Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: oAEjxQOzqiO/QpVKYLZUewt6PO/upLhXw2sBchI95FM=
Subject key identifier: 60:DD:63:58:B8:F0:01:4D:EE:C5:3D:E3:32:76:DC:35:31:5A:B1:D1
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 0199304832C149B3DCA0D6580BAB1E3FF6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 074E
Signing time: Tue 09 Sep 2025 21:01:01 +0000
Manifest this update: Tue 09 Sep 2025 21:01:01 +0000
Manifest next update: Wed 10 Sep 2025 21:01:01 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 08VXjsZ0SiH8pNf8/C53N0OSfDYlt+QkQ+eDjPFltN0=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:48:32:c1:49:b3:dc:a0:d6:58:0b:ab:1e:3f:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Sep 9 21:01:01 2025 GMT
Not After : Sep 10 21:01:01 2025 GMT
Subject: CN=60dd6358b8f0014deec53de33276dc35315ab1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:e7:d5:a7:82:9e:17:3e:63:a0:60:aa:f5:
60:db:d2:c7:6c:9b:9c:d4:37:c7:64:17:45:17:3f:
a6:db:fb:a9:43:09:71:02:85:23:96:ea:46:35:98:
fb:55:97:89:26:dc:fa:49:38:18:9e:ba:ab:3b:31:
f4:30:b9:32:7e:85:8e:53:1c:f1:3f:b8:fb:5b:67:
83:fb:19:64:b9:24:fd:ea:71:6b:06:00:6d:0b:81:
39:bd:f1:17:b0:01:f7:6e:c9:06:4f:a1:55:09:95:
c9:24:2f:d1:fe:85:1b:c7:41:10:1b:da:6f:35:30:
b6:b5:30:b6:36:79:8a:25:60:ca:bb:fb:cb:58:04:
73:bf:9a:ca:d0:84:1f:23:34:2d:a5:e9:91:ec:7d:
70:73:b7:5a:5b:f0:67:c7:d8:df:f0:76:81:3f:01:
5a:1d:34:5a:ed:b5:2b:85:17:f0:60:ad:ba:9e:8e:
6f:17:b9:c8:14:3d:18:fd:fc:5d:7d:00:ad:c3:21:
2f:8e:4e:90:db:ba:e7:f9:94:40:f2:51:ec:14:ab:
b9:15:43:cf:96:ef:51:c7:13:89:21:32:89:47:df:
26:6e:22:b9:e5:b2:e0:09:ff:06:91:61:05:07:50:
ed:11:38:56:8f:a1:eb:08:a9:eb:5a:a9:7f:a0:e1:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:63:58:B8:F0:01:4D:EE:C5:3D:E3:32:76:DC:35:31:5A:B1:D1
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:bb:9e:09:63:ef:18:e1:1a:bc:4b:a2:01:7a:52:1a:b4:
38:f7:1a:3c:06:00:ab:02:b4:79:65:cc:1e:c8:1a:d3:a7:ba:
d4:a8:8b:8c:9a:66:b3:76:b7:65:d7:b7:7b:c9:4c:ac:ac:19:
07:e9:eb:f9:fe:44:24:33:94:20:6f:39:85:d7:de:4d:9b:10:
53:52:a1:94:be:ee:88:34:77:7a:7f:8b:7a:c3:f1:85:cd:27:
73:e4:12:41:ef:d2:d6:ff:90:97:c0:40:5e:15:36:d9:76:cd:
38:0e:d9:1a:5d:2e:cb:83:aa:14:2d:ce:16:da:48:70:1b:e3:
01:16:41:61:2c:b5:d6:c2:a1:e1:50:83:c0:c7:16:a8:86:00:
ab:fd:6c:38:8b:b6:7c:aa:f4:52:6d:2e:10:4c:79:db:b2:ba:
9d:a9:d7:9c:49:8f:99:9f:ca:68:c8:46:2f:91:e9:2a:c2:00:
db:71:31:c5:16:18:eb:6e:03:f9:d0:ad:2d:a9:14:57:54:2e:
bf:d7:a3:b8:51:a9:47:e0:4e:c8:45:90:21:73:29:79:b0:df:
12:a3:ad:40:8d:ab:d1:02:60:f2:20:ca:58:ce:65:2c:a1:ca:
a2:a5:4b:85:d6:b6:f2:1b:cc:67:ec:0c:83:31:6a:18:24:74:
d6:da:2a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwSDLBSbPcoNZYC6seP/bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjUwOTA5MjEwMTAxWhcNMjUwOTEwMjEwMTAxWjAzMTEwLwYDVQQD
Eyg2MGRkNjM1OGI4ZjAwMTRkZWVjNTNkZTMzMjc2ZGMzNTMxNWFiMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o/n1aeCnhc+Y6BgqvVg29LHbJuc
1DfHZBdFFz+m2/upQwlxAoUjlupGNZj7VZeJJtz6STgYnrqrOzH0MLkyfoWOUxzx
P7j7W2eD+xlkuST96nFrBgBtC4E5vfEXsAH3bskGT6FVCZXJJC/R/oUbx0EQG9pv
NTC2tTC2NnmKJWDKu/vLWARzv5rK0IQfIzQtpemR7H1wc7daW/Bnx9jf8HaBPwFa
HTRa7bUrhRfwYK26no5vF7nIFD0Y/fxdfQCtwyEvjk6Q27rn+ZRA8lHsFKu5FUPP
lu9RxxOJITKJR98mbiK55bLgCf8GkWEFB1DtEThWj6HrCKnrWql/oOG27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDdY1i48AFN7sU94zJ23DUxWrHRMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPW7nglj
7xjhGrxLogF6Uhq0OPcaPAYAqwK0eWXMHsga06e61KiLjJpms3a3Zde3e8lMrKwZ
B+nr+f5EJDOUIG85hdfeTZsQU1KhlL7uiDR3en+LesPxhc0nc+QSQe/S1v+Ql8BA
XhU22XbNOA7ZGl0uy4OqFC3OFtpIcBvjARZBYSy11sKh4VCDwMcWqIYAq/1sOIu2
fKr0Um0uEEx527K6nanXnEmPmZ/KaMhGL5HpKsIA23ExxRYY624D+dCtLakUV1Qu
v9ejuFGpR+BOyEWQIXMpebDfEqOtQI2r0QJg8iDKWM5lLKHKoqVLhda28hvMZ+wM
gzFqGCR01toq2Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:56:14 2025 by rpki-client