Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: BCL9bf9Wmh1eht2shC30mUmMeAokw7UcFbRF+0VF3p0=
Subject key identifier: 43:8E:B4:A5:E0:FF:4E:68:F1:00:74:C9:79:19:C5:F4:F6:4A:18:2D
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0199288EDC61F748A8F2FC1B7824ABC91EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 061F
Signing time: Mon 08 Sep 2025 09:01:15 +0000
Manifest this update: Mon 08 Sep 2025 09:01:15 +0000
Manifest next update: Tue 09 Sep 2025 09:01:15 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: Tad3nhmDKESm79Cl88bA6rCtoG0hxhEO/3l7fw2TnxY=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:dc:61:f7:48:a8:f2:fc:1b:78:24:ab:c9:1e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Sep 8 09:01:15 2025 GMT
Not After : Sep 9 09:01:15 2025 GMT
Subject: CN=438eb4a5e0ff4e68f10074c97919c5f4f64a182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:68:53:98:e8:ff:20:36:53:48:05:35:3e:
7e:44:91:89:cd:f6:31:3d:d0:1c:25:39:65:3c:11:
6f:41:ff:55:6d:57:46:27:69:d5:b1:35:4c:44:04:
f6:ee:02:44:e0:4f:1a:ab:04:b2:04:55:e9:a4:95:
5b:c7:2c:21:cc:9d:d1:07:e6:47:5f:0a:5b:87:df:
ae:51:18:aa:40:8c:18:6d:cc:c9:29:a6:35:11:64:
fd:82:2d:9d:b0:f4:58:25:a5:f1:fa:28:67:b3:2d:
51:b2:ec:d6:ae:6a:ee:27:70:86:43:ce:70:53:89:
77:75:81:73:8c:da:0c:8f:ea:79:4e:9c:e9:0a:e8:
53:13:02:41:26:97:64:ab:bb:d3:89:e0:be:8a:2e:
7d:db:50:05:cb:6a:59:4d:8a:24:3d:1a:b0:d8:05:
66:c0:ca:66:71:45:82:20:b9:d8:56:d9:cb:88:07:
20:67:d8:f2:e9:6f:f9:d9:5f:c3:cc:a9:5a:ff:35:
65:77:45:b8:9a:6f:9b:f4:01:a9:77:52:67:ea:a7:
df:8a:aa:59:0d:ab:da:05:f0:34:cb:21:33:08:13:
61:75:6b:76:05:2c:9f:e7:0e:69:03:74:0d:d6:e1:
f3:46:4f:5c:1c:0f:73:62:1a:7a:52:40:00:72:0f:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:B4:A5:E0:FF:4E:68:F1:00:74:C9:79:19:C5:F4:F6:4A:18:2D
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:63:5c:50:cd:38:a7:a0:54:d9:4d:07:d0:a4:b3:de:df:
4c:49:63:eb:dd:aa:7e:ea:cf:18:43:8f:93:e1:2a:c9:50:8a:
70:d4:f6:23:c7:99:53:1d:9f:0b:72:86:a2:41:7c:28:b7:24:
27:cb:0f:08:90:61:82:68:35:5c:ac:10:ff:e2:d1:d3:89:a2:
82:8d:a8:ad:e5:34:19:41:44:c4:0c:03:5b:7b:d0:c7:5b:d8:
b8:28:94:45:08:8c:c2:11:57:0a:0f:f2:f4:d6:a7:24:5f:76:
df:1c:b3:e7:72:8c:87:a3:55:a2:2f:43:bd:3a:ed:9b:5c:2e:
e1:ee:11:ce:ad:65:a7:d1:88:b5:d5:99:e8:99:e5:a7:04:67:
6c:bc:59:1b:ae:51:38:40:06:c5:97:38:9f:9e:f0:a1:0f:cd:
fc:98:af:71:1c:76:b4:89:a3:ab:47:1d:4f:95:af:09:73:37:
f8:fd:15:db:4f:6d:af:04:bb:f8:d0:52:91:ef:fc:22:d7:d4:
fa:02:fd:38:65:26:24:29:5c:00:77:89:2f:64:4b:fb:b9:b6:
91:2b:8c:d3:c0:eb:49:a3:1a:2e:7c:5a:ec:90:e1:a8:86:79:
fc:69:c6:8c:50:f8:20:77:20:0c:b6:65:89:95:f8:bc:79:d1:
5e:ce:3e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkojtxh90io8vwbeCSryR7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjUwOTA4MDkwMTE1WhcNMjUwOTA5MDkwMTE1WjAzMTEwLwYDVQQD
Eyg0MzhlYjRhNWUwZmY0ZTY4ZjEwMDc0Yzk3OTE5YzVmNGY2NGExODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX5oU5jo/yA2U0gFNT5+RJGJzfYx
PdAcJTllPBFvQf9VbVdGJ2nVsTVMRAT27gJE4E8aqwSyBFXppJVbxywhzJ3RB+ZH
Xwpbh9+uURiqQIwYbczJKaY1EWT9gi2dsPRYJaXx+ihnsy1RsuzWrmruJ3CGQ85w
U4l3dYFzjNoMj+p5TpzpCuhTEwJBJpdkq7vTieC+ii5921AFy2pZTYokPRqw2AVm
wMpmcUWCILnYVtnLiAcgZ9jy6W/52V/DzKla/zVld0W4mm+b9AGpd1Jn6qffiqpZ
DavaBfA0yyEzCBNhdWt2BSyf5w5pA3QN1uHzRk9cHA9zYhp6UkAAcg/hcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOOtKXg/05o8QB0yXkZxfT2ShgtMB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH1jXFDN
OKegVNlNB9Cks97fTElj692qfurPGEOPk+EqyVCKcNT2I8eZUx2fC3KGokF8KLck
J8sPCJBhgmg1XKwQ/+LR04migo2oreU0GUFExAwDW3vQx1vYuCiURQiMwhFXCg/y
9NanJF923xyz53KMh6NVoi9DvTrtm1wu4e4Rzq1lp9GItdWZ6JnlpwRnbLxZG65R
OEAGxZc4n57woQ/N/JivcRx2tImjq0cdT5WvCXM3+P0V209trwS7+NBSke/8ItfU
+gL9OGUmJClcAHeJL2RL+7m2kSuM08DrSaMaLnxa7JDhqIZ5/GnGjFD4IHcgDLZl
iZX4vHnRXs4+ig==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:21:07 2025 by rpki-client