Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: MjS+qPY+ky7ODuniZKv+DVh71ACjZgA8IztYJuFti0w=
Subject key identifier: 7E:BB:72:1C:BC:7B:B4:AA:53:D5:7F:C3:3F:A0:EF:48:A2:1E:D2:7E
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0197B88EEB0793AD669A10BFFA10CD9312E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 12B3
Signing time: Sat 28 Jun 2025 22:01:03 +0000
Manifest this update: Sat 28 Jun 2025 22:01:03 +0000
Manifest next update: Sun 29 Jun 2025 22:01:03 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: qI3AMbXcdETP2VRiDQ7k6IFbDxq4V9RYHXuf2yhzDbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:eb:07:93:ad:66:9a:10:bf:fa:10:cd:93:12:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jun 28 22:01:03 2025 GMT
Not After : Jun 29 22:01:03 2025 GMT
Subject: CN=7ebb721cbc7bb4aa53d57fc33fa0ef48a21ed27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:72:80:ca:92:26:d3:8f:00:8a:ce:52:94:
eb:94:85:f6:2e:f0:16:53:bc:04:df:8e:34:a3:61:
f0:74:13:84:e8:44:2a:8f:ae:f3:e4:24:60:24:34:
0b:f8:47:a2:60:d3:df:f2:33:6f:95:ad:99:17:1e:
46:a4:67:f8:a4:34:41:07:17:ae:72:f9:99:83:05:
1c:03:50:5e:61:73:36:55:d8:ed:c8:ab:e7:40:fc:
b5:a6:46:db:4b:17:d4:eb:a2:d4:54:54:51:c3:8e:
a8:d7:e0:1d:cb:d4:0c:d8:6e:32:c5:46:b6:18:be:
55:e9:45:75:4a:94:75:97:34:02:a0:ab:30:d8:db:
bc:0f:77:c3:94:46:bd:33:8e:ea:4d:5c:74:11:86:
85:35:b8:19:41:de:92:ca:30:97:89:59:9b:59:0d:
65:f3:43:de:66:e5:90:4b:a7:87:57:32:0d:88:10:
ce:dc:66:b4:da:92:b3:0b:c2:9f:a5:3e:3f:ad:ca:
dd:87:d2:97:e9:64:45:aa:19:4a:53:f3:7e:48:4a:
3b:87:9b:f0:4a:49:ea:04:ec:7c:f9:f9:36:6b:a0:
2e:bf:b9:05:6d:72:20:dd:b9:11:de:46:da:39:30:
e4:14:96:31:8b:95:55:15:70:3c:d5:a7:9d:fd:3a:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:72:1C:BC:7B:B4:AA:53:D5:7F:C3:3F:A0:EF:48:A2:1E:D2:7E
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6b:c9:42:ea:c5:cc:dd:1d:f7:03:2a:40:c0:a1:fd:db:a7:
f5:42:94:56:8c:5a:b0:fe:93:81:07:09:cf:94:c6:80:93:c0:
5e:8d:3f:cd:0f:f8:4b:76:e2:7b:c3:14:de:94:8c:60:22:32:
26:b7:1a:5b:1a:63:6b:5e:74:94:60:fe:a8:60:3c:c5:8e:4f:
da:11:cb:e4:3e:1c:39:39:17:a4:e0:1f:c6:7e:6d:a4:73:04:
f6:8d:ae:bf:2e:d7:cf:ea:3f:3b:ef:1c:c6:08:56:d6:1e:9d:
83:47:b1:dd:ad:74:d4:0e:54:a4:3c:7f:0b:e3:d3:da:4a:8f:
a4:12:38:04:fc:5d:0e:b8:85:69:eb:c5:0b:af:ce:36:19:73:
8b:fa:bb:35:fa:fe:47:31:94:2b:49:68:33:a7:ee:0d:f5:15:
72:19:b3:ab:a7:4e:94:fb:9c:fb:0e:53:75:dc:c5:72:39:76:
f9:3b:4f:8a:a7:3f:3a:f5:6a:f7:d4:1b:0b:8b:99:76:40:d4:
17:36:da:e3:9d:a3:a8:27:e4:7d:d9:33:ff:98:62:5e:89:df:
54:c9:10:a2:31:11:ae:28:63:20:7d:86:d7:a6:e3:9d:17:86:
fd:f0:3c:80:02:5e:c9:38:87:f1:a8:e2:b9:8c:4c:3b:ac:56:
1b:8f:68:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jusHk61mmhC/+hDNkxLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUwNjI4MjIwMTAzWhcNMjUwNjI5MjIwMTAzWjAzMTEwLwYDVQQD
Eyg3ZWJiNzIxY2JjN2JiNGFhNTNkNTdmYzMzZmEwZWY0OGEyMWVkMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJZygMqSJtOPAIrOUpTrlIX2LvAW
U7wE3440o2HwdBOE6EQqj67z5CRgJDQL+EeiYNPf8jNvla2ZFx5GpGf4pDRBBxeu
cvmZgwUcA1BeYXM2VdjtyKvnQPy1pkbbSxfU66LUVFRRw46o1+Ady9QM2G4yxUa2
GL5V6UV1SpR1lzQCoKsw2Nu8D3fDlEa9M47qTVx0EYaFNbgZQd6SyjCXiVmbWQ1l
80PeZuWQS6eHVzINiBDO3Ga02pKzC8KfpT4/rcrdh9KX6WRFqhlKU/N+SEo7h5vw
SknqBOx8+fk2a6Auv7kFbXIg3bkR3kbaOTDkFJYxi5VVFXA81aed/ToKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH67chy8e7SqU9V/wz+g70iiHtJ+MB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGvJQurF
zN0d9wMqQMCh/dun9UKUVoxasP6TgQcJz5TGgJPAXo0/zQ/4S3bie8MU3pSMYCIy
JrcaWxpja150lGD+qGA8xY5P2hHL5D4cOTkXpOAfxn5tpHME9o2uvy7Xz+o/O+8c
xghW1h6dg0ex3a101A5UpDx/C+PT2kqPpBI4BPxdDriFaevFC6/ONhlzi/q7Nfr+
RzGUK0loM6fuDfUVchmzq6dOlPuc+w5TddzFcjl2+TtPiqc/OvVq99QbC4uZdkDU
Fzba452jqCfkfdkz/5hiXonfVMkQojERrihjIH2G16bjnReG/fA8gAJeyTiH8aji
uYxMO6xWG49oAA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:43 2025 by rpki-client