Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: VfIKOtjNb8jiKQpGtxi0Sg9o0bog+0ek8mhPChaszZ8=
Subject key identifier: A8:97:57:28:F2:CA:45:1E:CE:CA:C1:46:40:07:E9:9F:74:DB:ED:3B
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01984AE5B56A42F89B9B0DBDD0838E0A4C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:24 +0000
Manifest this update: Sun 27 Jul 2025 08:00:24 +0000
Manifest next update: Mon 28 Jul 2025 08:00:24 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: 5XGEm3o5mRJfixmUCXWc5K4EBwdW9GZvTSe9KnhOe0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b5:6a:42:f8:9b:9b:0d:bd:d0:83:8e:0a:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jul 27 08:00:24 2025 GMT
Not After : Jul 28 08:00:24 2025 GMT
Subject: CN=a8975728f2ca451ececac1464007e99f74dbed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:3a:ad:4f:19:dc:40:8c:6b:17:0e:87:b4:
76:09:24:1d:06:79:a2:60:b3:f7:e0:97:28:e1:38:
00:a1:ec:ab:9a:0a:80:fe:cd:33:b3:96:7f:a7:ce:
00:73:98:ff:f0:3b:9c:e3:b7:7e:dd:e4:7d:15:78:
8b:8c:7d:a1:09:73:05:63:c4:4a:d1:f1:65:11:68:
ea:3f:10:30:55:36:89:ea:81:2d:09:02:83:c8:86:
d6:5a:90:1d:25:bd:31:e5:c5:91:ca:d9:fe:3a:f6:
44:65:61:16:e8:24:70:1e:f2:b0:9c:51:2e:96:35:
b9:19:b3:1e:0e:db:61:1f:43:f4:70:06:85:b1:d7:
8f:47:28:d3:d4:fe:93:5c:24:0e:f3:a1:0a:08:1c:
d3:12:5d:1f:f7:ac:16:e5:01:f1:39:81:3b:d3:f9:
f0:cc:33:f8:0d:c6:5c:b9:14:00:08:3d:3f:2d:a3:
27:a2:9d:19:77:41:11:6a:88:77:d9:6e:05:83:67:
8b:28:f1:28:f6:73:40:a9:93:0e:a3:80:0d:44:a1:
7a:b3:36:a1:bf:96:19:c6:c4:65:65:88:a9:2e:b9:
3b:bc:7f:92:ac:47:f1:ba:88:38:e5:05:04:a5:a2:
04:21:df:78:36:ee:2c:9e:2b:23:81:ec:07:63:21:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:57:28:F2:CA:45:1E:CE:CA:C1:46:40:07:E9:9F:74:DB:ED:3B
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:07:74:6d:69:a3:59:de:d6:ce:8f:69:92:12:1a:ab:97:
7d:c2:ad:d1:54:a5:28:e5:2b:3a:37:85:8f:e9:6b:ca:0f:22:
75:11:b4:06:b2:0c:1d:4d:6a:de:a2:68:36:6b:d4:4f:cf:4b:
5c:4e:64:43:46:a5:9e:51:c5:5e:84:ef:b3:89:0a:0a:07:e0:
c0:e0:f0:09:cc:5e:e4:e8:22:a6:d9:a6:39:e3:4b:0a:9d:47:
ab:6b:c0:12:e7:c4:60:6e:6e:cf:db:37:90:4c:4c:b8:74:7d:
85:f4:4b:26:52:7d:27:be:42:12:d6:d6:07:7a:0e:e8:11:1f:
eb:55:6c:ca:2c:de:49:f4:42:8e:38:23:cd:8f:49:c2:a5:cd:
f6:7b:fc:93:0f:4f:ce:79:91:f2:31:c0:0e:80:8a:25:80:cf:
ca:fa:65:4d:a9:a1:72:d7:08:9b:99:a7:eb:ac:f2:f4:a8:f5:
e5:ea:93:69:ac:d2:76:70:77:e1:cf:c0:7d:c9:5d:6a:1c:69:
20:32:37:b5:88:52:8a:04:75:de:3c:45:76:0c:28:ba:17:59:
d7:34:78:11:85:fa:25:b1:59:59:9f:26:18:d2:a9:be:50:c4:
68:7e:15:91:29:b2:fa:d4:d9:ef:b4:a1:3a:86:71:99:2f:7c:
ad:02:e1:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5bVqQvibmw290IOOCkxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTQyNThmYjlkMzY1N2IzMzc2MTQyYmZjNjNkYWNlNGY4
MjExYzQwHhcNMjUwNzI3MDgwMDI0WhcNMjUwNzI4MDgwMDI0WjAzMTEwLwYDVQQD
EyhhODk3NTcyOGYyY2E0NTFlY2VjYWMxNDY0MDA3ZTk5Zjc0ZGJlZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWg6rU8Z3ECMaxcOh7R2CSQdBnmi
YLP34Jco4TgAoeyrmgqA/s0zs5Z/p84Ac5j/8Duc47d+3eR9FXiLjH2hCXMFY8RK
0fFlEWjqPxAwVTaJ6oEtCQKDyIbWWpAdJb0x5cWRytn+OvZEZWEW6CRwHvKwnFEu
ljW5GbMeDtthH0P0cAaFsdePRyjT1P6TXCQO86EKCBzTEl0f96wW5QHxOYE70/nw
zDP4DcZcuRQACD0/LaMnop0Zd0ERaoh32W4Fg2eLKPEo9nNAqZMOo4ANRKF6szah
v5YZxsRlZYipLrk7vH+SrEfxuog45QUEpaIEId94Nu4snisjgewHYyFvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiXVyjyykUezsrBRkAH6Z902+07MB8GA1UdIwQY
MBaAFJkUJY+502V7M3YUK/xj2s5PghHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGIt
ZmUzNDFiMzAwNWUzLzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGItZmUzNDFiMzAwNWUz
LzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7UHdG1p
o1ne1s6PaZISGquXfcKt0VSlKOUrOjeFj+lryg8idRG0BrIMHU1q3qJoNmvUT89L
XE5kQ0alnlHFXoTvs4kKCgfgwODwCcxe5OgiptmmOeNLCp1Hq2vAEufEYG5uz9s3
kExMuHR9hfRLJlJ9J75CEtbWB3oO6BEf61VsyizeSfRCjjgjzY9JwqXN9nv8kw9P
znmR8jHADoCKJYDPyvplTamhctcIm5mn66zy9Kj15eqTaazSdnB34c/Afcldahxp
IDI3tYhSigR13jxFdgwouhdZ1zR4EYX6JbFZWZ8mGNKpvlDEaH4VkSmy+tTZ77Sh
OoZxmS98rQLhHA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:06 2025 by rpki-client