Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: g7cEg7emtL35GtF2/BPxr3xGqUzpLnmVay3U1oLQsNc=
Subject key identifier: D8:E1:1C:32:4E:16:62:12:6B:0B:40:10:C2:0C:5A:EE:28:06:17:9B
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0198439B4F3ECE38AD95F7EADC02319592A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 1600
Signing time: Fri 25 Jul 2025 22:01:48 +0000
Manifest this update: Fri 25 Jul 2025 22:01:48 +0000
Manifest next update: Sat 26 Jul 2025 22:01:48 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: m6BVqUuVQNbDq9hdgfjHHfCmKabRFDLOCkIDZjzm+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:4f:3e:ce:38:ad:95:f7:ea:dc:02:31:95:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Jul 25 22:01:48 2025 GMT
Not After : Jul 26 22:01:48 2025 GMT
Subject: CN=d8e11c324e1662126b0b4010c20c5aee2806179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:3e:c6:48:46:d2:8c:b6:18:fa:3e:34:bb:
aa:bd:e5:a0:83:3b:81:d6:52:a6:d0:71:0c:b0:a2:
40:e3:79:36:a4:f0:9a:97:d5:42:0d:f5:1c:65:6e:
ef:10:d4:b9:c5:07:e8:47:d4:d6:f5:a9:2d:8d:d0:
cd:3f:26:59:33:d9:00:2e:5a:9d:80:0b:df:ac:24:
ba:fc:e5:43:60:9d:04:8e:85:cf:f5:69:05:1a:a3:
35:84:e3:32:34:c9:da:99:26:fa:31:68:e8:27:67:
20:9a:3d:ca:67:b0:4b:fb:96:f8:8e:23:d0:83:20:
d5:b3:99:a2:c8:2c:cd:59:aa:a4:bd:98:04:8e:05:
56:d4:8c:2d:87:bd:21:2b:97:53:c6:6a:fb:3c:34:
ae:fb:70:8a:bc:81:9d:81:26:dc:f5:b5:cb:d9:35:
80:33:a8:51:a7:1e:62:00:af:86:84:e6:86:71:0b:
54:b8:08:6d:18:4d:ff:4a:68:75:83:9b:59:a9:72:
91:1f:5f:65:76:9c:b8:50:77:ad:40:0b:9e:eb:05:
a8:c2:1b:56:a8:cb:39:6f:de:88:43:c0:d8:14:ed:
4b:95:b3:f5:4e:c1:80:82:27:81:c5:f8:98:4d:55:
4f:7f:be:8b:b5:1f:d0:fa:60:20:dd:9c:45:fc:97:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:1C:32:4E:16:62:12:6B:0B:40:10:C2:0C:5A:EE:28:06:17:9B
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:32:e3:2b:05:65:a7:d0:3e:5a:18:08:16:f5:30:e9:81:
2d:57:dc:7c:85:9e:67:f9:6e:80:3a:b6:51:bc:03:0d:c4:69:
51:ef:65:2e:05:d5:e5:d0:f4:20:a0:0c:e3:04:fe:f9:8b:01:
6a:23:d1:4c:fe:ba:ff:db:8e:3c:96:7f:be:77:da:71:9c:93:
ab:b2:84:9f:90:90:89:ec:77:68:93:3b:38:dd:3f:8f:95:08:
1d:e2:ab:e1:b5:e2:61:83:3d:33:44:a0:5d:14:e7:d6:cb:eb:
cd:81:7b:70:d8:1e:52:c0:43:20:2c:3d:70:fe:ce:55:cf:bc:
05:3e:80:2f:20:dd:c8:40:76:6e:27:64:a7:d6:53:9e:a5:a1:
b9:21:82:78:e4:78:45:8f:30:a5:de:2c:a5:1c:59:cd:43:f8:
85:54:03:68:96:6c:fc:1e:ea:d7:d8:d5:74:9e:7c:5d:b9:21:
68:be:70:4f:fd:13:86:ea:58:70:ff:67:3b:0b:aa:7c:db:18:
08:c7:c5:4c:20:a1:ad:b8:1a:73:f3:a9:55:e4:14:49:4a:73:
a6:05:04:b2:71:84:ef:5a:e6:8f:45:5f:09:27:73:e1:50:4d:
45:ee:5b:a4:d9:5f:a1:73:91:e4:b1:99:cb:6b:9c:a8:f0:81:
bf:f1:91:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDm08+zjitlffq3AIxlZKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjUwNzI1MjIwMTQ4WhcNMjUwNzI2MjIwMTQ4WjAzMTEwLwYDVQQD
EyhkOGUxMWMzMjRlMTY2MjEyNmIwYjQwMTBjMjBjNWFlZTI4MDYxNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBU+xkhG0oy2GPo+NLuqveWggzuB
1lKm0HEMsKJA43k2pPCal9VCDfUcZW7vENS5xQfoR9TW9aktjdDNPyZZM9kALlqd
gAvfrCS6/OVDYJ0EjoXP9WkFGqM1hOMyNMnamSb6MWjoJ2cgmj3KZ7BL+5b4jiPQ
gyDVs5miyCzNWaqkvZgEjgVW1Iwth70hK5dTxmr7PDSu+3CKvIGdgSbc9bXL2TWA
M6hRpx5iAK+GhOaGcQtUuAhtGE3/Smh1g5tZqXKRH19ldpy4UHetQAue6wWowhtW
qMs5b96IQ8DYFO1LlbP1TsGAgieBxfiYTVVPf76LtR/Q+mAg3ZxF/Jd6IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjhHDJOFmISawtAEMIMWu4oBhebMB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmMy4ysF
ZafQPloYCBb1MOmBLVfcfIWeZ/lugDq2UbwDDcRpUe9lLgXV5dD0IKAM4wT++YsB
aiPRTP66/9uOPJZ/vnfacZyTq7KEn5CQiex3aJM7ON0/j5UIHeKr4bXiYYM9M0Sg
XRTn1svrzYF7cNgeUsBDICw9cP7OVc+8BT6ALyDdyEB2bidkp9ZTnqWhuSGCeOR4
RY8wpd4spRxZzUP4hVQDaJZs/B7q19jVdJ58XbkhaL5wT/0ThupYcP9nOwuqfNsY
CMfFTCChrbgac/OpVeQUSUpzpgUEsnGE71rmj0VfCSdz4VBNRe5bpNlfoXOR5LGZ
y2ucqPCBv/GRnA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:37 2025 by rpki-client