Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: 2CEa5CZje8VXEQh/58ER8HJFcjHRh9C7TQ6aoRzslpc=
Subject key identifier: B2:DA:0E:60:29:EB:7B:B9:0C:EA:01:3E:32:0D:6C:C9:F6:58:4C:D9
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019851FAF61A0CCCEEA886A6FD505E194B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0C34
Signing time: Mon 28 Jul 2025 17:00:58 +0000
Manifest this update: Mon 28 Jul 2025 17:00:58 +0000
Manifest next update: Tue 29 Jul 2025 17:00:58 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: GuDVi7xCyMdN9QO1IhhzaiJ4xuQ3jhR/Ryyy376AzHg=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:f6:1a:0c:cc:ee:a8:86:a6:fd:50:5e:19:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Jul 28 17:00:58 2025 GMT
Not After : Jul 29 17:00:58 2025 GMT
Subject: CN=b2da0e6029eb7bb90cea013e320d6cc9f6584cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:f1:96:a2:f8:e6:9b:ba:40:0a:1e:b3:f4:
1f:c2:e9:0e:f0:65:9f:78:d3:2f:d5:3c:0e:93:13:
39:f5:6b:db:af:ef:45:59:43:f0:46:0f:ed:8b:4f:
77:38:c4:64:4d:89:42:15:02:7a:85:26:e2:e1:fb:
16:37:f5:a2:36:d4:d3:13:f8:74:4e:52:dd:b3:0f:
48:6c:69:1d:10:cb:37:5a:a4:a9:44:4f:37:63:bc:
91:0f:19:d8:40:57:6e:b6:4f:ad:62:94:bc:aa:41:
ee:88:8a:fe:10:f5:2c:c1:8e:7d:95:fb:88:1f:9a:
bb:17:96:9f:ad:9d:5d:a7:24:b0:1e:70:db:87:42:
6c:3a:6a:e6:4f:ce:4d:70:ab:12:1e:57:ba:53:93:
dc:3d:df:d1:1c:f4:64:4d:16:a6:74:8d:6c:c4:85:
5c:31:56:1f:e2:a3:5a:c8:31:f4:45:59:c8:7e:b4:
0d:25:83:c5:37:9c:b3:3b:88:13:fd:f6:e9:08:b0:
14:d0:3d:e4:59:ae:87:b2:c0:a7:5c:56:61:e8:e2:
a1:2f:11:4d:ca:6c:b7:c9:b7:6f:75:ed:b7:df:44:
73:3e:51:42:6a:36:dc:95:5b:ed:2a:04:0f:9c:c5:
98:62:2f:83:fc:60:13:bb:e6:53:ba:f1:0d:72:a8:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:0E:60:29:EB:7B:B9:0C:EA:01:3E:32:0D:6C:C9:F6:58:4C:D9
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1e:a4:63:b6:d0:b4:28:88:dc:19:40:93:84:50:e9:09:0c:
37:8d:2d:2a:e8:d3:64:9f:f7:77:c6:ac:d8:de:c6:2a:4f:7e:
e4:3b:15:91:09:ed:9f:fb:98:84:ab:1f:31:62:f0:3e:3d:6c:
63:f6:66:a6:2d:62:2f:a2:2a:5f:04:76:fa:d2:d4:54:01:9b:
15:81:b8:b3:ef:6b:c6:62:3e:2d:82:d7:ca:c6:dd:7f:2d:97:
a6:32:c9:c4:ed:70:01:21:93:36:16:92:f4:ed:96:5d:a8:b9:
1d:5e:89:e9:ad:ef:d8:74:a4:d3:7a:56:41:7a:1a:9d:85:6d:
e0:45:ec:00:7d:8a:d1:61:a1:e4:39:f2:67:af:6c:49:7b:23:
b7:5a:aa:f4:4d:fb:f4:eb:c8:f1:05:10:a1:7c:bc:67:c9:0a:
bd:4b:66:20:d5:4f:2e:91:fd:31:cc:fb:b1:ba:58:2e:6a:d4:
e7:6e:20:f5:eb:9b:7f:fd:58:87:d4:17:13:d5:66:88:88:ce:
d1:96:2f:3d:32:aa:86:a2:f5:11:6f:e3:17:2f:33:f5:fb:96:
81:06:32:f5:e0:d8:a1:98:00:47:10:8f:f0:67:63:00:df:32:
7f:4f:8d:5c:16:d9:17:25:95:5c:3c:e5:4f:50:cd:06:fb:09:
90:26:e3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+vYaDMzuqIam/VBeGUuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5
YWVmMDYwHhcNMjUwNzI4MTcwMDU4WhcNMjUwNzI5MTcwMDU4WjAzMTEwLwYDVQQD
EyhiMmRhMGU2MDI5ZWI3YmI5MGNlYTAxM2UzMjBkNmNjOWY2NTg0Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDxlqL45pu6QAoes/QfwukO8GWf
eNMv1TwOkxM59Wvbr+9FWUPwRg/ti093OMRkTYlCFQJ6hSbi4fsWN/WiNtTTE/h0
TlLdsw9IbGkdEMs3WqSpRE83Y7yRDxnYQFdutk+tYpS8qkHuiIr+EPUswY59lfuI
H5q7F5afrZ1dpySwHnDbh0JsOmrmT85NcKsSHle6U5PcPd/RHPRkTRamdI1sxIVc
MVYf4qNayDH0RVnIfrQNJYPFN5yzO4gT/fbpCLAU0D3kWa6HssCnXFZh6OKhLxFN
ymy3ybdvde2330RzPlFCajbclVvtKgQPnMWYYi+D/GATu+ZTuvENcqi8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLaDmAp63u5DOoBPjINbMn2WEzZMB8GA1UdIwQY
MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt
ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi
LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh6kY7bQ
tCiI3BlAk4RQ6QkMN40tKujTZJ/3d8as2N7GKk9+5DsVkQntn/uYhKsfMWLwPj1s
Y/Zmpi1iL6IqXwR2+tLUVAGbFYG4s+9rxmI+LYLXysbdfy2XpjLJxO1wASGTNhaS
9O2WXai5HV6J6a3v2HSk03pWQXoanYVt4EXsAH2K0WGh5DnyZ69sSXsjt1qq9E37
9OvI8QUQoXy8Z8kKvUtmINVPLpH9Mcz7sbpYLmrU524g9eubf/1Yh9QXE9VmiIjO
0ZYvPTKqhqL1EW/jFy8z9fuWgQYy9eDYoZgARxCP8GdjAN8yf0+NXBbZFyWVXDzl
T1DNBvsJkCbjTg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 01:57:36 2025 by rpki-client