Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: oF5OjoqmjvAZbiYF0bdFgH6dp+skx1oRjfxasqNJzJU=
Subject key identifier: 86:DB:3C:22:52:29:2E:D1:4F:A7:BD:31:18:DD:86:73:8C:33:1B:28
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0198462D8220A4BEDC5C907AF7FB81769BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 10:00:44 +0000
Manifest this update: Sat 26 Jul 2025 10:00:44 +0000
Manifest next update: Sun 27 Jul 2025 10:00:44 +0000
Files and hashes: 1: MKwXFQdhtuQYKRcVzorzsVxuXIw.roa (hash: GZ2oDGi2xK0WgPjyKpmqLx5efaJizRvGxJTHG502Kqs=)
2: QHGBtoYy-yUNGT2R6UBemRAxD5s.roa (hash: 3YJpkLEFxs1XCvKlcy0WQw5fAkmH7oTliDxTaEnJgz0=)
3: hwXn82QbEbf-SULTcBIDnH5UIZU.roa (hash: 08kQDvBZvCyHX595Crm1xVl4v8KtIgUsNRfQUr9hTAQ=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: MgUyp3QTOELJ55jVjpqxue3e0jPxHTQhtxNhhG8vEaE=)
5: soZqy3HUC6xiStBTbgTdR73Vw2c.roa (hash: 0/K+cWWK8CwD0JZ/wMwAQQYw/af8O4bhKs39qQrbVB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:82:20:a4:be:dc:5c:90:7a:f7:fb:81:76:9b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jul 26 10:00:44 2025 GMT
Not After : Jul 27 10:00:44 2025 GMT
Subject: CN=86db3c2252292ed14fa7bd3118dd86738c331b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:12:69:b8:51:33:b7:02:cb:b5:1c:9a:59:ae:
d3:32:a8:5d:b2:c5:1e:38:b1:42:d5:3e:3c:05:de:
60:9a:37:54:29:b3:4c:3b:a4:57:01:d2:49:78:ee:
34:5d:b5:5e:8c:5b:0e:2d:0c:60:85:63:3f:35:9f:
4f:9f:a9:6e:cb:c7:94:a5:be:fc:0b:25:3c:60:0b:
9c:8c:0b:31:78:cd:67:9e:8b:c7:b7:8e:af:bd:fc:
ac:f5:32:1d:d9:1d:08:97:a1:1c:8a:5e:ba:91:2a:
3f:ab:9f:d7:a9:45:94:98:ed:89:2f:0e:7d:a0:a3:
52:de:71:b7:30:b1:d2:64:f2:b7:23:f2:d9:c9:95:
73:d1:c5:d6:03:17:8c:55:80:48:d8:e6:b0:96:bb:
e2:64:84:9d:cc:9a:2f:fd:02:2d:8c:66:7a:b5:ba:
0b:2b:92:cd:24:24:a1:ee:6c:c3:0f:f5:b2:59:a4:
b0:49:79:d1:9a:26:81:4f:a6:0f:9c:3a:03:34:a9:
eb:9c:00:91:cf:58:de:fb:f7:6a:1f:a8:da:3d:36:
02:7e:10:7f:18:f9:d9:6f:cf:31:1f:93:bc:a5:94:
31:45:be:79:e1:f4:e1:88:c5:90:98:e5:fc:6b:5f:
a8:99:1e:ef:48:c0:18:c2:b5:3f:e3:d4:80:44:52:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:3C:22:52:29:2E:D1:4F:A7:BD:31:18:DD:86:73:8C:33:1B:28
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:b4:df:0c:95:ba:a5:c6:18:2d:c4:00:c1:48:f6:84:cd:
81:1c:a2:23:b6:44:68:1b:1c:b8:ff:4b:13:f5:8e:a3:56:77:
ea:a6:ee:3b:89:18:9e:b5:88:2b:d6:a5:e6:fa:d7:21:ce:7f:
3f:7b:15:0c:27:d8:92:64:e8:09:cb:62:15:30:ae:63:39:ce:
68:bb:20:fd:37:53:69:c2:a1:47:e1:c5:65:6e:25:8a:14:1e:
42:53:f4:82:dd:59:f5:25:a4:04:ae:03:c4:b1:44:60:78:ab:
2e:28:33:e4:19:22:04:ce:38:d8:a3:69:24:1d:b9:00:bd:d7:
b7:e6:90:6e:64:11:01:af:e7:af:30:5b:9d:ce:e3:ef:48:5b:
38:e4:be:4b:f7:61:51:04:a8:45:43:d6:77:d0:12:05:73:67:
2e:78:02:18:14:19:55:40:69:b9:e7:ae:5c:95:19:ac:f2:43:
92:b2:19:21:3e:24:80:d8:3a:29:95:ec:f6:35:f2:24:0a:cc:
d1:a0:f4:54:ca:9b:d2:67:e5:92:a5:aa:41:23:ad:55:34:cc:
08:80:27:df:48:87:4b:42:fa:48:ba:bd:a3:ef:90:6d:fe:ea:
4b:70:99:50:98:0b:69:c9:b5:64:1e:b9:c1:65:ed:bc:53:20:
54:7a:1c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLYIgpL7cXJB69/uBdpurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2I1MGU3OGEzYTMxZTMzNzVjZjJhYWI4NjVlODQ1ZmYy
ZTk5YzEwHhcNMjUwNzI2MTAwMDQ0WhcNMjUwNzI3MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg4NmRiM2MyMjUyMjkyZWQxNGZhN2JkMzExOGRkODY3MzhjMzMxYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xJpuFEztwLLtRyaWa7TMqhdssUe
OLFC1T48Bd5gmjdUKbNMO6RXAdJJeO40XbVejFsOLQxghWM/NZ9Pn6luy8eUpb78
CyU8YAucjAsxeM1nnovHt46vvfys9TId2R0Il6Ecil66kSo/q5/XqUWUmO2JLw59
oKNS3nG3MLHSZPK3I/LZyZVz0cXWAxeMVYBI2OawlrviZISdzJov/QItjGZ6tboL
K5LNJCSh7mzDD/WyWaSwSXnRmiaBT6YPnDoDNKnrnACRz1je+/dqH6jaPTYCfhB/
GPnZb88xH5O8pZQxRb554fThiMWQmOX8a1+omR7vSMAYwrU/49SARFJJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbbPCJSKS7RT6e9MRjdhnOMMxsoMB8GA1UdIwQY
MBaAFKTLUOeKOjHjN1zyqrhl6EX/LpnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMt
NGJlNzk0ZDY0MDZkLzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMtNGJlNzk0ZDY0MDZk
LzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKK03wyV
uqXGGC3EAMFI9oTNgRyiI7ZEaBscuP9LE/WOo1Z36qbuO4kYnrWIK9al5vrXIc5/
P3sVDCfYkmToCctiFTCuYznOaLsg/TdTacKhR+HFZW4lihQeQlP0gt1Z9SWkBK4D
xLFEYHirLigz5BkiBM442KNpJB25AL3Xt+aQbmQRAa/nrzBbnc7j70hbOOS+S/dh
UQSoRUPWd9ASBXNnLngCGBQZVUBpueeuXJUZrPJDkrIZIT4kgNg6KZXs9jXyJArM
0aD0VMqb0mflkqWqQSOtVTTMCIAn30iHS0L6SLq9o++Qbf7qS3CZUJgLacm1ZB65
wWXtvFMgVHocRA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:49:17 2025 by rpki-client