Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: t2k/flh9eLWo973xTAS6ChZB/Elk2WTI0WguIgzwwcY=
Subject key identifier: 2D:BD:96:65:86:50:9C:17:EF:BF:D6:2B:17:5B:BF:C5:88:D8:98:5D
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 0198304A8B9433793401B8EEB39CD5BEBC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 0703
Signing time: Tue 22 Jul 2025 04:00:48 +0000
Manifest this update: Tue 22 Jul 2025 04:00:48 +0000
Manifest next update: Wed 23 Jul 2025 04:00:48 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: Gjo+csp81qdRFQgT00oiNcfkcHkNyQyR4mF2mhzXg6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:4a:8b:94:33:79:34:01:b8:ee:b3:9c:d5:be:bc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Jul 22 04:00:48 2025 GMT
Not After : Jul 23 04:00:48 2025 GMT
Subject: CN=2dbd966586509c17efbfd62b175bbfc588d8985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:b9:ff:18:91:3f:a8:33:e6:be:84:df:50:
ec:53:39:e7:bf:69:ff:8a:5f:4c:fa:3d:e0:57:58:
5d:97:95:13:8b:fe:3d:7a:d9:28:5e:0e:c2:34:3e:
5f:78:80:a7:4c:69:3b:ef:ff:32:37:05:a3:9e:9d:
db:d1:9d:14:64:0c:d3:42:4f:f4:fb:cc:de:81:c9:
c8:81:6f:fd:0f:f4:99:65:0f:3f:95:fa:ee:9d:d5:
8f:bb:f7:1d:c9:a6:c8:d2:a2:92:fb:2c:33:46:8f:
a5:66:d3:51:6e:97:a6:49:75:15:3a:d3:d3:b8:57:
5f:36:38:18:ab:34:63:bf:ce:ab:05:54:b8:b5:ac:
9e:af:ce:c7:8f:f0:e5:01:6b:89:b4:7f:32:ef:5d:
a1:8e:db:d1:a8:52:de:9d:52:b2:91:70:67:5f:c1:
d7:b4:d9:73:74:9e:2a:ec:b7:b9:7e:88:e9:e6:d5:
5f:ff:9c:ce:2d:01:7c:f4:31:06:96:a2:88:65:72:
93:f9:09:1e:0c:4b:08:00:58:7a:f8:cb:76:d8:77:
04:1b:2f:71:c3:99:e9:e8:a6:4b:fa:9b:b6:46:b5:
6c:e3:1c:46:22:f2:87:7f:84:74:43:8b:66:20:d2:
be:c0:02:9e:e8:a5:45:02:1a:e2:06:4f:ed:ae:b0:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:96:65:86:50:9C:17:EF:BF:D6:2B:17:5B:BF:C5:88:D8:98:5D
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:d4:a1:04:42:8b:fa:8c:d5:ea:46:57:22:21:a3:45:3f:
49:1d:10:03:a0:88:48:12:c3:02:0c:a4:86:b5:87:56:0a:5b:
c8:5d:f3:17:8e:9d:aa:87:01:b8:49:16:91:68:8e:03:2f:03:
bb:38:3d:ed:2a:10:83:17:52:78:03:e8:f7:13:57:df:90:e2:
06:59:7f:63:cb:30:af:40:b3:f2:a5:77:c2:3e:3e:42:2a:ab:
c9:80:0b:9a:79:2c:89:a4:c8:ff:47:23:6d:e2:f9:9d:31:d7:
4f:95:d5:ed:fe:22:12:f8:46:ad:d9:b7:aa:51:9e:8d:9f:db:
8e:8d:81:a8:68:bf:1b:7c:4e:fb:3f:be:bc:dd:48:1f:97:03:
3a:6a:c0:0a:be:ba:ac:17:75:cb:5a:2e:37:4f:66:3c:11:7d:
2b:a1:c4:6b:c5:20:b8:22:5d:cf:e8:be:46:c3:a3:08:38:c0:
2a:2c:8e:49:56:43:a1:34:73:60:e9:c6:77:f0:23:31:6b:dc:
d0:ef:0d:16:bd:48:b9:d0:5f:4b:29:5c:0b:24:cd:2d:10:1f:
fe:92:5c:de:db:81:21:d0:59:46:bb:e3:10:53:f4:af:28:60:
e3:a9:fa:80:7f:35:f6:45:41:77:46:b0:27:92:a7:27:12:22:
e5:3e:38:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgwSouUM3k0Abjus5zVvryYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5
NjE4ODMwHhcNMjUwNzIyMDQwMDQ4WhcNMjUwNzIzMDQwMDQ4WjAzMTEwLwYDVQQD
EygyZGJkOTY2NTg2NTA5YzE3ZWZiZmQ2MmIxNzViYmZjNTg4ZDg5ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+q5/xiRP6gz5r6E31DsUznnv2n/
il9M+j3gV1hdl5UTi/49etkoXg7CND5feICnTGk77/8yNwWjnp3b0Z0UZAzTQk/0
+8zegcnIgW/9D/SZZQ8/lfrundWPu/cdyabI0qKS+ywzRo+lZtNRbpemSXUVOtPT
uFdfNjgYqzRjv86rBVS4tayer87Hj/DlAWuJtH8y712hjtvRqFLenVKykXBnX8HX
tNlzdJ4q7Le5fojp5tVf/5zOLQF89DEGlqKIZXKT+QkeDEsIAFh6+Mt22HcEGy9x
w5np6KZL+pu2RrVs4xxGIvKHf4R0Q4tmINK+wAKe6KVFAhriBk/trrA93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC29lmWGUJwX77/WKxdbv8WI2JhdMB8GA1UdIwQY
MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt
NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh
LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaDUoQRC
i/qM1epGVyIho0U/SR0QA6CISBLDAgykhrWHVgpbyF3zF46dqocBuEkWkWiOAy8D
uzg97SoQgxdSeAPo9xNX35DiBll/Y8swr0Cz8qV3wj4+QiqryYALmnksiaTI/0cj
beL5nTHXT5XV7f4iEvhGrdm3qlGejZ/bjo2BqGi/G3xO+z++vN1IH5cDOmrACr66
rBd1y1ouN09mPBF9K6HEa8UguCJdz+i+RsOjCDjAKiyOSVZDoTRzYOnGd/AjMWvc
0O8NFr1IudBfSylcCyTNLRAf/pJc3tuBIdBZRrvjEFP0ryhg46n6gH819kVBd0aw
J5KnJxIi5T44HQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:26 2025 by rpki-client