Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: WAHI8IqCzTStv6UgBDXyVIDskpxItTvP9CMR+ydL13c=
Subject key identifier: 92:9E:5F:2F:03:18:CF:18:33:74:3F:29:CB:FA:A0:01:F8:4C:DC:CA
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0197469E51059B5211BFC7A4CF686A2F4DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 09A0
Signing time: Fri 06 Jun 2025 19:01:09 +0000
Manifest this update: Fri 06 Jun 2025 19:01:09 +0000
Manifest next update: Sat 07 Jun 2025 19:01:09 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: I4ZNklRQW4kozSRaMSyhK3v+M4QWj2R3rCvdqBLpsyk=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:51:05:9b:52:11:bf:c7:a4:cf:68:6a:2f:4d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jun 6 19:01:09 2025 GMT
Not After : Jun 7 19:01:09 2025 GMT
Subject: CN=929e5f2f0318cf1833743f29cbfaa001f84cdcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:f9:a7:b2:ba:24:f2:6b:3b:6a:ae:f5:95:
5b:92:7a:69:c2:23:ed:59:7a:aa:dc:79:47:61:99:
51:39:61:ad:bc:47:27:bd:de:1f:b7:67:56:f9:06:
15:63:c3:fb:f7:4a:ed:3a:c0:e9:d0:fb:a2:c1:df:
14:6c:43:4c:fb:c0:57:c1:1d:a2:46:e2:70:f4:a7:
cd:f7:5d:8c:eb:80:85:7d:d0:e8:d2:18:08:89:81:
da:c4:ce:96:55:e1:f4:8e:d5:03:de:3f:08:c8:a8:
f0:42:29:6f:40:25:3b:16:45:f3:13:20:45:6b:83:
90:59:79:cf:94:a9:24:17:0c:58:5b:25:17:da:f2:
e0:85:06:10:b8:74:c2:e1:14:c0:65:b7:c7:67:f9:
cc:d3:95:1e:e8:70:10:bc:f6:25:a4:22:c7:7d:59:
12:00:db:58:b4:ff:ab:ed:b7:25:09:90:31:5a:3f:
9d:04:55:b7:e9:51:81:dc:66:a5:00:e6:67:30:07:
8b:c4:24:13:3e:99:32:0e:80:fd:ff:55:92:90:1f:
31:bb:9b:e2:e3:22:00:05:cf:d1:b2:21:d5:2b:72:
b5:9a:45:81:57:f1:2a:82:a5:a0:57:56:2b:6c:6e:
1d:d0:b0:44:4d:10:2c:d1:fd:b9:b5:84:a7:da:aa:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:5F:2F:03:18:CF:18:33:74:3F:29:CB:FA:A0:01:F8:4C:DC:CA
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:08:82:10:28:e1:e7:b3:b2:f1:93:9c:1d:78:6c:66:32:cf:
b8:a8:a4:35:4e:e1:d0:47:b4:fd:03:27:dd:fe:8c:82:ba:a7:
df:18:58:47:f0:fb:04:18:86:07:36:16:b7:a8:af:71:ae:86:
86:6b:95:a5:e5:52:f2:47:a0:2e:49:5f:dd:1e:76:f1:ba:eb:
4a:00:26:7d:bb:a5:67:d9:95:76:97:d9:0b:c4:68:29:12:8a:
b5:b8:ac:b3:d7:7f:58:e5:80:13:66:d9:1e:52:bf:d6:94:9d:
fb:51:d9:c5:b5:92:c8:fe:d5:52:d7:32:0c:8e:24:e2:a9:b5:
a0:0b:a6:b3:36:bb:45:2c:98:10:3d:da:a0:a0:f9:99:35:58:
26:9e:12:57:36:41:ec:c8:7a:a5:ce:c3:34:4a:9e:19:ca:aa:
d0:7b:c3:0a:3d:df:16:4c:57:c3:2a:65:45:1d:8a:c8:1b:6c:
e7:34:0d:ee:73:48:96:dd:ef:db:45:9f:3a:2c:d9:37:db:46:
1e:f6:9f:29:c2:8e:2d:f5:8c:96:fb:b6:a8:d2:7e:97:27:a3:
71:cd:b2:22:56:a3:40:ca:12:e3:13:9e:ca:ee:9e:90:c7:8a:
41:64:7a:6b:c5:ef:7f:b6:11:9a:12:05:9a:c3:08:47:05:9d:
6a:c4:a8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnlEFm1IRv8ekz2hqL02qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjUwNjA2MTkwMTA5WhcNMjUwNjA3MTkwMTA5WjAzMTEwLwYDVQQD
Eyg5MjllNWYyZjAzMThjZjE4MzM3NDNmMjljYmZhYTAwMWY4NGNkY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHf5p7K6JPJrO2qu9ZVbknppwiPt
WXqq3HlHYZlROWGtvEcnvd4ft2dW+QYVY8P790rtOsDp0Puiwd8UbENM+8BXwR2i
RuJw9KfN912M64CFfdDo0hgIiYHaxM6WVeH0jtUD3j8IyKjwQilvQCU7FkXzEyBF
a4OQWXnPlKkkFwxYWyUX2vLghQYQuHTC4RTAZbfHZ/nM05Ue6HAQvPYlpCLHfVkS
ANtYtP+r7bclCZAxWj+dBFW36VGB3GalAOZnMAeLxCQTPpkyDoD9/1WSkB8xu5vi
4yIABc/RsiHVK3K1mkWBV/EqgqWgV1YrbG4d0LBETRAs0f25tYSn2qqQEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKeXy8DGM8YM3Q/Kcv6oAH4TNzKMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQiCECjh
57Oy8ZOcHXhsZjLPuKikNU7h0Ee0/QMn3f6Mgrqn3xhYR/D7BBiGBzYWt6ivca6G
hmuVpeVS8kegLklf3R528brrSgAmfbulZ9mVdpfZC8RoKRKKtbiss9d/WOWAE2bZ
HlK/1pSd+1HZxbWSyP7VUtcyDI4k4qm1oAumsza7RSyYED3aoKD5mTVYJp4SVzZB
7Mh6pc7DNEqeGcqq0HvDCj3fFkxXwyplRR2KyBts5zQN7nNIlt3v20WfOizZN9tG
HvafKcKOLfWMlvu2qNJ+lyejcc2yIlajQMoS4xOeyu6ekMeKQWR6a8Xvf7YRmhIF
msMIRwWdasSoBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:49:20 2025 by rpki-client