Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: tuVMZ9RVzxvi45//Rs7aXz5GeJC/+TaikOs1eyicPvY=
Subject key identifier: 24:A8:FF:CA:7D:F1:AD:7E:97:FC:6D:95:1D:E3:34:BE:08:8E:DA:59
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 0198D5157E7F367812A9793F340A431E3251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 0361
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: 2y6SuusmOwlhgsBwujLZK80LxEMfJ/uJHSed+JEhLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7e:7f:36:78:12:a9:79:3f:34:0a:43:1e:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=24a8ffca7df1ad7e97fc6d951de334be088eda59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:c7:e5:c3:a8:da:7c:cd:ec:14:21:1e:0b:
22:7b:cc:46:a1:80:ef:37:42:1e:3d:26:9a:cf:4e:
7f:f0:b6:ba:81:10:6a:8a:60:33:cf:31:66:1f:cd:
63:89:87:dc:ca:e2:ef:ab:68:57:19:48:8e:b9:09:
3a:5c:f0:99:e7:53:5c:07:e4:1b:a3:fb:73:34:39:
a2:0d:95:e5:8b:b1:f4:b8:97:9e:18:40:97:9a:e4:
8b:6e:49:ec:7d:b7:29:fc:5f:8a:ea:66:a2:53:64:
88:a1:35:e9:f8:b6:5e:e0:f5:d5:0a:5c:6e:bc:1c:
05:ff:e0:0b:86:c5:85:dc:2f:cd:4e:bd:b2:13:01:
8e:c6:83:60:0e:8d:af:10:fd:77:3c:04:72:42:9c:
59:83:a2:fd:6f:43:fd:c8:a2:d5:ab:eb:f6:e4:d7:
f0:2d:c4:5c:cf:f5:b7:c5:46:b9:f9:fd:0b:7b:98:
52:1d:7e:f7:d4:08:ee:ac:e4:cb:86:c9:52:4c:3b:
80:ec:9c:e4:bf:b7:77:02:89:4e:bf:5e:2f:9b:83:
6e:37:f0:c8:f9:6c:b9:bd:7b:1b:9f:e8:47:00:c6:
6a:7d:7d:3c:7c:0a:66:56:be:d2:f2:b8:88:43:c4:
f0:f3:15:82:33:9a:1f:c4:d6:9d:27:49:25:2a:37:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:FF:CA:7D:F1:AD:7E:97:FC:6D:95:1D:E3:34:BE:08:8E:DA:59
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:1d:6f:bd:18:82:f3:43:35:31:d6:da:b2:f3:6e:91:8b:
c8:4f:31:5e:38:89:78:5b:a3:3a:d2:31:f7:18:27:dd:a3:4b:
df:6c:d3:3a:a2:b2:d7:fc:8e:6b:02:1d:7c:02:90:f9:e4:2e:
58:b3:95:09:50:aa:e8:b3:64:68:aa:39:f2:ea:b8:09:0b:05:
ca:cf:08:55:60:b4:f0:b2:e6:c4:93:0a:9a:92:33:21:bd:97:
10:92:8a:79:ff:7e:98:c4:bb:9c:1e:74:b4:aa:23:cc:0c:08:
ac:a9:22:5f:c0:fe:51:16:65:02:65:64:fa:3c:8a:64:89:8c:
da:16:ac:19:b9:0b:f8:70:ac:38:40:fd:4f:ff:f6:08:f3:f7:
86:d8:3b:6e:86:7d:88:62:82:90:5e:45:6f:d1:4c:eb:ce:d8:
5f:ea:0c:53:a2:47:3c:7b:45:e9:65:90:a5:79:5f:ff:78:6a:
8a:20:27:65:af:ba:a8:a4:e9:4b:4c:4a:18:da:35:0b:67:42:
55:1d:c3:d6:e4:a1:f1:31:ef:c6:2e:4e:4f:43:7d:53:ba:ac:
24:69:80:49:ed:84:dc:a3:27:cd:5b:d4:e2:a5:96:b8:b2:74:
fd:27:cb:48:3c:47:43:44:dc:2a:be:74:e5:46:c1:1c:58:69:
2e:4e:1d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFX5/NngSqXk/NApDHjJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy
MGU0NTIwHhcNMjUwODIzMDQwMDEyWhcNMjUwODI0MDQwMDEyWjAzMTEwLwYDVQQD
EygyNGE4ZmZjYTdkZjFhZDdlOTdmYzZkOTUxZGUzMzRiZTA4OGVkYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN7H5cOo2nzN7BQhHgsie8xGoYDv
N0IePSaaz05/8La6gRBqimAzzzFmH81jiYfcyuLvq2hXGUiOuQk6XPCZ51NcB+Qb
o/tzNDmiDZXli7H0uJeeGECXmuSLbknsfbcp/F+K6maiU2SIoTXp+LZe4PXVClxu
vBwF/+ALhsWF3C/NTr2yEwGOxoNgDo2vEP13PARyQpxZg6L9b0P9yKLVq+v25Nfw
LcRcz/W3xUa5+f0Le5hSHX731AjurOTLhslSTDuA7Jzkv7d3AolOv14vm4NuN/DI
+Wy5vXsbn+hHAMZqfX08fApmVr7S8riIQ8Tw8xWCM5ofxNadJ0klKjeThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSo/8p98a1+l/xtlR3jNL4IjtpZMB8GA1UdIwQY
MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt
OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj
LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVYdb70Y
gvNDNTHW2rLzbpGLyE8xXjiJeFujOtIx9xgn3aNL32zTOqKy1/yOawIdfAKQ+eQu
WLOVCVCq6LNkaKo58uq4CQsFys8IVWC08LLmxJMKmpIzIb2XEJKKef9+mMS7nB50
tKojzAwIrKkiX8D+URZlAmVk+jyKZImM2hasGbkL+HCsOED9T//2CPP3htg7boZ9
iGKCkF5Fb9FM687YX+oMU6JHPHtF6WWQpXlf/3hqiiAnZa+6qKTpS0xKGNo1C2dC
VR3D1uSh8THvxi5OT0N9U7qsJGmASe2E3KMnzVvU4qWWuLJ0/SfLSDxHQ0TcKr50
5UbBHFhpLk4doQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:24 2025 by rpki-client