Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: CJ/eBmovK4K9G7Tp7iWnGp6XN5y/IdfO2vVOOra0ng0=
Subject key identifier: BB:35:12:CE:D3:02:0A:E1:CE:7B:83:C3:78:C8:81:D6:2A:57:4A:B2
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 01985EA3B96C271EA80972724CDF54FE741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 11AB
Signing time: Thu 31 Jul 2025 04:00:44 +0000
Manifest this update: Thu 31 Jul 2025 04:00:44 +0000
Manifest next update: Fri 01 Aug 2025 04:00:44 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: CDmUAnNlBgYrLSeFIQUYirAwBXeuRJLAE6rThqOuBRQ=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:a3:b9:6c:27:1e:a8:09:72:72:4c:df:54:fe:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Jul 31 04:00:44 2025 GMT
Not After : Aug 1 04:00:44 2025 GMT
Subject: CN=bb3512ced3020ae1ce7b83c378c881d62a574ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:a5:1b:8c:78:7c:6e:10:40:23:a0:88:23:
4e:7f:13:e4:9b:c4:fd:a8:b5:f7:1b:56:61:78:1e:
4d:c8:36:d7:78:5e:05:0f:ce:bf:c0:92:90:e1:8a:
cf:ce:04:22:87:c4:e4:c2:82:b4:31:ad:cb:e5:f0:
e5:76:eb:0c:48:14:f9:fc:1b:86:3a:db:ce:ab:0e:
69:37:15:6e:c3:a3:14:d8:38:cf:d3:86:ad:6f:c2:
1b:29:3e:4c:7e:0d:91:b4:52:cc:68:df:c9:3c:ed:
5a:c4:94:46:4e:9f:aa:01:69:65:d7:c5:65:1c:fc:
c2:8a:19:d3:1d:dd:4c:dc:91:1a:17:e0:99:72:bc:
ed:e9:da:1e:84:93:0e:0d:99:a9:16:a6:45:1b:8f:
cc:f6:9b:89:3d:52:e1:5b:30:8c:34:19:b3:80:1d:
c2:b5:23:99:1c:bf:6b:19:66:78:17:ca:6e:ae:ba:
93:fc:aa:e8:f6:91:10:12:0e:ae:46:3e:99:2e:ea:
e4:75:e7:23:db:d5:88:d7:98:4b:0a:ce:e0:63:2f:
89:db:c5:a1:c6:f3:a5:37:5a:e0:90:de:5f:65:69:
b3:32:77:19:5c:e3:64:a2:af:b3:8e:49:c9:7b:8e:
d5:e4:0e:a0:27:c6:aa:01:f1:e5:62:4e:7b:fd:84:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:12:CE:D3:02:0A:E1:CE:7B:83:C3:78:C8:81:D6:2A:57:4A:B2
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ff:e2:f5:8a:ce:0c:0e:0a:a9:52:fc:f8:d9:d8:42:50:ce:
9c:9e:26:3b:5f:33:45:d5:e8:98:f2:51:41:a5:74:1c:ec:6b:
2a:9a:cb:79:cc:1f:04:88:cc:99:37:4a:e2:36:b6:12:96:c4:
d1:be:d0:0a:2a:cd:dc:96:84:f1:c6:b7:36:e8:91:b8:f1:69:
a9:8f:36:49:1d:d0:5d:e2:7b:ea:c2:d2:37:22:1a:02:56:fd:
6e:1e:f4:7b:77:cf:fb:44:f1:23:1f:22:21:13:a8:8f:c4:dc:
ea:66:ff:e9:02:e8:55:c6:a5:ca:13:05:e4:84:95:2f:69:3f:
f8:fc:13:2b:16:3a:51:ba:e4:a0:d0:d3:61:33:83:d9:9e:2a:
65:05:70:6f:47:f1:26:23:8e:f3:8c:da:80:ba:eb:b9:78:40:
b6:8d:76:54:f4:79:5f:24:a8:f2:db:06:55:c8:ec:48:ab:be:
6a:2c:de:c6:63:60:3c:37:bc:26:77:0a:ae:ad:74:db:f5:b9:
c0:39:9f:32:67:c9:50:be:68:8c:8b:9e:24:55:82:8a:a6:aa:
9f:fa:19:8d:a1:00:11:fd:ce:8c:09:10:5a:0d:c5:47:42:6c:
60:c9:47:f2:ce:3c:1a:ec:1e:2e:a6:8e:26:a3:71:9c:2e:de:
47:e4:78:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZheo7lsJx6oCXJyTN9U/nQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh
MjkyMTUwHhcNMjUwNzMxMDQwMDQ0WhcNMjUwODAxMDQwMDQ0WjAzMTEwLwYDVQQD
EyhiYjM1MTJjZWQzMDIwYWUxY2U3YjgzYzM3OGM4ODFkNjJhNTc0YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEClG4x4fG4QQCOgiCNOfxPkm8T9
qLX3G1ZheB5NyDbXeF4FD86/wJKQ4YrPzgQih8TkwoK0Ma3L5fDldusMSBT5/BuG
OtvOqw5pNxVuw6MU2DjP04atb8IbKT5Mfg2RtFLMaN/JPO1axJRGTp+qAWll18Vl
HPzCihnTHd1M3JEaF+CZcrzt6doehJMODZmpFqZFG4/M9puJPVLhWzCMNBmzgB3C
tSOZHL9rGWZ4F8purrqT/Kro9pEQEg6uRj6ZLurkdecj29WI15hLCs7gYy+J28Wh
xvOlN1rgkN5fZWmzMncZXONkoq+zjknJe47V5A6gJ8aqAfHlYk57/YRuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs1Es7TAgrhznuDw3jIgdYqV0qyMB8GA1UdIwQY
MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt
NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz
LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw//i9YrO
DA4KqVL8+NnYQlDOnJ4mO18zRdXomPJRQaV0HOxrKprLecwfBIjMmTdK4ja2EpbE
0b7QCirN3JaE8ca3NuiRuPFpqY82SR3QXeJ76sLSNyIaAlb9bh70e3fP+0TxIx8i
IROoj8Tc6mb/6QLoVcalyhMF5ISVL2k/+PwTKxY6UbrkoNDTYTOD2Z4qZQVwb0fx
JiOO84zagLrruXhAto12VPR5XySo8tsGVcjsSKu+aizexmNgPDe8JncKrq102/W5
wDmfMmfJUL5ojIueJFWCiqaqn/oZjaEAEf3OjAkQWg3FR0JsYMlH8s48GuweLqaO
JqNxnC7eR+R4Hg==
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:06:11 2025 by rpki-client