Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: T2QbGn4Is9Kv6u0x1yy8ytLj8adVTYLG2nUt0+nW38g=
Subject key identifier: 2A:9F:47:0D:E2:03:6E:29:73:0F:B9:0E:27:AE:C3:7E:28:DC:12:05
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 01984A09D079B23759629552D3E65E065C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 0319
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: nZMubkwHaTpvSI1iqy9GvyR3vLGtpBcqAajxJG+gzo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d0:79:b2:37:59:62:95:52:d3:e6:5e:06:5c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=2a9f470de2036e29730fb90e27aec37e28dc1205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:b9:d3:c7:a5:30:55:c2:cd:11:0f:11:e1:
06:af:ec:15:c4:32:b3:48:c1:84:dc:22:02:3a:dd:
cf:a9:fe:e8:16:c7:69:74:64:27:8b:6b:50:ac:09:
ee:3c:2e:16:80:7a:81:32:a7:d8:bf:d5:ef:cd:71:
a5:4f:37:f7:6d:cb:4f:f1:7f:f2:25:72:bd:80:b2:
e2:c4:11:c2:aa:c4:3f:2e:68:a1:20:57:f1:f0:1b:
16:77:2e:c2:54:d9:10:ce:ff:42:3f:63:5a:02:dd:
d2:88:2f:dc:2b:c5:89:24:cc:d3:af:c0:b5:e4:dd:
8f:77:2f:56:58:eb:b6:56:5e:16:91:86:a0:0f:35:
ab:b3:e9:59:54:23:c9:d0:b7:c2:b5:e6:c8:82:05:
85:38:94:e2:6f:74:62:f5:e4:37:c1:eb:95:14:8a:
78:a4:14:94:6a:56:d5:b1:99:a4:80:78:c1:f8:a6:
b6:3c:8f:f2:50:30:28:86:9a:09:26:be:46:a5:03:
1b:1e:7a:ce:61:7d:62:fb:0b:1b:51:1d:7e:66:18:
1e:f5:b7:56:c5:6d:8d:5f:f5:14:30:9d:0a:21:29:
bb:22:5a:06:26:99:94:a5:7c:94:03:6f:74:50:92:
8f:16:7b:be:04:47:4c:1a:db:fb:eb:f7:7f:a1:96:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:47:0D:E2:03:6E:29:73:0F:B9:0E:27:AE:C3:7E:28:DC:12:05
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:e3:4f:30:c1:8c:37:ab:01:b4:d4:ba:c8:c6:3f:ef:55:
3a:aa:83:01:31:c8:c9:6b:d8:23:b0:a8:ab:a5:ce:40:5b:72:
9d:8a:d3:7d:b5:0c:fa:b3:f4:96:3d:0f:38:d1:f6:6d:19:49:
17:49:2f:6b:1e:26:49:41:5d:88:4c:90:27:02:53:11:44:5d:
4d:80:b4:7e:b3:df:7a:9a:d8:e2:be:0f:8b:bf:b8:bf:09:92:
73:8f:75:8b:26:f4:94:1f:1e:93:bb:b7:4a:a6:34:1e:01:60:
58:38:99:0a:a0:c9:28:a0:fb:1b:75:10:23:e5:dd:1a:1c:dc:
b4:90:6e:05:6c:a1:f4:cb:9c:2a:5f:de:81:c3:e5:bf:9b:10:
d6:77:b1:6f:df:5d:c4:a0:e8:87:a8:50:03:81:5c:5c:dd:dc:
36:2b:15:d7:43:e1:a3:1c:e1:18:bf:e2:f9:08:1e:be:85:af:
10:0c:fb:ba:1e:08:05:cb:89:33:60:5c:cc:36:16:ea:0a:11:
43:be:62:a6:b0:8f:a3:4e:14:7d:39:5d:46:1d:c9:62:8e:ef:
4c:12:59:7a:21:6f:6d:ae:27:66:1e:b3:bd:b2:d0:8c:11:89:
c1:a7:5e:76:03:3a:b0:bd:2a:24:04:87:ee:5d:a5:7d:66:d5:
f8:fd:7e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCdB5sjdZYpVS0+ZeBlxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy
MGU0NTIwHhcNMjUwNzI3MDQwMDEzWhcNMjUwNzI4MDQwMDEzWjAzMTEwLwYDVQQD
EygyYTlmNDcwZGUyMDM2ZTI5NzMwZmI5MGUyN2FlYzM3ZTI4ZGMxMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk42508elMFXCzREPEeEGr+wVxDKz
SMGE3CICOt3Pqf7oFsdpdGQni2tQrAnuPC4WgHqBMqfYv9XvzXGlTzf3bctP8X/y
JXK9gLLixBHCqsQ/LmihIFfx8BsWdy7CVNkQzv9CP2NaAt3SiC/cK8WJJMzTr8C1
5N2Pdy9WWOu2Vl4WkYagDzWrs+lZVCPJ0LfCtebIggWFOJTib3Ri9eQ3weuVFIp4
pBSUalbVsZmkgHjB+Ka2PI/yUDAohpoJJr5GpQMbHnrOYX1i+wsbUR1+Zhge9bdW
xW2NX/UUMJ0KISm7IloGJpmUpXyUA290UJKPFnu+BEdMGtv76/d/oZZI5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqfRw3iA24pcw+5Dieuw34o3BIFMB8GA1UdIwQY
MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt
OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj
LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkPjTzDB
jDerAbTUusjGP+9VOqqDATHIyWvYI7Coq6XOQFtynYrTfbUM+rP0lj0PONH2bRlJ
F0kvax4mSUFdiEyQJwJTEURdTYC0frPfeprY4r4Pi7+4vwmSc491iyb0lB8ek7u3
SqY0HgFgWDiZCqDJKKD7G3UQI+XdGhzctJBuBWyh9MucKl/egcPlv5sQ1nexb99d
xKDoh6hQA4FcXN3cNisV10PhoxzhGL/i+QgevoWvEAz7uh4IBcuJM2BczDYW6goR
Q75iprCPo04UfTldRh3JYo7vTBJZeiFvba4nZh6zvbLQjBGJwadedgM6sL0qJASH
7l2lfWbV+P1+MA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:37:56 2025 by rpki-client