Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: vymJFsnLMUDQr/PzIoX+7KShFpCMocKYUfTTOTE/N/4=
Subject key identifier: 10:9A:CB:61:9D:4D:7D:CF:B5:46:39:B0:BF:D0:55:45:52:0C:C9:D5
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 0197B7EA4D938D4C600D3C5E1A34B110AF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: hG03rsVgyrKZzBdtpeZNV4Pg9Vtx8h1wPVuBIVpyVzQ=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4d:93:8d:4c:60:0d:3c:5e:1a:34:b1:10:af:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=109acb619d4d7dcfb54639b0bfd05545520cc9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:f1:5d:e2:ac:20:34:3a:c1:8a:2a:8a:48:
c8:39:ad:01:21:5d:48:2e:7f:47:7a:ed:75:5a:03:
e4:ac:7d:37:56:2e:75:e7:44:33:cd:25:fa:06:a2:
af:fe:43:05:4e:bb:13:a6:25:5b:c1:01:ff:d4:f0:
6c:f9:1e:36:21:69:12:2f:a6:57:d6:30:68:6e:fc:
01:86:97:ce:dc:64:76:1f:34:83:8d:fa:e4:d0:dd:
70:31:fc:63:91:39:f0:d8:6e:45:fd:32:6e:a5:ef:
36:4c:cb:0f:01:c7:f1:47:6b:9a:5e:49:e0:75:f4:
02:10:70:4f:ec:b9:6e:fc:47:3f:20:a8:12:73:96:
69:4a:f8:68:82:2b:5f:9f:34:d9:aa:6a:17:28:42:
ca:7a:7a:a5:ab:4e:23:dd:14:18:93:13:ce:35:77:
59:24:59:57:32:ea:b9:85:ac:e1:7e:65:bb:ea:05:
80:b3:ef:6a:63:36:1b:01:41:9c:35:8f:f3:7b:eb:
89:0a:a5:bd:3f:31:c6:c6:e2:18:02:ec:7f:2d:50:
a2:c8:90:6f:d1:2b:2f:9d:0e:24:75:e9:24:6f:0a:
4e:05:a9:a6:7d:7b:15:0e:22:8a:d8:45:1e:ed:37:
54:99:51:a7:50:fa:82:87:d6:64:0f:36:c9:66:e2:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:CB:61:9D:4D:7D:CF:B5:46:39:B0:BF:D0:55:45:52:0C:C9:D5
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:a1:22:41:cb:48:2e:98:e7:3a:e0:9e:77:ac:2e:bf:04:
1e:80:f1:f8:d5:26:e6:5f:22:71:b5:72:f7:ec:40:fc:de:a4:
dc:11:7f:82:67:39:a2:fe:09:15:8c:b0:88:2a:1f:7d:bd:45:
5e:b9:c6:5e:14:3c:ce:96:93:1f:42:46:b8:8c:9c:6f:5d:ef:
27:85:99:45:f6:d4:71:6e:29:21:ee:72:9f:a6:53:d1:4d:ae:
b8:c1:40:8a:97:c2:79:10:39:d5:b0:f4:79:f9:95:c9:79:c2:
86:f0:d2:52:d7:2a:c0:24:a6:95:9c:07:5a:fa:6b:ea:37:b8:
c1:fd:c2:a2:17:25:c1:8e:4f:60:3b:11:5b:7b:7e:8d:1e:b4:
7e:05:70:23:88:fa:ab:c9:77:dd:78:a2:29:ad:e3:42:51:f9:
61:d4:9a:d0:f1:71:72:db:01:99:09:46:69:c2:8c:2a:de:eb:
60:ec:c6:f1:f8:f8:89:38:10:eb:be:93:12:32:0a:10:4c:83:
56:cd:1c:6e:c6:22:9c:cd:3b:52:3a:aa:b4:f0:32:59:79:6f:
36:15:fa:53:23:21:9d:b7:7a:6a:b8:01:60:6c:a7:37:9a:f2:
5c:a5:7c:4a:ba:d2:1f:d6:5c:c1:4f:db:0f:d5:3c:81:8c:d5:
ab:61:f8:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36k2TjUxgDTxeGjSxEK8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjUwNjI4MTkwMTE1WhcNMjUwNjI5MTkwMTE1WjAzMTEwLwYDVQQD
EygxMDlhY2I2MTlkNGQ3ZGNmYjU0NjM5YjBiZmQwNTU0NTUyMGNjOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixTxXeKsIDQ6wYoqikjIOa0BIV1I
Ln9Heu11WgPkrH03Vi5150QzzSX6BqKv/kMFTrsTpiVbwQH/1PBs+R42IWkSL6ZX
1jBobvwBhpfO3GR2HzSDjfrk0N1wMfxjkTnw2G5F/TJupe82TMsPAcfxR2uaXkng
dfQCEHBP7Llu/Ec/IKgSc5ZpSvhogitfnzTZqmoXKELKenqlq04j3RQYkxPONXdZ
JFlXMuq5hazhfmW76gWAs+9qYzYbAUGcNY/ze+uJCqW9PzHGxuIYAux/LVCiyJBv
0SsvnQ4kdekkbwpOBammfXsVDiKK2EUe7TdUmVGnUPqCh9ZkDzbJZuLqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCay2GdTX3PtUY5sL/QVUVSDMnVMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTKhIkHL
SC6Y5zrgnnesLr8EHoDx+NUm5l8icbVy9+xA/N6k3BF/gmc5ov4JFYywiCoffb1F
XrnGXhQ8zpaTH0JGuIycb13vJ4WZRfbUcW4pIe5yn6ZT0U2uuMFAipfCeRA51bD0
efmVyXnChvDSUtcqwCSmlZwHWvpr6je4wf3CohclwY5PYDsRW3t+jR60fgVwI4j6
q8l33XiiKa3jQlH5YdSa0PFxctsBmQlGacKMKt7rYOzG8fj4iTgQ676TEjIKEEyD
Vs0cbsYinM07UjqqtPAyWXlvNhX6UyMhnbd6argBYGynN5ryXKV8SrrSH9ZcwU/b
D9U8gYzVq2H4NA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:16 2025 by rpki-client