Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: vGIQs1qy/9sxWvkZhBUE5HxY1JKEEE+vYdsxmbF8VH0=
Subject key identifier: 4B:44:FA:16:BB:ED:35:B6:98:14:37:B4:5E:7D:5F:19:4B:E2:0F:72
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 01984E1DE752DD000BAE7D2F7E5142329AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 23:00:39 +0000
Manifest this update: Sun 27 Jul 2025 23:00:39 +0000
Manifest next update: Mon 28 Jul 2025 23:00:39 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: mtsGBWU8XtxWN+9p0e8JbFbnsQE4rO+cMAQgM7bzWqM=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1d:e7:52:dd:00:0b:ae:7d:2f:7e:51:42:32:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jul 27 23:00:39 2025 GMT
Not After : Jul 28 23:00:39 2025 GMT
Subject: CN=4b44fa16bbed35b6981437b45e7d5f194be20f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:74:1c:53:39:88:92:a3:55:11:93:b6:4c:
b2:55:7f:7d:da:43:c8:fe:cf:1d:82:6c:19:59:62:
4c:76:b4:0b:7b:f2:9d:c1:db:3f:03:98:59:4f:fb:
9a:91:e7:67:3e:66:99:0d:20:a2:a1:c2:b3:3d:af:
d6:c0:7a:44:7b:b2:e4:fb:1b:ae:7a:22:38:37:2b:
ba:be:6a:89:c9:59:94:b1:b4:5a:d4:4c:69:04:f8:
0b:d9:43:0c:aa:44:59:9a:e3:2c:90:c3:82:b4:50:
4c:0b:37:ab:74:ff:4c:74:17:b3:bb:37:92:01:e9:
6b:08:e9:fc:65:07:35:6c:61:f6:b8:09:99:b0:f6:
a3:5d:ef:30:e7:8f:3f:8a:79:a4:fe:76:80:d0:b6:
8b:8a:67:b3:af:59:2d:39:a6:5f:03:77:4e:6f:e1:
e8:55:5e:71:8d:e2:e9:01:98:74:01:b5:3c:8d:c1:
f5:0c:1f:23:05:2e:7b:7c:39:dd:67:1d:15:76:ac:
99:3d:65:34:e0:d9:9b:d8:ca:ec:e1:b3:fa:fb:7a:
7b:76:53:82:db:9c:62:0f:0e:3e:22:29:b7:f0:0a:
0d:49:9e:61:2a:e6:fe:53:d3:a3:af:38:93:bd:c0:
a2:bb:d4:77:4b:2a:95:8f:9f:b5:06:63:c3:d6:ed:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:FA:16:BB:ED:35:B6:98:14:37:B4:5E:7D:5F:19:4B:E2:0F:72
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:90:d6:17:91:37:57:b7:b0:55:49:90:31:95:04:8f:56:f5:
02:1f:d8:8c:6d:3a:d4:c6:ed:c6:37:c6:68:5c:2f:22:41:62:
dd:1d:ce:9e:16:7e:0f:62:04:c6:5b:f0:52:2d:40:8e:f5:2c:
28:bc:b4:7f:1b:98:12:5d:94:ad:e3:2d:82:d3:ec:ea:86:9c:
37:7b:3d:44:4b:34:a4:1a:5f:c1:e7:ee:32:e9:9f:cd:b0:e4:
8d:e6:f2:5b:63:cf:86:a8:00:f9:46:9f:3b:73:9d:b2:2c:28:
64:ef:2c:ef:b9:5e:cf:e0:2e:aa:65:5c:82:24:86:60:31:be:
b8:c1:6f:2c:92:59:c2:eb:bd:81:c9:3b:13:70:17:71:21:46:
4a:78:6a:72:5a:ec:86:54:70:a4:f0:28:07:0e:29:c7:53:84:
3e:37:4b:3a:80:15:8f:a0:b9:45:03:f0:ce:5f:9f:ae:da:37:
11:3f:d9:52:51:87:12:5d:72:a6:81:b4:0f:86:b2:db:3b:36:
a7:a0:6f:4b:e3:54:3f:75:e7:ad:0f:19:cf:0a:ae:03:74:fd:
f1:bb:43:49:b4:5b:06:67:8a:2a:54:87:e8:08:a1:21:0a:d7:
4d:1d:6f:de:7d:ef:de:e3:58:be:c2:05:6b:bf:b3:d4:8f:f4:
74:55:4e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOHedS3QALrn0vflFCMpr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0
MTdhY2QwHhcNMjUwNzI3MjMwMDM5WhcNMjUwNzI4MjMwMDM5WjAzMTEwLwYDVQQD
Eyg0YjQ0ZmExNmJiZWQzNWI2OTgxNDM3YjQ1ZTdkNWYxOTRiZTIwZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoup0HFM5iJKjVRGTtkyyVX992kPI
/s8dgmwZWWJMdrQLe/Kdwds/A5hZT/uakednPmaZDSCiocKzPa/WwHpEe7Lk+xuu
eiI4Nyu6vmqJyVmUsbRa1ExpBPgL2UMMqkRZmuMskMOCtFBMCzerdP9MdBezuzeS
AelrCOn8ZQc1bGH2uAmZsPajXe8w548/inmk/naA0LaLimezr1ktOaZfA3dOb+Ho
VV5xjeLpAZh0AbU8jcH1DB8jBS57fDndZx0VdqyZPWU04Nmb2Mrs4bP6+3p7dlOC
25xiDw4+Iim38AoNSZ5hKub+U9OjrziTvcCiu9R3SyqVj5+1BmPD1u2PcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtE+ha77TW2mBQ3tF59XxlL4g9yMB8GA1UdIwQY
MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt
NDRlMjE5YTllOTZlLzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl
LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJDWF5E3
V7ewVUmQMZUEj1b1Ah/YjG061MbtxjfGaFwvIkFi3R3OnhZ+D2IExlvwUi1AjvUs
KLy0fxuYEl2UreMtgtPs6oacN3s9REs0pBpfwefuMumfzbDkjebyW2PPhqgA+Uaf
O3OdsiwoZO8s77lez+AuqmVcgiSGYDG+uMFvLJJZwuu9gck7E3AXcSFGSnhqclrs
hlRwpPAoBw4px1OEPjdLOoAVj6C5RQPwzl+frto3ET/ZUlGHEl1ypoG0D4ay2zs2
p6BvS+NUP3XnrQ8ZzwquA3T98btDSbRbBmeKKlSH6AihIQrXTR1v3n3v3uNYvsIF
a7+z1I/0dFVOMw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 06:05:05 2025 by rpki-client