Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: QIcWUdS4YphlpKyK1/0zkJ12gMDfLJ6Ol/wl2EV28Pg=
Subject key identifier: EE:6B:63:DC:3E:D5:BE:43:62:9A:0B:9C:ED:8F:00:77:1C:E8:77:AD
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 019931C826B4C1DD2A158A46B93CD00E0F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1682
Signing time: Wed 10 Sep 2025 04:00:24 +0000
Manifest this update: Wed 10 Sep 2025 04:00:24 +0000
Manifest next update: Thu 11 Sep 2025 04:00:24 +0000
Files and hashes: 1: MKwXFQdhtuQYKRcVzorzsVxuXIw.roa (hash: GZ2oDGi2xK0WgPjyKpmqLx5efaJizRvGxJTHG502Kqs=)
2: QHGBtoYy-yUNGT2R6UBemRAxD5s.roa (hash: 3YJpkLEFxs1XCvKlcy0WQw5fAkmH7oTliDxTaEnJgz0=)
3: hwXn82QbEbf-SULTcBIDnH5UIZU.roa (hash: 08kQDvBZvCyHX595Crm1xVl4v8KtIgUsNRfQUr9hTAQ=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: SC42iAw8G2uDXOgOfQ0iNknqjWbTISLItDiItqvpj9Y=)
5: soZqy3HUC6xiStBTbgTdR73Vw2c.roa (hash: 0/K+cWWK8CwD0JZ/wMwAQQYw/af8O4bhKs39qQrbVB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:26:b4:c1:dd:2a:15:8a:46:b9:3c:d0:0e:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Sep 10 04:00:24 2025 GMT
Not After : Sep 11 04:00:24 2025 GMT
Subject: CN=ee6b63dc3ed5be43629a0b9ced8f00771ce877ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:68:32:0f:68:d9:d5:90:56:41:4e:ae:cf:
ed:d5:bb:64:8d:e2:d7:b1:30:4a:71:67:7a:cb:48:
c5:e3:82:82:b8:e7:c9:9d:d9:da:20:89:81:5e:53:
8d:ca:68:5e:f8:f6:29:a7:64:53:74:31:12:0c:f8:
f0:95:34:72:71:86:9e:0c:3a:83:65:5e:92:6b:8b:
42:ef:8d:fb:5d:e1:c2:96:f6:73:13:63:60:11:0a:
eb:1e:e7:fe:b2:ed:92:19:86:a0:3b:aa:21:4a:80:
81:41:27:3f:88:82:d3:60:66:73:a5:81:6e:36:d6:
8f:11:1b:fb:b7:0e:ba:c7:9f:7a:c2:0a:e8:0e:6e:
d0:d4:58:c8:d4:9b:4b:b8:9f:9c:7d:fa:39:a5:77:
d8:fd:b8:01:81:bf:16:62:83:fe:a9:c5:28:04:94:
e7:c9:0a:20:59:58:1b:33:50:57:54:41:75:96:9f:
db:3e:4b:f6:ba:5a:57:0a:98:89:7f:96:9a:4b:86:
a7:29:08:14:3b:73:9a:7f:f5:bb:f3:85:b3:1b:02:
df:34:7d:3a:6b:80:46:b3:0d:30:6b:ea:cd:6e:7d:
6a:3a:76:73:2b:40:9b:ff:e3:12:93:c6:b9:e9:52:
85:c8:a4:7d:71:73:82:40:03:f3:88:ea:85:31:01:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:63:DC:3E:D5:BE:43:62:9A:0B:9C:ED:8F:00:77:1C:E8:77:AD
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:95:60:aa:b1:87:e8:33:5a:af:d0:9c:6e:bc:57:04:56:0b:
ab:6c:4d:86:28:fd:1f:e5:93:f4:a3:37:4a:96:75:13:40:10:
2d:d3:c2:89:c6:81:d7:d0:68:26:1b:b3:e2:cd:86:23:4d:4e:
15:51:98:70:03:70:95:d0:6b:55:57:28:fe:2b:a6:fb:d5:38:
dd:8b:57:d8:fc:0a:d6:74:e6:44:b6:1a:46:7e:9e:cc:47:2b:
d2:d9:79:c5:90:f7:31:e2:08:19:e0:c6:75:6e:08:1e:41:e0:
e1:bc:16:ee:64:df:df:c8:14:1b:08:8e:ef:ee:1d:fc:8b:6d:
d3:bb:31:02:1c:c0:9b:7c:a6:7f:ce:85:b7:f5:60:0b:8f:2e:
30:74:c0:a9:50:0c:6d:e2:aa:f2:00:83:f2:b2:e2:43:26:47:
a5:78:fd:33:c8:89:10:4b:72:73:a1:f9:43:d5:14:b4:96:e6:
e6:9f:d1:f3:1c:ec:df:47:6a:08:84:ab:a2:8a:d3:74:29:6d:
73:4d:89:09:10:b9:f8:ed:33:3b:07:f6:b0:0d:1f:1b:25:36:
16:c4:26:8f:6c:32:10:de:e5:f4:5d:be:b0:b5:b6:5a:0c:f5:
a1:ee:37:77:05:e2:79:6f:d3:f4:99:18:c4:5f:ca:b2:94:13:
77:38:49:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyCa0wd0qFYpGuTzQDg9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2I1MGU3OGEzYTMxZTMzNzVjZjJhYWI4NjVlODQ1ZmYy
ZTk5YzEwHhcNMjUwOTEwMDQwMDI0WhcNMjUwOTExMDQwMDI0WjAzMTEwLwYDVQQD
EyhlZTZiNjNkYzNlZDViZTQzNjI5YTBiOWNlZDhmMDA3NzFjZTg3N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tdoMg9o2dWQVkFOrs/t1btkjeLX
sTBKcWd6y0jF44KCuOfJndnaIImBXlONymhe+PYpp2RTdDESDPjwlTRycYaeDDqD
ZV6Sa4tC7437XeHClvZzE2NgEQrrHuf+su2SGYagO6ohSoCBQSc/iILTYGZzpYFu
NtaPERv7tw66x596wgroDm7Q1FjI1JtLuJ+cffo5pXfY/bgBgb8WYoP+qcUoBJTn
yQogWVgbM1BXVEF1lp/bPkv2ulpXCpiJf5aaS4anKQgUO3Oaf/W784WzGwLfNH06
a4BGsw0wa+rNbn1qOnZzK0Cb/+MSk8a56VKFyKR9cXOCQAPziOqFMQFCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5rY9w+1b5DYpoLnO2PAHcc6HetMB8GA1UdIwQY
MBaAFKTLUOeKOjHjN1zyqrhl6EX/LpnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMt
NGJlNzk0ZDY0MDZkLzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMtNGJlNzk0ZDY0MDZk
LzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJVgqrGH
6DNar9CcbrxXBFYLq2xNhij9H+WT9KM3SpZ1E0AQLdPCicaB19BoJhuz4s2GI01O
FVGYcANwldBrVVco/ium+9U43YtX2PwK1nTmRLYaRn6ezEcr0tl5xZD3MeIIGeDG
dW4IHkHg4bwW7mTf38gUGwiO7+4d/Itt07sxAhzAm3ymf86Ft/VgC48uMHTAqVAM
beKq8gCD8rLiQyZHpXj9M8iJEEtyc6H5Q9UUtJbm5p/R8xzs30dqCISroorTdClt
c02JCRC5+O0zOwf2sA0fGyU2FsQmj2wyEN7l9F2+sLW2Wgz1oe43dwXieW/T9JkY
xF/KspQTdzhJqg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 09:57:06 2025 by rpki-client