Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: Unv1ke2XQ8WUv7wh8sPMNGR1h7YnIbkxRbnWuQDtAEc=
Subject key identifier: 31:8A:B6:79:34:57:20:03:58:CD:68:CF:D0:A3:4A:A9:E8:1D:87:31
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0198D54DF93B306A5CFEFDC548039BC21DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 11C2
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: QnkOJnxrDhaEPb/etstVjtVMUeNnt5QvHGycm+9ZcSU=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f9:3b:30:6a:5c:fe:fd:c5:48:03:9b:c2:1d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=318ab6793457200358cd68cfd0a34aa9e81d8731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:f5:1e:e4:20:dd:08:b4:98:15:c8:36:bd:
7c:c5:2e:74:46:3d:84:42:29:27:b9:af:4a:80:97:
87:fc:ba:7a:1d:6e:da:26:ed:27:ef:6b:34:76:0a:
6a:b4:76:ed:93:1e:02:78:1e:40:6f:1e:86:55:f8:
ff:bf:90:ba:72:71:00:c9:a0:11:cc:b5:3e:2c:0e:
38:1f:bd:79:97:0b:88:99:dc:4c:5b:dc:20:d5:92:
0e:7a:14:2a:2b:ce:aa:36:a5:86:16:f6:f5:d8:71:
83:8b:1e:c3:63:7f:c3:a6:cf:0d:0f:42:a0:9a:5c:
46:ba:92:52:60:8c:a8:c0:06:23:7a:c7:ef:cc:57:
0e:47:b2:4f:fa:6a:ce:4c:f3:c1:c6:eb:27:f0:71:
a4:41:ce:77:d4:ee:88:67:34:47:6e:91:bf:6f:07:
1c:34:92:2a:f7:b8:5c:68:2b:6c:12:66:a4:0b:cb:
a9:2a:c0:47:e3:b3:ad:63:d7:45:65:b4:f1:ec:d4:
8a:0d:59:bc:98:0c:0b:26:c8:82:2a:8f:45:29:2c:
82:d2:8c:65:ab:b4:5d:bf:cb:2c:32:83:c7:ca:7e:
c1:cf:dd:a5:e4:f4:2e:4f:26:76:09:fc:a3:e0:53:
f7:db:e8:58:9d:c5:84:0a:39:20:73:b7:a6:1a:58:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:B6:79:34:57:20:03:58:CD:68:CF:D0:A3:4A:A9:E8:1D:87:31
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:2f:54:bb:a7:f1:5c:9f:df:98:67:d3:65:d7:d9:c8:69:
98:a9:c0:33:36:57:df:52:ad:b4:37:ae:db:08:b0:49:f6:8d:
58:a7:83:4c:d5:00:ef:fa:13:27:fc:aa:da:a0:df:32:72:db:
6f:78:40:d8:fa:e9:ec:b1:3c:c2:34:a5:aa:a7:ef:eb:b5:61:
a1:9e:3e:0e:a9:48:79:3f:8b:a3:85:74:d9:ee:85:c3:46:43:
2a:ef:81:1b:7f:55:3c:10:c2:8a:34:86:7a:f0:d9:8b:c1:00:
14:9c:6a:4f:ec:77:f1:23:d0:f9:7a:87:a8:5d:ba:80:bf:46:
74:b1:48:7e:03:7a:85:37:ff:52:43:b4:b3:b7:ae:99:83:05:
a9:06:a4:da:d0:00:59:ad:c5:6a:6a:07:83:5a:0c:b5:d2:0d:
a7:ac:ca:1f:42:39:32:ec:e3:31:c6:c5:a4:64:ae:4f:77:6b:
8c:fd:24:41:8b:46:87:3e:f6:dc:a2:4a:a7:bf:e2:b3:17:6d:
fb:2c:a9:d8:ad:8b:94:30:4e:8a:8b:ee:d0:09:38:dc:61:7e:
c2:32:95:8d:cd:6f:32:54:59:00:41:bd:c3:37:6a:e0:08:ad:
6f:3e:83:7c:d2:5d:6d:5f:e9:60:9b:f7:d9:91:26:1b:bd:2c:
e8:be:6a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfk7MGpc/v3FSAObwh3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx
OTJkYTgwHhcNMjUwODIzMDUwMTUzWhcNMjUwODI0MDUwMTUzWjAzMTEwLwYDVQQD
EygzMThhYjY3OTM0NTcyMDAzNThjZDY4Y2ZkMGEzNGFhOWU4MWQ4NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLn1HuQg3Qi0mBXINr18xS50Rj2E
Qiknua9KgJeH/Lp6HW7aJu0n72s0dgpqtHbtkx4CeB5Abx6GVfj/v5C6cnEAyaAR
zLU+LA44H715lwuImdxMW9wg1ZIOehQqK86qNqWGFvb12HGDix7DY3/Dps8ND0Kg
mlxGupJSYIyowAYjesfvzFcOR7JP+mrOTPPBxusn8HGkQc531O6IZzRHbpG/bwcc
NJIq97hcaCtsEmakC8upKsBH47OtY9dFZbTx7NSKDVm8mAwLJsiCKo9FKSyC0oxl
q7Rdv8ssMoPHyn7Bz92l5PQuTyZ2Cfyj4FP32+hYncWECjkgc7emGlieNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGKtnk0VyADWM1oz9CjSqnoHYcxMB8GA1UdIwQY
MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt
MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi
LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8IvVLun
8Vyf35hn02XX2chpmKnAMzZX31KttDeu2wiwSfaNWKeDTNUA7/oTJ/yq2qDfMnLb
b3hA2Prp7LE8wjSlqqfv67VhoZ4+DqlIeT+Lo4V02e6Fw0ZDKu+BG39VPBDCijSG
evDZi8EAFJxqT+x38SPQ+XqHqF26gL9GdLFIfgN6hTf/UkO0s7eumYMFqQak2tAA
Wa3FamoHg1oMtdINp6zKH0I5MuzjMcbFpGSuT3drjP0kQYtGhz723KJKp7/isxdt
+yyp2K2LlDBOiovu0Ak43GF+wjKVjc1vMlRZAEG9wzdq4Aitbz6DfNJdbV/pYJv3
2ZEmG70s6L5qJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:12 2025 by rpki-client