Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: q3AOzD/3aSNNfJponLME3bnyRImH1lTrqeV4h5a3jdQ=
Subject key identifier: EC:81:40:5D:12:B1:CE:4F:3B:13:78:49:20:EC:28:27:AD:92:DA:AC
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0198D5BBB1E7DF09EBF8464167A7B570568B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 0577
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: NkuRwh5W7H5wWwycSUUobR0vIOAbSW/oyH85XVU6TOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b1:e7:df:09:eb:f8:46:41:67:a7:b5:70:56:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=ec81405d12b1ce4f3b13784920ec2827ad92daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:49:ad:b9:f4:16:9f:22:c1:11:95:a2:d9:
b8:b0:5b:04:38:b7:e9:29:8b:63:53:e5:41:e2:2e:
e8:83:84:20:d0:a7:26:47:62:72:36:e8:04:d7:f0:
7d:86:dc:6f:82:18:d9:f8:c2:d5:ca:fb:8f:1b:a7:
7e:f1:de:d3:26:f2:33:60:b2:89:25:15:56:11:11:
a1:d4:05:42:96:42:37:cc:f2:1f:e1:5e:91:cb:fc:
61:46:09:4e:73:9f:70:66:b5:49:95:26:76:72:9b:
98:db:2d:01:e3:40:15:38:54:d0:b2:3f:6e:1d:9f:
84:96:8a:36:54:1b:cc:93:d9:da:03:ab:41:88:46:
3e:4c:b4:bc:80:7c:89:0e:6e:16:d8:83:15:3a:6b:
74:d1:d6:00:0a:ff:47:a5:63:05:02:de:a0:82:e5:
c0:43:89:f0:e9:81:e9:2c:7d:76:0c:d9:e5:df:ca:
6b:70:c3:be:40:c6:3d:db:d4:29:f8:69:2e:81:3d:
53:a0:55:94:f4:e1:a2:53:b5:1b:8c:c8:23:00:e3:
3e:2c:28:1f:d2:17:db:ac:e1:63:cc:00:98:69:f7:
7c:2f:42:46:03:a9:0a:69:28:45:62:7c:fc:d1:00:
be:aa:40:0b:93:35:eb:f0:c9:46:87:16:e4:f6:9e:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:81:40:5D:12:B1:CE:4F:3B:13:78:49:20:EC:28:27:AD:92:DA:AC
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:1d:50:cc:f4:8d:1a:e4:c3:5b:f9:69:45:c3:fb:c7:b6:
4a:be:d5:ab:20:b4:97:d6:db:03:52:06:8a:c4:3f:25:f6:e1:
19:30:89:34:8e:14:94:6f:68:c0:0b:73:69:15:54:44:a8:21:
18:19:84:e3:cc:31:4f:e5:96:e8:79:9e:ac:59:a8:66:57:12:
78:ec:d5:09:3f:4e:fd:c5:1c:ad:81:98:72:e6:31:74:94:03:
28:00:b2:89:ce:1d:d7:be:77:c6:cb:7d:85:03:b2:2f:4d:e0:
25:af:9c:01:8a:2a:f9:80:d8:5b:50:11:fb:c7:54:fb:97:65:
3c:bb:38:67:2f:93:23:d7:84:5d:bc:ac:60:0c:4b:60:0e:a7:
d2:0b:f9:c9:8d:90:42:b7:2c:2f:a8:ea:59:1b:89:83:f2:44:
40:4d:41:b7:ce:c2:1d:61:85:a2:b1:3d:cc:95:41:25:b3:69:
e7:5a:54:af:fb:b3:b5:f2:9e:a5:45:0e:81:06:b6:7a:5f:53:
72:c4:59:00:af:53:50:24:55:ff:13:6a:4b:f5:9d:be:80:b3:
d9:39:ec:72:8f:64:86:ba:e8:0f:7d:6d:f9:5b:eb:14:26:9e:
81:41:5c:16:ec:6b:d2:a3:8b:1f:a2:95:57:55:33:4b:8d:a5:
fc:bb:06:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7Hn3wnr+EZBZ6e1cFaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjUwODIzMDcwMTQ0WhcNMjUwODI0MDcwMTQ0WjAzMTEwLwYDVQQD
EyhlYzgxNDA1ZDEyYjFjZTRmM2IxMzc4NDkyMGVjMjgyN2FkOTJkYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMRJrbn0Fp8iwRGVotm4sFsEOLfp
KYtjU+VB4i7og4Qg0KcmR2JyNugE1/B9htxvghjZ+MLVyvuPG6d+8d7TJvIzYLKJ
JRVWERGh1AVClkI3zPIf4V6Ry/xhRglOc59wZrVJlSZ2cpuY2y0B40AVOFTQsj9u
HZ+Eloo2VBvMk9naA6tBiEY+TLS8gHyJDm4W2IMVOmt00dYACv9HpWMFAt6gguXA
Q4nw6YHpLH12DNnl38prcMO+QMY929Qp+GkugT1ToFWU9OGiU7UbjMgjAOM+LCgf
0hfbrOFjzACYafd8L0JGA6kKaShFYnz80QC+qkALkzXr8MlGhxbk9p44fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyBQF0Ssc5POxN4SSDsKCetktqsMB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfsdUMz0
jRrkw1v5aUXD+8e2Sr7VqyC0l9bbA1IGisQ/JfbhGTCJNI4UlG9owAtzaRVURKgh
GBmE48wxT+WW6HmerFmoZlcSeOzVCT9O/cUcrYGYcuYxdJQDKACyic4d1753xst9
hQOyL03gJa+cAYoq+YDYW1AR+8dU+5dlPLs4Zy+TI9eEXbysYAxLYA6n0gv5yY2Q
QrcsL6jqWRuJg/JEQE1Bt87CHWGForE9zJVBJbNp51pUr/uztfKepUUOgQa2el9T
csRZAK9TUCRV/xNqS/WdvoCz2Tnsco9khrroD31t+VvrFCaegUFcFuxr0qOLH6KV
V1UzS42l/LsGeA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:02 2025 by rpki-client