Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: OikyswTQZ5CzY43UTIS3HHPDKgkRgTagwu+PPCPIXaE=
Subject key identifier: 2D:5A:04:2D:AE:A9:AD:0E:7E:29:73:31:C1:95:5F:D9:9F:29:9E:2F
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 0199221EA4CB3B85CECC8D544F7455BE3365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 0FF6
Signing time: Sun 07 Sep 2025 03:00:57 +0000
Manifest this update: Sun 07 Sep 2025 03:00:57 +0000
Manifest next update: Mon 08 Sep 2025 03:00:57 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: lHTRKRANcSXPQG8T+pZl1YhuuFpObiVnMHROegiwwY8=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a4:cb:3b:85:ce:cc:8d:54:4f:74:55:be:33:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Sep 7 03:00:57 2025 GMT
Not After : Sep 8 03:00:57 2025 GMT
Subject: CN=2d5a042daea9ad0e7e297331c1955fd99f299e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:e6:15:a7:5c:8a:b0:b8:d0:ef:5e:a7:4b:
c5:73:46:22:99:4b:40:dd:7f:5f:6f:f3:e8:e5:57:
34:a0:51:ea:1a:ed:7b:f0:3e:4a:43:87:79:2c:a4:
d3:83:ea:4e:a7:d5:aa:8d:88:9d:09:54:cb:79:1f:
f4:cc:da:c2:36:88:ce:3d:06:d9:3b:42:08:73:7f:
f1:86:ca:3c:63:67:ed:47:c5:bf:41:3f:cc:e9:f5:
96:46:d4:aa:09:15:07:df:5a:5d:86:97:ab:0c:e1:
90:b8:05:36:36:c5:6b:4e:c1:1e:4f:8d:46:83:c8:
0c:f2:ca:03:f3:28:ba:13:ad:ba:99:ed:3e:64:48:
89:19:bf:64:97:0f:bc:7f:e9:fb:f8:c9:e5:97:ae:
53:83:89:99:89:68:9f:d3:ff:20:12:d4:f8:d0:94:
7e:5c:f4:1e:9e:8e:5b:74:13:04:0d:e7:03:58:69:
62:d8:e4:95:7a:55:78:83:e0:ac:48:60:48:ee:e9:
3a:43:26:db:3c:51:5c:2a:bf:97:99:64:8f:bc:e5:
4d:33:33:b9:fc:b3:e7:95:ff:ac:3d:76:ca:0c:90:
d5:be:63:98:3c:85:51:61:7f:d1:93:51:05:5a:c2:
aa:56:0c:c2:e5:62:eb:da:7c:12:88:27:f7:1f:f3:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:04:2D:AE:A9:AD:0E:7E:29:73:31:C1:95:5F:D9:9F:29:9E:2F
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:54:8f:ad:19:d3:11:29:b8:85:9d:a4:70:55:18:b4:7d:
b0:7c:8b:20:77:06:49:e5:23:af:94:28:67:75:d8:a9:77:cf:
bd:34:79:aa:cf:e7:d2:f0:40:21:22:30:96:69:51:bf:05:fe:
af:e5:ff:c7:a7:90:f0:ea:cc:a1:65:5b:bc:74:ef:ee:68:eb:
5c:7a:5f:4d:da:6b:83:93:8a:0d:38:e9:c1:9e:67:ed:38:2f:
be:0b:5b:df:73:5b:fa:b3:04:9a:3a:7f:d6:68:64:fc:92:c6:
bb:e8:8d:a9:e1:87:a5:b9:ec:8a:54:6e:54:16:6a:9e:ca:5d:
c3:4d:b9:e8:a7:ba:cf:0a:ae:0e:a0:1f:62:29:ca:fe:84:b2:
f7:44:58:18:40:37:03:cf:60:b7:e4:13:b9:7a:fd:30:8b:9d:
a4:a7:4f:69:7b:a2:25:25:14:c8:62:3d:15:2c:43:a4:be:10:
68:f9:5b:05:a9:64:eb:17:8a:c7:29:5b:7e:6b:e2:65:44:b4:
fc:f9:38:6d:71:e7:38:c2:0f:f7:3d:78:42:b9:ed:87:ad:8f:
64:40:96:ee:bd:8e:92:b8:95:ac:f0:1d:0b:7f:e5:b6:d3:b5:
5c:ab:ea:67:c5:9d:f7:d4:47:a1:5d:6e:ad:7e:2b:f5:ac:5a:
fd:a4:26:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHqTLO4XOzI1UT3RVvjNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjUwOTA3MDMwMDU3WhcNMjUwOTA4MDMwMDU3WjAzMTEwLwYDVQQD
EygyZDVhMDQyZGFlYTlhZDBlN2UyOTczMzFjMTk1NWZkOTlmMjk5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ILmFadcirC40O9ep0vFc0YimUtA
3X9fb/Po5Vc0oFHqGu178D5KQ4d5LKTTg+pOp9WqjYidCVTLeR/0zNrCNojOPQbZ
O0IIc3/xhso8Y2ftR8W/QT/M6fWWRtSqCRUH31pdhperDOGQuAU2NsVrTsEeT41G
g8gM8soD8yi6E626me0+ZEiJGb9klw+8f+n7+Mnll65Tg4mZiWif0/8gEtT40JR+
XPQeno5bdBMEDecDWGli2OSVelV4g+CsSGBI7uk6QybbPFFcKr+XmWSPvOVNMzO5
/LPnlf+sPXbKDJDVvmOYPIVRYX/Rk1EFWsKqVgzC5WLr2nwSiCf3H/MSSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1aBC2uqa0OfilzMcGVX9mfKZ4vMB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppFUj60Z
0xEpuIWdpHBVGLR9sHyLIHcGSeUjr5QoZ3XYqXfPvTR5qs/n0vBAISIwlmlRvwX+
r+X/x6eQ8OrMoWVbvHTv7mjrXHpfTdprg5OKDTjpwZ5n7Tgvvgtb33Nb+rMEmjp/
1mhk/JLGu+iNqeGHpbnsilRuVBZqnspdw0256Ke6zwquDqAfYinK/oSy90RYGEA3
A89gt+QTuXr9MIudpKdPaXuiJSUUyGI9FSxDpL4QaPlbBalk6xeKxylbfmviZUS0
/Pk4bXHnOMIP9z14Qrnth62PZECW7r2OkriVrPAdC3/lttO1XKvqZ8Wd99RHoV1u
rX4r9axa/aQm5w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client