Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: j5M/j++UIqgV9KF/SPaG/qbAC1fkyFm88YvcqTnOcP4=
Subject key identifier: B4:3F:9B:F2:DA:C7:D7:D7:06:80:7A:B2:B4:AB:23:49:2C:3F:1F:69
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019838A87E8889689701E2E4956863A058B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 15FA
Signing time: Wed 23 Jul 2025 19:00:23 +0000
Manifest this update: Wed 23 Jul 2025 19:00:23 +0000
Manifest next update: Thu 24 Jul 2025 19:00:23 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: SGoj5u/1NNB6Q2uCZrgSeCTO7FxcNHW7Qw9v99cb6d4=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:a8:7e:88:89:68:97:01:e2:e4:95:68:63:a0:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jul 23 19:00:23 2025 GMT
Not After : Jul 24 19:00:23 2025 GMT
Subject: CN=b43f9bf2dac7d7d706807ab2b4ab23492c3f1f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:56:dd:a8:11:1f:55:63:8f:bd:a6:51:b3:
90:7f:fc:1f:51:3b:2d:2c:f3:6f:39:af:da:b8:b3:
77:da:97:db:80:dd:96:30:ae:6a:59:4c:7c:64:9b:
27:06:bb:5a:38:eb:1f:40:9a:85:da:67:e1:64:50:
e1:26:07:a1:fa:79:7a:61:31:85:e0:f6:55:1b:f6:
a8:7e:c4:ef:0f:a5:4e:d1:23:5a:2a:06:56:e4:30:
1f:72:a7:f4:e4:b7:d1:71:cd:b9:18:4a:58:40:c6:
80:4a:f2:d5:69:49:98:6d:8e:e1:63:a2:ea:98:7f:
6e:76:81:a1:b3:c0:27:5f:5f:4b:22:10:b6:17:05:
ae:2e:f5:0f:66:63:94:cd:42:49:d6:9e:df:81:fd:
be:ef:84:bf:ec:d1:2d:bc:b5:a0:0e:17:4f:f6:77:
0a:6f:50:33:eb:ca:ec:6e:a9:63:b3:ee:1e:d6:69:
f5:ab:f5:e9:ee:64:26:92:6f:ea:6a:33:de:bb:ab:
5b:84:8e:20:ed:f5:29:f6:fc:fe:d6:d6:82:1f:f1:
78:ae:9e:06:1e:76:4f:52:68:4f:7d:8d:83:0c:77:
2b:e1:07:2f:fa:0c:32:92:a9:3a:60:3d:44:96:78:
45:86:e6:6a:53:27:56:ca:97:75:1f:5b:ac:8f:82:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:9B:F2:DA:C7:D7:D7:06:80:7A:B2:B4:AB:23:49:2C:3F:1F:69
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:03:2a:f2:c3:b3:23:eb:e3:f4:b3:91:9c:13:9c:4f:36:
a8:7e:f9:b9:ca:d9:e7:8e:3c:11:d7:dd:7e:da:a5:ac:81:1e:
32:29:49:d9:51:4c:68:45:35:c7:41:42:7a:79:ab:3c:12:d0:
19:ba:d1:36:1b:22:02:78:ae:e0:76:d6:46:a5:68:50:0b:9c:
b4:75:a3:bc:66:e8:99:4d:62:6a:06:8f:5e:fe:05:9b:1e:8a:
4d:2a:3d:7a:4e:b2:a1:0a:aa:9f:55:a6:49:e0:78:a8:66:84:
d9:63:d3:0a:c3:8d:71:5d:9f:30:a9:73:e9:74:ee:73:e5:16:
c0:b3:69:28:35:0e:82:cd:50:97:e8:52:48:05:d4:30:76:59:
bb:81:b9:1f:d6:55:93:4b:63:b1:b4:8e:39:ef:d1:61:75:af:
ea:22:df:2e:ad:9d:c1:b0:42:df:0b:50:26:6a:79:54:dc:28:
fa:27:61:8b:56:e4:a6:0c:f3:fd:5a:89:03:85:22:e9:f7:cc:
b0:f3:78:99:55:bd:35:5f:9d:6e:aa:8a:d3:39:1f:9d:ea:1e:
ff:1d:9a:23:9f:af:0d:64:7e:a6:c5:69:66:a1:34:a1:f2:2d:
10:57:17:71:7c:3a:12:15:1a:6b:2d:b1:4d:dd:00:26:58:f4:
7c:c3:b3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4qH6IiWiXAeLklWhjoFiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NGI3ZDMwYzFjNGY2MjQzMTgyZDNlY2QzZDA1MzlmNDJm
YWFjZmQwHhcNMjUwNzIzMTkwMDIzWhcNMjUwNzI0MTkwMDIzWjAzMTEwLwYDVQQD
EyhiNDNmOWJmMmRhYzdkN2Q3MDY4MDdhYjJiNGFiMjM0OTJjM2YxZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ZW3agRH1Vjj72mUbOQf/wfUTst
LPNvOa/auLN32pfbgN2WMK5qWUx8ZJsnBrtaOOsfQJqF2mfhZFDhJgeh+nl6YTGF
4PZVG/aofsTvD6VO0SNaKgZW5DAfcqf05LfRcc25GEpYQMaASvLVaUmYbY7hY6Lq
mH9udoGhs8AnX19LIhC2FwWuLvUPZmOUzUJJ1p7fgf2+74S/7NEtvLWgDhdP9ncK
b1Az68rsbqljs+4e1mn1q/Xp7mQmkm/qajPeu6tbhI4g7fUp9vz+1taCH/F4rp4G
HnZPUmhPfY2DDHcr4Qcv+gwykqk6YD1ElnhFhuZqUydWypd1H1usj4LYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ/m/Lax9fXBoB6srSrI0ksPx9pMB8GA1UdIwQY
MBaAFJlLfTDBxPYkMYLT7NPQU59C+qz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVV0OU1NSEU5aVF4Z3RQczA5QlRuMEw2clAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWI4MWUtNDViOC00MWE1LWFhNWUt
NTY0NmVlZGQ5OWJmLzEvbVV0OU1NSEU5aVF4Z3RQczA5QlRuMEw2clAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80YWI4MWUtNDViOC00MWE1LWFhNWUtNTY0NmVlZGQ5OWJm
LzEvbVV0OU1NSEU5aVF4Z3RQczA5QlRuMEw2clAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEawDKvLD
syPr4/SzkZwTnE82qH75ucrZ5448EdfdftqlrIEeMilJ2VFMaEU1x0FCenmrPBLQ
GbrRNhsiAniu4HbWRqVoUAuctHWjvGbomU1iagaPXv4Fmx6KTSo9ek6yoQqqn1Wm
SeB4qGaE2WPTCsONcV2fMKlz6XTuc+UWwLNpKDUOgs1Ql+hSSAXUMHZZu4G5H9ZV
k0tjsbSOOe/RYXWv6iLfLq2dwbBC3wtQJmp5VNwo+idhi1bkpgzz/VqJA4Ui6ffM
sPN4mVW9NV+dbqqK0zkfneoe/x2aI5+vDWR+psVpZqE0ofItEFcXcXw6EhUaay2x
Td0AJlj0fMOz4A==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:56 2025 by rpki-client