54:d7:ba:d4:0e:2a:bd:89:21:21:47:2b:17:
54:9a:2c:17:77:6a:90:3d:ec:d0:96:c3:2f:cd:7a:
5b:33:6b:97:c0:b3:56:85:2f:1f:94:4e:16:27:1f:
5a:4b:07:64:db:94:59:13:13:0c:7c:9c:bc:c1:49:
ad:72:4c:09:d0:be:fc:10:e0:42:ca:80:94:a4:52:
55:e3:9e:16:14:e4:bd:fa:16:49:77:33:c7:0b:30:
10:1c:0d:ba:97:60:c4:3c:8f:75:a6:2e:d3:dc:67:
89:40:83:c0:cc:50:13:28:7b:5d:24:01:fe:2d:54:
99:55:eb:46:f8:ab:09:e7:be:23:6f:6b:dd:31:ab:
b4:51:4f:22:0d:50:a2:83:a3:5d:fd:d8:78:5e:a7:
36:d1:7d:4c:34:57:63:05:fe:96:06:cb:87:74:c8:
cc:85:f9:5a:d1:1a:44:75:ca:75:c6:b0:cb:34:af:
8a:e7:85:0c:7c:c1:19:e4:1f:f3:c2:e9:5b:87:c8:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:3C:8A:06:91:D5:4A:7C:44:E5:C7:A3:41:74:BB:BB:4C:CC:6F
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1b:28:ec:db:67:38:0b:9c:92:9f:77:f6:d9:34:86:a5:e4:
37:6e:bb:48:59:b1:fe:60:d8:e7:03:03:1e:d6:79:92:a9:96:
6c:89:6c:78:1c:17:72:14:1e:4f:5a:5b:1a:ac:09:b6:81:55:
4e:db:04:af:77:ba:b9:37:36:bf:ea:99:70:19:60:77:35:80:
44:2b:d3:cf:db:30:6c:5a:fb:a9:81:5c:43:f0:3e:48:41:f4:
ca:08:25:8e:1a:72:69:39:fb:fd:c3:9f:17:fc:b3:9a:4b:09:
e5:df:f3:3c:f2:39:09:ef:cf:93:85:55:8c:9f:84:ed:66:40:
03:8d:ad:f5:6f:e4:b1:84:db:e2:fe:e3:fd:4a:9a:ab:9c:e5:
6f:6f:d0:2a:58:df:ba:61:19:f6:c1:2e:43:1e:65:f4:5d:9d:
d4:1c:07:73:3c:ee:21:16:51:74:f9:66:25:77:39:57:57:d6:
5c:2e:78:23:ed:1c:75:1d:4b:2c:7c:52:f7:b2:7c:84:27:6d:
58:f3:35:8e:9a:8c:5e:9c:7b:42:55:c9:03:ca:39:34:07:6f:
95:e0:ae:36:ae:88:97:9a:7f:1b:b6:e7:49:fa:b2:3c:e7:4b:
39:64:e2:73:4d:94:b4:b2:78:0b:2e:fb:98:1d:ac:02:b3:d1:
e0:4a:a7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IOsRPLfsZGSkpXCNEkELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx
ZTU4NTAwHhcNMjUwNjI4MjAwMDU0WhcNMjUwNjI5MjAwMDU0WjAzMTEwLwYDVQQD
EyhiZDUyM2M4YTA2OTFkNTRhN2M0NGU1YzdhMzQxNzRiYmJiNGNjYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kgvEoGWy591ipMSeVkTnhEeZ9Ko
Eua+2AKCFXksrlqk1IgXt2pYt5KgahNNtDsX+mNu0KPn/nKymamQS1TXutQOKr2J
ISFHKxdUmiwXd2qQPezQlsMvzXpbM2uXwLNWhS8flE4WJx9aSwdk25RZExMMfJy8
wUmtckwJ0L78EOBCyoCUpFJV454WFOS9+hZJdzPHCzAQHA26l2DEPI91pi7T3GeJ
QIPAzFATKHtdJAH+LVSZVetG+KsJ574jb2vdMau0UU8iDVCig6Nd/dh4Xqc20X1M
NFdjBf6WBsuHdMjMhfla0RpEdcp1xrDLNK+K54UMfMEZ5B/zwulbh8hTnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1SPIoGkdVKfETlx6NBdLu7TMxvMB8GA1UdIwQY
MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt
YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw
LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxso7Ntn
OAuckp939tk0hqXkN267SFmx/mDY5wMDHtZ5kqmWbIlseBwXchQeT1pbGqwJtoFV
TtsEr3e6uTc2v+qZcBlgdzWARCvTz9swbFr7qYFcQ/A+SEH0yggljhpyaTn7/cOf
F/yzmksJ5d/zPPI5Ce/Pk4VVjJ+E7WZAA42t9W/ksYTb4v7j/Uqaq5zlb2/QKljf
umEZ9sEuQx5l9F2d1BwHczzuIRZRdPlmJXc5V1fWXC54I+0cdR1LLHxS97J8hCdt
WPM1jpqMXpx7QlXJA8o5NAdvleCuNq6Il5p/G7bnSfqyPOdLOWTic02UtLJ4Cy77
mB2sArPR4Eqnng==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:11 2025 by rpki-client