Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json)
Hash identifier: bC7t/NEEOIIpPuFTNhXgXYjeIoduX1nedmIRap2/mWo=
Subject key identifier: 4B:AD:AA:C1:A0:EA:3B:0B:1E:E2:86:01:68:46:38:D2:B6:AA:E6:3F
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial: 0197C3130E6EBD95BFEFA8058E4052D25CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
Manifest number: 99
Signing time: Mon 30 Jun 2025 23:01:35 +0000
Manifest this update: Mon 30 Jun 2025 23:01:35 +0000
Manifest next update: Tue 01 Jul 2025 23:01:35 +0000
Files and hashes: 1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: 8BJEgniZD+LE1Zq6LQcL7cTENpzQM/YCH5X2RnOJA3Y=)
2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:0e:6e:bd:95:bf:ef:a8:05:8e:40:52:d2:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Validity
Not Before: Jun 30 23:01:35 2025 GMT
Not After : Jul 1 23:01:35 2025 GMT
Subject: CN=4badaac1a0ea3b0b1ee28601684638d2b6aae63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:90:5c:d5:5f:df:b3:3d:86:3d:77:2d:e6:
9e:24:92:a6:21:39:21:22:b6:f4:31:f3:6d:b6:35:
ae:ee:70:5e:c5:04:0c:44:97:96:91:79:63:1e:1c:
c3:43:4e:77:3a:d3:73:03:e6:c2:50:ae:67:87:e3:
f5:41:8f:38:7c:0a:fc:77:67:42:fd:a3:fe:67:f6:
5a:0d:29:1f:26:c1:a0:11:3c:68:85:3b:30:bd:5e:
83:18:7e:63:23:a8:14:ab:65:be:07:a7:d0:e5:19:
ae:dd:a4:80:b9:a8:86:82:ad:4c:9d:0a:61:b6:24:
cf:e0:31:d5:84:1e:59:02:bf:0c:e4:e2:4c:e9:2a:
d2:62:c8:53:35:54:ca:3b:3c:af:cc:f4:b6:39:89:
33:47:03:33:43:c6:11:f2:15:de:d5:3e:77:b0:5a:
b6:f5:05:81:31:8c:b8:83:b6:39:53:c1:c5:be:57:
48:85:61:f1:d3:8c:ab:e6:f6:23:4d:39:5a:69:f6:
0b:46:ac:09:26:f5:30:4e:c5:ca:dd:28:9c:31:06:
f5:6f:1c:a8:73:a9:77:ef:8b:e9:5d:ad:33:9b:0d:
1f:39:72:d8:26:d0:0f:bd:eb:cc:d2:f3:e5:6c:74:
a9:0b:50:e3:61:22:9f:11:30:3a:27:f7:b0:84:ab:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:AA:C1:A0:EA:3B:0B:1E:E2:86:01:68:46:38:D2:B6:AA:E6:3F
X509v3 Authority Key Identifier:
keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:76:55:9f:f7:4d:45:75:5c:f7:c3:cc:4d:7d:5f:27:fd:
a9:35:81:fe:26:89:7c:87:49:80:30:0b:15:ff:e0:7c:01:fe:
10:95:cb:f4:1a:58:f6:b3:66:d0:e0:92:09:61:31:6c:5e:9e:
8c:38:3b:87:8e:0c:47:ba:4d:f2:5f:88:65:21:61:e8:db:4b:
03:5f:7f:f7:a1:f6:67:9e:e5:89:7e:e2:73:6e:6c:18:c7:0d:
fc:94:28:9b:c6:2d:af:a8:43:1c:df:94:76:ef:6a:fa:f3:d0:
0e:18:5f:55:60:e0:7f:aa:4e:33:26:d9:f0:7d:b6:7c:0e:bb:
b6:ee:28:3b:b0:fa:51:d8:ad:79:97:bd:b9:ae:b8:7a:e6:33:
65:65:59:fe:24:28:b5:2e:50:4b:52:12:18:95:e0:7a:26:bf:
89:6f:0d:7d:7e:15:6f:4f:66:1c:c4:fc:3e:5f:50:f3:58:60:
22:12:fe:40:70:c1:cf:94:9f:29:03:60:6b:7a:ba:a8:76:f6:
53:7f:6b:27:c1:e7:e8:b5:f7:74:7e:6b:61:66:a7:be:f5:d0:
83:ec:cd:bf:d7:b3:ff:32:f2:28:2a:89:39:be:6d:57:74:14:
01:e3:79:f1:dc:d6:0e:af:14:fe:20:0c:f0:30:a8:d8:4c:60:
1c:49:a1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDEw5uvZW/76gFjkBS0lzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5
Y2ViNmUwHhcNMjUwNjMwMjMwMTM1WhcNMjUwNzAxMjMwMTM1WjAzMTEwLwYDVQQD
Eyg0YmFkYWFjMWEwZWEzYjBiMWVlMjg2MDE2ODQ2MzhkMmI2YWFlNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRyQXNVf37M9hj13LeaeJJKmITkh
Irb0MfNttjWu7nBexQQMRJeWkXljHhzDQ053OtNzA+bCUK5nh+P1QY84fAr8d2dC
/aP+Z/ZaDSkfJsGgETxohTswvV6DGH5jI6gUq2W+B6fQ5Rmu3aSAuaiGgq1MnQph
tiTP4DHVhB5ZAr8M5OJM6SrSYshTNVTKOzyvzPS2OYkzRwMzQ8YR8hXe1T53sFq2
9QWBMYy4g7Y5U8HFvldIhWHx04yr5vYjTTlaafYLRqwJJvUwTsXK3SicMQb1bxyo
c6l374vpXa0zmw0fOXLYJtAPvevM0vPlbHSpC1DjYSKfETA6J/ewhKvLrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEutqsGg6jsLHuKGAWhGONK2quY/MB8GA1UdIwQY
MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt
MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl
LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7B2VZ/3
TUV1XPfDzE19Xyf9qTWB/iaJfIdJgDALFf/gfAH+EJXL9BpY9rNm0OCSCWExbF6e
jDg7h44MR7pN8l+IZSFh6NtLA19/96H2Z57liX7ic25sGMcN/JQom8Ytr6hDHN+U
du9q+vPQDhhfVWDgf6pOMybZ8H22fA67tu4oO7D6UditeZe9ua64euYzZWVZ/iQo
tS5QS1ISGJXgeia/iW8NfX4Vb09mHMT8Pl9Q81hgIhL+QHDBz5SfKQNga3q6qHb2
U39rJ8Hn6LX3dH5rYWanvvXQg+zNv9ez/zLyKCqJOb5tV3QUAeN58dzWDq8U/iAM
8DCo2ExgHEmhrg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:20 2025 by rpki-client