Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: 4msvwtFCMEaZl/YAEuMEITVAjZ5QLGevsiXLJNZmTgQ=
Subject key identifier: 42:8A:B9:AD:32:48:64:90:4C:F2:AB:06:09:F4:38:36:F8:1E:DE:95
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01984BC19BF743F720D092FA1D26108277D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 12EE
Signing time: Sun 27 Jul 2025 12:00:36 +0000
Manifest this update: Sun 27 Jul 2025 12:00:36 +0000
Manifest next update: Mon 28 Jul 2025 12:00:36 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: y2nvL0wk6laPaGc5pTxWZksNcD2juk9BtFnY3Wo8bc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:9b:f7:43:f7:20:d0:92:fa:1d:26:10:82:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jul 27 12:00:36 2025 GMT
Not After : Jul 28 12:00:36 2025 GMT
Subject: CN=428ab9ad324864904cf2ab0609f43836f81ede95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:71:6b:9f:94:35:78:39:25:2d:23:9c:bc:
f6:6a:40:37:0c:0d:c3:f1:ca:13:bf:5d:ee:de:d1:
53:5c:91:8b:fd:df:12:04:2b:30:5a:89:44:b1:20:
93:17:10:9e:88:d0:23:19:ed:7e:b7:27:c2:56:b7:
25:ea:b2:8b:8e:26:c4:6c:43:05:4c:a2:60:99:d0:
56:d4:1d:38:50:c3:c2:ff:35:ca:9b:56:7e:27:43:
f1:12:65:4b:10:a5:0b:6c:ef:5b:66:39:4a:d5:bf:
1e:5f:77:22:cd:a7:67:b8:67:04:12:0e:56:e9:cc:
b5:16:13:2e:b5:10:6d:d6:ed:6c:2e:f6:57:db:38:
ce:57:0e:1d:2f:c9:19:d4:1c:8f:f7:e1:00:c1:bb:
03:da:91:c3:bb:d7:3d:44:1b:53:60:ea:a1:31:63:
2a:f2:1f:84:62:6f:32:c0:b4:b5:41:d8:7e:e7:25:
58:6b:c4:68:11:f4:97:72:8a:32:c5:19:cf:5f:cb:
cc:05:81:2e:2a:38:6a:41:a3:32:b8:b4:d2:03:35:
ea:19:93:a9:fe:49:0f:9f:6a:cf:e4:b6:a8:6f:36:
8f:a9:ce:c7:97:98:fb:28:89:9a:0f:ff:1f:95:5a:
0a:20:8a:9a:82:b0:13:84:70:0f:ba:9e:99:bd:00:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:B9:AD:32:48:64:90:4C:F2:AB:06:09:F4:38:36:F8:1E:DE:95
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:e6:45:bf:52:fa:47:76:44:14:79:19:77:4a:f1:1d:1e:
81:1b:d4:68:f4:b2:f6:31:3c:6c:2e:45:99:bf:dd:fc:29:cc:
7a:73:1f:8c:ef:55:89:64:4f:b7:ab:9e:34:57:89:9a:34:77:
d2:65:9f:62:1b:15:ea:45:7c:ab:d8:b3:0b:a2:b8:1d:4d:45:
a4:4d:8c:7e:6d:63:b7:64:4f:68:31:19:46:4b:fd:05:27:70:
f6:1f:66:9c:ed:eb:73:83:bf:5b:4d:17:bd:83:8c:07:21:35:
47:80:85:c4:4d:78:42:dc:b6:29:7f:99:2f:6f:84:ed:c2:0b:
de:f0:d0:ec:8f:ba:34:a0:d0:b6:d3:86:87:5b:88:7f:a2:f9:
f6:57:86:73:5a:f7:19:e3:d7:fc:42:0d:71:07:0b:ae:d3:4d:
17:f2:c5:d7:60:81:c9:17:91:94:36:28:d9:6f:81:94:cf:44:
7f:b1:66:0b:b6:85:7c:04:33:b8:97:15:70:bb:f4:f2:ed:3b:
7b:78:3a:b3:db:8f:12:77:4f:bf:70:11:03:d4:dc:c1:d1:e6:
e7:e4:66:d0:48:df:15:bb:72:7c:62:4e:bb:58:1e:03:f7:5d:
b0:7e:05:53:1f:bf:97:d0:ca:5c:8c:dd:be:c4:8b:0b:d9:1d:
ed:c4:ad:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwZv3Q/cg0JL6HSYQgnfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjUwNzI3MTIwMDM2WhcNMjUwNzI4MTIwMDM2WjAzMTEwLwYDVQQD
Eyg0MjhhYjlhZDMyNDg2NDkwNGNmMmFiMDYwOWY0MzgzNmY4MWVkZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWNxa5+UNXg5JS0jnLz2akA3DA3D
8coTv13u3tFTXJGL/d8SBCswWolEsSCTFxCeiNAjGe1+tyfCVrcl6rKLjibEbEMF
TKJgmdBW1B04UMPC/zXKm1Z+J0PxEmVLEKULbO9bZjlK1b8eX3cizadnuGcEEg5W
6cy1FhMutRBt1u1sLvZX2zjOVw4dL8kZ1ByP9+EAwbsD2pHDu9c9RBtTYOqhMWMq
8h+EYm8ywLS1Qdh+5yVYa8RoEfSXcooyxRnPX8vMBYEuKjhqQaMyuLTSAzXqGZOp
/kkPn2rP5LaobzaPqc7Hl5j7KImaD/8flVoKIIqagrAThHAPup6ZvQDlMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKKua0ySGSQTPKrBgn0ODb4Ht6VMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjnmRb9S
+kd2RBR5GXdK8R0egRvUaPSy9jE8bC5Fmb/d/CnMenMfjO9ViWRPt6ueNFeJmjR3
0mWfYhsV6kV8q9izC6K4HU1FpE2Mfm1jt2RPaDEZRkv9BSdw9h9mnO3rc4O/W00X
vYOMByE1R4CFxE14Qty2KX+ZL2+E7cIL3vDQ7I+6NKDQttOGh1uIf6L59leGc1r3
GePX/EINcQcLrtNNF/LF12CByReRlDYo2W+BlM9Ef7FmC7aFfAQzuJcVcLv08u07
e3g6s9uPEndPv3ARA9TcwdHm5+Rm0EjfFbtyfGJOu1geA/ddsH4FUx+/l9DKXIzd
vsSLC9kd7cStTw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 22:24:39 2025 by rpki-client