Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: MXPxeE8MOR+4mZm5Uq1k2nhtpOf8zhl4OqG4eUNUf/w=
Subject key identifier: 9E:9F:3C:3B:5A:D1:E9:6C:18:75:C6:FE:B5:A0:42:8D:9F:36:42:EC
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01984A77A83154E0ACB8BF3CF86805B0D660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 0624
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: gYv8DShQoU5Uw+5FwO2DT47PEjq06kTZiUjNS7STyeA=)
2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a8:31:54:e0:ac:b8:bf:3c:f8:68:05:b0:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=9e9f3c3b5ad1e96c1875c6feb5a0428d9f3642ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:c4:aa:ea:2a:e5:57:80:1a:20:ff:c5:db:
06:da:ae:66:fd:2e:37:62:da:59:87:2a:d1:96:b2:
e6:80:d7:44:45:20:b7:c0:c5:9b:59:52:c3:14:78:
09:c9:cd:94:0f:0b:91:a0:b6:d2:5b:cc:59:be:d2:
1a:cf:f8:d2:9c:74:d2:11:e5:ff:2b:be:28:38:3d:
00:ff:8b:1d:f8:fc:95:97:92:3d:33:6a:55:26:46:
cf:aa:7e:bd:20:92:f6:d4:d7:29:6d:2e:31:1f:5c:
75:5e:7d:64:38:12:1e:b7:fb:ce:b6:6f:d6:fc:bf:
9c:e9:15:65:a4:3d:7e:93:98:6a:7a:c0:47:8a:6b:
e4:cf:70:ef:2d:08:65:8d:6e:31:fb:6f:24:ea:c1:
c9:0e:db:a3:4d:b1:30:38:a1:5e:50:0e:3a:eb:cf:
e7:93:69:84:83:7f:35:00:96:bd:46:e1:e6:4d:3e:
ba:be:66:31:b0:b0:da:e6:01:fd:2a:8c:3e:97:d8:
87:45:44:90:d3:af:27:52:57:f7:1c:12:88:21:bd:
29:cc:f8:34:32:06:6d:97:29:88:fb:16:75:57:4f:
b4:16:45:06:a9:0a:b1:6a:df:28:1e:58:be:72:09:
b1:76:aa:b7:27:73:c6:21:25:76:2c:97:9c:45:d8:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:3C:3B:5A:D1:E9:6C:18:75:C6:FE:B5:A0:42:8D:9F:36:42:EC
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:73:23:57:a6:d9:ed:8c:60:77:55:96:a0:ae:86:17:6b:e6:
7b:77:99:aa:75:8d:99:f2:4d:2f:13:b0:09:d3:7c:f3:3e:0d:
4e:f7:57:da:74:d9:63:0a:fb:32:44:6f:24:81:58:75:46:8a:
9a:97:d3:97:72:34:1d:2f:ec:a8:b3:75:b4:34:7b:f7:ce:9c:
0e:56:60:2b:65:5a:12:e2:a6:e0:80:48:8a:98:87:35:ca:5b:
ef:de:09:41:bf:58:e1:41:ae:68:03:bb:64:65:e9:66:af:85:
a6:e3:a9:6d:f1:95:ee:2c:c7:49:6d:74:72:c1:9e:42:a9:d5:
bf:c0:6e:ef:06:2b:68:24:99:13:b7:24:20:ce:bf:88:b7:5d:
b1:a2:38:5d:12:10:1d:de:66:95:54:ae:4e:94:68:cc:81:a5:
66:7f:49:1c:f1:11:28:76:61:64:c6:5b:a2:99:3f:96:fa:56:
c7:55:85:f5:94:9a:3b:f4:d6:8d:cd:cc:1e:ff:a4:f7:ae:7f:
1e:f3:5b:9f:f1:6e:6b:4c:21:cc:a7:c6:6b:d6:ec:7d:98:73:
11:cd:aa:4e:6b:2e:2b:72:56:dd:f7:ca:fd:28:7d:ef:5f:3a:
d1:b8:4f:e0:7e:3d:80:b8:06:be:3c:91:a8:f5:64:f5:60:d5:
d2:c8:a5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd6gxVOCsuL88+GgFsNZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2
MTBjODQwHhcNMjUwNzI3MDYwMDEyWhcNMjUwNzI4MDYwMDEyWjAzMTEwLwYDVQQD
Eyg5ZTlmM2MzYjVhZDFlOTZjMTg3NWM2ZmViNWEwNDI4ZDlmMzY0MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSfEquoq5VeAGiD/xdsG2q5m/S43
YtpZhyrRlrLmgNdERSC3wMWbWVLDFHgJyc2UDwuRoLbSW8xZvtIaz/jSnHTSEeX/
K74oOD0A/4sd+PyVl5I9M2pVJkbPqn69IJL21NcpbS4xH1x1Xn1kOBIet/vOtm/W
/L+c6RVlpD1+k5hqesBHimvkz3DvLQhljW4x+28k6sHJDtujTbEwOKFeUA4668/n
k2mEg381AJa9RuHmTT66vmYxsLDa5gH9Kow+l9iHRUSQ068nUlf3HBKIIb0pzPg0
MgZtlymI+xZ1V0+0FkUGqQqxat8oHli+cgmxdqq3J3PGISV2LJecRdjiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6fPDta0elsGHXG/rWgQo2fNkLsMB8GA1UdIwQY
MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt
YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1
LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHMjV6bZ
7Yxgd1WWoK6GF2vme3eZqnWNmfJNLxOwCdN88z4NTvdX2nTZYwr7MkRvJIFYdUaK
mpfTl3I0HS/sqLN1tDR7986cDlZgK2VaEuKm4IBIipiHNcpb794JQb9Y4UGuaAO7
ZGXpZq+FpuOpbfGV7izHSW10csGeQqnVv8Bu7wYraCSZE7ckIM6/iLddsaI4XRIQ
Hd5mlVSuTpRozIGlZn9JHPERKHZhZMZbopk/lvpWx1WF9ZSaO/TWjc3MHv+k965/
HvNbn/Fua0whzKfGa9bsfZhzEc2qTmsuK3JW3ffK/Sh971860bhP4H49gLgGvjyR
qPVk9WDV0sil8A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:35 2025 by rpki-client