Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier: NEgR650XodTTPUg5gR4APoEghgldeNVaD1Z8vzjkgXU=
Subject key identifier: A1:2E:D7:92:8F:B6:CF:63:79:AA:9F:84:98:B2:9F:FD:F4:EC:FD:2D
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 01984589E3BD1C7D8789427A6BFAD9F57F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number: 0D5B
Signing time: Sat 26 Jul 2025 07:02:01 +0000
Manifest this update: Sat 26 Jul 2025 07:02:01 +0000
Manifest next update: Sun 27 Jul 2025 07:02:01 +0000
Files and hashes: 1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: brm0RvLHh8qXrO7fr1jMB4BvIQ4dJNYJbCIiP0u4rvY=)
2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:e3:bd:1c:7d:87:89:42:7a:6b:fa:d9:f5:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Jul 26 07:02:01 2025 GMT
Not After : Jul 27 07:02:01 2025 GMT
Subject: CN=a12ed7928fb6cf6379aa9f8498b29ffdf4ecfd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:fe:49:45:f5:f2:0b:7c:22:ed:7a:d6:86:
a6:67:68:70:d7:6b:87:1f:44:07:33:42:3d:b5:f0:
fd:57:fb:1f:5b:02:67:55:fc:78:24:bc:3e:4e:76:
5a:a7:e3:52:3e:45:d0:ac:6c:77:d1:de:ce:f9:75:
30:19:9d:80:ed:b4:b8:c8:49:54:0d:3b:31:27:98:
11:47:f0:2f:86:d7:46:96:06:f5:b7:8e:82:f5:96:
bd:c9:36:fc:f8:43:82:b5:c7:3d:4d:8c:30:cb:65:
c4:d9:78:e7:8a:ad:7b:54:f9:4e:f1:5a:61:57:e5:
23:87:88:ac:65:4b:02:1d:74:00:2d:54:61:6e:ae:
e9:35:ec:92:3b:7e:4a:d5:a0:e6:b1:18:eb:c3:a3:
11:23:6c:b3:f2:64:2c:8e:58:83:e4:22:2a:aa:6d:
a3:37:0b:9b:37:02:19:d5:d2:53:db:9b:33:1c:4b:
8a:99:0b:a2:34:1a:88:0f:e3:8e:0b:69:e3:85:03:
7e:84:ea:6a:b1:4c:c0:e6:a0:d8:88:a4:a6:e6:15:
a9:b9:ea:da:29:ed:d1:4c:31:9e:5e:42:7f:f7:f4:
2e:63:57:19:d9:7c:3e:a0:62:fb:66:c2:30:34:f3:
e6:65:65:d4:7e:28:d1:7c:a2:d2:ea:d7:b8:f3:5e:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:D7:92:8F:B6:CF:63:79:AA:9F:84:98:B2:9F:FD:F4:EC:FD:2D
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:63:e5:f1:fa:58:0a:a5:9b:8e:66:c9:00:f7:ae:85:3a:
c7:c8:f0:bb:32:74:55:97:73:73:96:2a:68:69:16:29:a6:8e:
e8:d7:8b:f5:d8:4b:81:5c:9d:2b:97:58:7c:fb:03:94:c0:99:
41:37:53:5e:e3:0d:3a:b6:14:99:fa:af:63:2c:0a:f7:ce:b4:
30:83:0b:28:7c:37:0f:74:f6:fb:68:8a:29:2b:f5:5a:14:20:
02:b3:e4:5c:ad:b4:8e:70:ee:8a:03:ca:69:80:9f:a1:a0:89:
60:7f:de:ab:87:fa:47:0e:9a:76:cb:88:61:da:58:a2:ac:d4:
72:10:11:51:71:41:79:b0:b6:7d:4b:1a:80:9a:c1:fe:4c:89:
47:78:bd:dd:64:03:0a:0a:b3:db:f0:53:16:e9:fc:36:6d:df:
19:88:6a:b0:d0:34:30:ad:22:c1:75:a9:0c:0e:6a:6c:ed:5f:
4f:c6:7a:cc:e3:6f:81:e2:0e:43:95:37:49:a6:8e:04:50:b1:
b1:89:3e:95:ed:3c:97:3e:96:58:74:f2:6c:e4:3c:dc:42:bd:
55:ca:76:cb:f0:d5:3e:25:94:f3:be:3e:33:f4:b5:8b:91:59:
f6:71:57:14:a1:40:99:22:81:02:ca:a5:e5:ef:ea:eb:d1:24:
e5:c4:f8:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFieO9HH2HiUJ6a/rZ9X8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzE2Y2Q0ODgxNTYyZGEzYmYzOTI1YjQ5MThiNmUxMWQ3
NjUxNGMwHhcNMjUwNzI2MDcwMjAxWhcNMjUwNzI3MDcwMjAxWjAzMTEwLwYDVQQD
EyhhMTJlZDc5MjhmYjZjZjYzNzlhYTlmODQ5OGIyOWZmZGY0ZWNmZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9y/+SUX18gt8Iu161oamZ2hw12uH
H0QHM0I9tfD9V/sfWwJnVfx4JLw+TnZap+NSPkXQrGx30d7O+XUwGZ2A7bS4yElU
DTsxJ5gRR/AvhtdGlgb1t46C9Za9yTb8+EOCtcc9TYwwy2XE2Xjniq17VPlO8Vph
V+Ujh4isZUsCHXQALVRhbq7pNeySO35K1aDmsRjrw6MRI2yz8mQsjliD5CIqqm2j
NwubNwIZ1dJT25szHEuKmQuiNBqID+OOC2njhQN+hOpqsUzA5qDYiKSm5hWpuera
Ke3RTDGeXkJ/9/QuY1cZ2Xw+oGL7ZsIwNPPmZWXUfijRfKLS6te4814l1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEu15KPts9jeaqfhJiyn/307P0tMB8GA1UdIwQY
MBaAFDIxbNSIFWLaO/OSW0kYtuEddlFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2Yt
MjYyZGE4ODNjOGUyLzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2YtMjYyZGE4ODNjOGUy
LzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGNj5fH6
WAqlm45myQD3roU6x8jwuzJ0VZdzc5YqaGkWKaaO6NeL9dhLgVydK5dYfPsDlMCZ
QTdTXuMNOrYUmfqvYywK9860MIMLKHw3D3T2+2iKKSv1WhQgArPkXK20jnDuigPK
aYCfoaCJYH/eq4f6Rw6adsuIYdpYoqzUchARUXFBebC2fUsagJrB/kyJR3i93WQD
Cgqz2/BTFun8Nm3fGYhqsNA0MK0iwXWpDA5qbO1fT8Z6zONvgeIOQ5U3SaaOBFCx
sYk+le08lz6WWHTybOQ83EK9Vcp2y/DVPiWU874+M/S1i5FZ9nFXFKFAmSKBAsql
5e/q69Ek5cT4og==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:43 2025 by rpki-client