Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: uAuVfEEoWh6qUW8ZVRJ9xApw1GnXbxIcMQNzsFuhuwY=
Subject key identifier: 44:73:4E:A4:D6:87:DF:B7:44:91:5E:C6:21:63:32:57:D3:25:91:99
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 01974BFBA22D20AB5F28FE033AEDE8CD129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 20:01:11 +0000
Manifest this update: Sat 07 Jun 2025 20:01:11 +0000
Manifest next update: Sun 08 Jun 2025 20:01:11 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: poT81jHj0iNbh3diOJJImppTs7RGAOaUjpqGHDdaP1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:a2:2d:20:ab:5f:28:fe:03:3a:ed:e8:cd:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jun 7 20:01:11 2025 GMT
Not After : Jun 8 20:01:11 2025 GMT
Subject: CN=44734ea4d687dfb744915ec621633257d3259199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:59:b7:25:44:6b:9f:b9:d1:4a:72:f9:fc:
cd:82:2f:24:7e:44:88:2e:4b:71:4c:e1:ef:40:a9:
39:bc:9e:7c:23:8e:20:e9:3e:d6:fe:81:10:be:bb:
f8:4a:69:72:74:57:3d:59:d1:ce:c1:eb:68:97:bd:
72:16:fd:a8:08:4a:cf:e2:08:6a:1c:ce:d9:50:f0:
63:b5:81:86:7e:5e:4b:db:04:84:de:c6:92:14:e5:
2d:8e:57:04:0e:69:b9:df:ba:71:11:ed:49:71:9c:
6a:3d:b8:eb:da:7e:9b:2d:41:e8:c7:63:00:24:92:
23:10:9a:20:f4:7a:2c:9c:07:4a:03:14:6f:98:04:
04:2f:2c:92:12:5c:54:38:a5:09:e5:3e:d5:99:ee:
5f:24:1a:29:95:8e:ae:59:8f:0a:b9:70:e6:e9:f1:
7b:12:06:bc:77:dd:41:dc:dc:d6:bd:8b:f5:83:3f:
a3:c7:e9:5a:56:0d:97:20:fb:6e:a3:61:f4:5a:1f:
4e:c4:1a:08:5e:ef:9b:51:12:34:91:4d:fc:04:6a:
40:ab:ed:25:1a:04:c5:a6:6c:90:4f:67:33:e0:13:
f4:7f:01:c6:28:3d:0f:ae:ca:cb:b1:8d:ea:c1:2a:
b5:21:3f:fc:46:4f:29:37:46:6d:1e:0f:42:60:48:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:4E:A4:D6:87:DF:B7:44:91:5E:C6:21:63:32:57:D3:25:91:99
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:5e:fe:e3:36:5d:e8:78:1d:4a:a4:56:54:e2:a3:4f:cd:
aa:ce:13:c6:7a:ee:3d:32:bc:02:b1:1a:01:96:bc:51:42:de:
74:f8:52:94:dc:bc:bf:ec:cc:e5:b2:af:e0:a2:2f:a0:ac:7f:
73:11:87:11:df:91:fc:83:65:fa:8d:18:02:dd:5e:12:2c:5f:
5d:15:a1:38:fb:92:91:f3:37:51:ff:bd:c0:75:eb:09:ec:7f:
5f:60:72:e4:12:63:42:6b:21:09:01:5d:e2:ea:66:20:e7:25:
2b:a6:64:11:5d:40:43:3d:b8:52:6a:71:cd:1e:c5:4c:c1:6a:
d5:e1:45:e3:22:82:19:f1:bf:64:7a:16:d4:d8:9e:b9:c4:04:
8d:50:81:b7:2d:98:fe:ca:78:55:c7:30:91:90:9a:14:bb:be:
36:8d:84:bc:d0:e1:21:a2:a6:78:2a:43:0b:c4:56:b6:48:7a:
ec:de:f7:ef:ee:e8:cb:fa:ab:f3:c6:a2:4b:81:57:c3:5f:e8:
18:46:ba:40:52:55:44:56:ff:9c:50:76:6c:74:6d:de:9c:2f:
a0:0c:5b:ad:67:6d:b2:bf:ea:89:50:be:06:e4:5e:73:0a:0a:
a3:08:71:6b:b4:ce:99:2f:d5:be:e6:76:22:c6:9f:6e:de:5a:
3f:be:81:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+6ItIKtfKP4DOu3ozRKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NGVmYzRjZTM2ZmM0NDNkYzU4MTYyNzRlYWMxZDc2OTMw
MjkwODEwHhcNMjUwNjA3MjAwMTExWhcNMjUwNjA4MjAwMTExWjAzMTEwLwYDVQQD
Eyg0NDczNGVhNGQ2ODdkZmI3NDQ5MTVlYzYyMTYzMzI1N2QzMjU5MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qJZtyVEa5+50Upy+fzNgi8kfkSI
LktxTOHvQKk5vJ58I44g6T7W/oEQvrv4SmlydFc9WdHOwetol71yFv2oCErP4ghq
HM7ZUPBjtYGGfl5L2wSE3saSFOUtjlcEDmm537pxEe1JcZxqPbjr2n6bLUHox2MA
JJIjEJog9HosnAdKAxRvmAQELyySElxUOKUJ5T7Vme5fJBoplY6uWY8KuXDm6fF7
Ega8d91B3NzWvYv1gz+jx+laVg2XIPtuo2H0Wh9OxBoIXu+bURI0kU38BGpAq+0l
GgTFpmyQT2cz4BP0fwHGKD0PrsrLsY3qwSq1IT/8Rk8pN0ZtHg9CYEhPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERzTqTWh9+3RJFexiFjMlfTJZGZMB8GA1UdIwQY
MBaAFJlO/Ezjb8RD3FgWJ06sHXaTApCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEt
M2QyZmI4MTBlMTkxLzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEtM2QyZmI4MTBlMTkx
LzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVJe/uM2
Xeh4HUqkVlTio0/Nqs4TxnruPTK8ArEaAZa8UULedPhSlNy8v+zM5bKv4KIvoKx/
cxGHEd+R/INl+o0YAt1eEixfXRWhOPuSkfM3Uf+9wHXrCex/X2By5BJjQmshCQFd
4upmIOclK6ZkEV1AQz24UmpxzR7FTMFq1eFF4yKCGfG/ZHoW1NieucQEjVCBty2Y
/sp4VccwkZCaFLu+No2EvNDhIaKmeCpDC8RWtkh67N737+7oy/qr88aiS4FXw1/o
GEa6QFJVRFb/nFB2bHRt3pwvoAxbrWdtsr/qiVC+BuRecwoKowhxa7TOmS/VvuZ2
Isafbt5aP76BCg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:34 2025 by rpki-client