Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: MV35hzmFs/pXaUroYgtwgi5oygA2ihcOVXgJgtzIGVg=
Subject key identifier: CB:B6:BC:8A:A4:5E:71:28:47:55:CC:CB:FA:89:99:26:79:83:BC:CE
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019844ACE533B74E8FFF73F03214CBC1B46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 03:00:38 +0000
Manifest this update: Sat 26 Jul 2025 03:00:38 +0000
Manifest next update: Sun 27 Jul 2025 03:00:38 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: jvLqNuFNOpzr4HGqJuh4dxXKuruUgaP9fR3sWjxnmow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:e5:33:b7:4e:8f:ff:73:f0:32:14:cb:c1:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Jul 26 03:00:38 2025 GMT
Not After : Jul 27 03:00:38 2025 GMT
Subject: CN=cbb6bc8aa45e71284755cccbfa8999267983bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:8a:c6:6a:d7:0b:35:be:53:44:5a:88:9d:
d2:83:09:e5:d4:a2:11:d6:b3:99:64:c7:f7:b9:e0:
c0:6a:b6:7b:9a:df:54:fb:41:eb:4b:02:30:1d:bb:
f2:f8:17:56:30:27:a4:1b:15:ee:ff:02:09:08:f5:
9b:59:d8:2e:7e:71:c7:70:49:b5:9e:92:49:ef:86:
3c:c3:53:66:c1:51:ff:b6:90:3c:66:04:c9:2c:ea:
47:07:30:a2:1e:86:12:ec:04:21:fc:57:30:d5:20:
5f:f2:91:da:5e:95:0f:85:2e:39:cb:c2:ff:20:04:
8d:76:7e:4a:3d:46:1e:8a:ce:be:ac:d3:50:b2:2a:
42:10:bb:e2:41:60:f7:55:b9:b6:63:4e:7e:90:6c:
1b:00:fa:3f:d1:55:7d:b9:1a:04:41:e9:31:c9:af:
b2:77:be:4c:6d:53:51:e9:1d:4a:4b:34:e8:c8:da:
ab:7b:e4:38:68:ff:92:e6:cf:b3:26:7c:21:b6:8f:
9e:79:6b:3e:24:b7:b8:ea:a0:81:a0:b1:34:a2:a3:
9d:15:1b:8c:ff:fe:bd:5d:9c:28:30:7c:55:02:02:
d2:6d:8f:c6:b4:38:45:95:95:77:d9:7e:32:a6:66:
64:33:20:7a:d2:29:57:7b:fc:54:27:89:f1:55:02:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:BC:8A:A4:5E:71:28:47:55:CC:CB:FA:89:99:26:79:83:BC:CE
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:3d:0c:01:43:bb:05:97:14:41:48:b2:77:7a:bb:cf:c6:
74:8d:d4:eb:71:8d:b4:31:7d:a7:83:95:da:3c:f5:4f:0e:ae:
3a:8f:9e:34:55:1a:5f:eb:26:5d:59:bb:fe:68:1d:a8:d2:5b:
14:d9:77:c5:ea:24:50:a9:80:34:be:8f:ae:46:d2:35:c5:3e:
87:eb:59:d5:33:2d:0e:12:4c:3e:9a:24:d1:9d:79:4b:86:2c:
11:71:84:7d:81:81:af:c4:44:ef:10:dc:6c:dc:69:85:f3:05:
27:8b:b1:b1:56:cd:00:70:23:c3:b1:18:b1:7b:1b:ce:a7:a2:
67:4a:be:1c:61:d3:60:ed:de:20:23:15:35:3c:f2:b9:22:bb:
fb:16:da:59:80:c2:df:98:28:1a:2b:99:ec:92:08:3d:6d:00:
9b:26:11:11:64:11:06:d8:82:b0:88:30:ee:33:73:d4:43:69:
81:ec:04:eb:ff:7e:08:4e:ac:48:f1:7d:bb:33:d9:aa:41:cf:
ba:9a:8d:f5:0e:b1:9c:d6:e5:08:e9:b0:34:f8:92:d7:d5:cd:
60:f9:0e:bc:d8:fb:bb:fe:da:29:07:1e:9a:59:ec:14:34:df:
29:20:a6:d5:8e:15:5d:22:f4:f7:e4:ec:e6:10:59:4f:a7:24:
af:b3:cb:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErOUzt06P/3PwMhTLwbRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzU0YzcxZDYyY2IyMzk0OGQ5MTE5ZWRhNzcyZmRlMzhl
NjdiNjcwHhcNMjUwNzI2MDMwMDM4WhcNMjUwNzI3MDMwMDM4WjAzMTEwLwYDVQQD
EyhjYmI2YmM4YWE0NWU3MTI4NDc1NWNjY2JmYTg5OTkyNjc5ODNiY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDCKxmrXCzW+U0RaiJ3Sgwnl1KIR
1rOZZMf3ueDAarZ7mt9U+0HrSwIwHbvy+BdWMCekGxXu/wIJCPWbWdgufnHHcEm1
npJJ74Y8w1NmwVH/tpA8ZgTJLOpHBzCiHoYS7AQh/Fcw1SBf8pHaXpUPhS45y8L/
IASNdn5KPUYeis6+rNNQsipCELviQWD3Vbm2Y05+kGwbAPo/0VV9uRoEQekxya+y
d75MbVNR6R1KSzToyNqre+Q4aP+S5s+zJnwhto+eeWs+JLe46qCBoLE0oqOdFRuM
//69XZwoMHxVAgLSbY/GtDhFlZV32X4ypmZkMyB60ilXe/xUJ4nxVQI9rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu2vIqkXnEoR1XMy/qJmSZ5g7zOMB8GA1UdIwQY
MBaAFJp1THHWLLI5SNkRntp3L9445ntnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2It
ZDI1YTlkZjE1OTI1LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2ItZDI1YTlkZjE1OTI1
LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTQ9DAFD
uwWXFEFIsnd6u8/GdI3U63GNtDF9p4OV2jz1Tw6uOo+eNFUaX+smXVm7/mgdqNJb
FNl3xeokUKmANL6PrkbSNcU+h+tZ1TMtDhJMPpok0Z15S4YsEXGEfYGBr8RE7xDc
bNxphfMFJ4uxsVbNAHAjw7EYsXsbzqeiZ0q+HGHTYO3eICMVNTzyuSK7+xbaWYDC
35goGiuZ7JIIPW0AmyYREWQRBtiCsIgw7jNz1ENpgewE6/9+CE6sSPF9uzPZqkHP
upqN9Q6xnNblCOmwNPiS19XNYPkOvNj7u/7aKQcemlnsFDTfKSCm1Y4VXSL09+Ts
5hBZT6ckr7PLYw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:25:58 2025 by rpki-client