Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: PYrfql0JgnoCYPy+dNLKvqd95ugL6FU+trCDm82fYa4=
Subject key identifier: 64:94:07:38:62:54:2F:FD:2A:D5:1E:AF:83:8B:66:5A:F5:1C:C9:77
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 01993680EECA6C9564F3EEAA3FB7EF67364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 02:00:43 +0000
Manifest this update: Thu 11 Sep 2025 02:00:43 +0000
Manifest next update: Fri 12 Sep 2025 02:00:43 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: /B0LTp7yTfNu24iimKBrrLp67qf5/W+b2DvN65Bxr6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:ee:ca:6c:95:64:f3:ee:aa:3f:b7:ef:67:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Sep 11 02:00:43 2025 GMT
Not After : Sep 12 02:00:43 2025 GMT
Subject: CN=6494073862542ffd2ad51eaf838b665af51cc977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:80:8d:01:3a:44:79:2a:24:9f:5f:82:d8:
73:96:8d:e7:54:5a:f0:a7:86:f3:95:bc:9b:b6:43:
10:39:3b:1a:6a:20:ec:f2:4d:57:f3:28:af:7f:42:
57:29:e5:de:af:ca:2a:ef:76:51:58:49:77:aa:e8:
78:b2:19:68:48:92:c3:c5:8c:a2:1b:27:48:94:17:
9e:87:11:a4:ad:d1:55:ae:55:fa:87:93:b5:e7:b1:
37:64:c3:79:a8:de:01:6a:16:31:d2:98:5b:2d:aa:
f7:11:1c:0d:0e:1f:37:a1:b7:c8:6c:4a:8d:0f:72:
50:ee:db:67:69:92:23:c3:93:04:6c:89:f9:07:0f:
05:4e:53:be:63:ca:a4:e9:c4:20:84:e5:f2:9e:8c:
47:6f:aa:28:ee:38:d4:d0:2a:c3:8e:ed:01:38:97:
8c:c2:1d:e3:18:d4:96:a7:34:14:d9:93:99:0a:9b:
50:9d:e9:2e:b5:af:f7:c1:c2:f7:cb:0e:d8:d4:54:
0f:6b:05:88:e6:d2:9b:38:1b:32:fa:06:98:a1:5b:
f8:63:85:32:13:a7:7a:6c:06:e1:61:5c:af:d0:e4:
83:f8:24:e3:a9:b4:f1:bc:95:e4:21:b6:75:22:16:
c8:d2:6b:93:e6:27:15:7c:13:0d:e4:a7:98:86:fa:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:07:38:62:54:2F:FD:2A:D5:1E:AF:83:8B:66:5A:F5:1C:C9:77
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:a6:87:ab:ab:e6:fa:1f:61:f6:d2:6d:62:cc:7b:3c:95:
75:ee:ce:47:20:00:2c:26:a3:df:6f:d6:ce:26:ec:2e:ed:d2:
4b:92:21:6f:11:8f:8b:a6:78:9e:0b:55:3b:fb:96:e4:07:1e:
36:4c:be:fd:c0:c2:fa:f8:f2:16:ba:3f:5e:4a:e6:14:35:63:
79:90:76:31:71:8f:c4:39:da:0f:f1:0a:9a:1d:72:d8:8c:e0:
97:87:65:2b:98:c4:c2:3d:6f:c6:0e:b9:3d:77:cc:bc:02:12:
51:54:dd:80:47:34:2c:65:b1:28:79:d9:7e:ea:8c:79:5a:a0:
67:58:2c:3d:af:d4:b6:ff:cf:30:fe:02:6d:30:27:e5:56:4c:
60:f3:30:e5:3b:0b:1a:8b:c1:dd:99:be:bc:a2:65:a2:b2:ee:
3d:bd:2e:fe:9b:31:5e:85:34:71:fe:48:c0:f1:81:a5:89:08:
bd:a2:fa:74:ae:38:f8:f3:f8:9a:bf:f4:a6:d1:37:ee:7f:33:
f8:e4:18:d7:06:c4:cc:e9:1c:f2:a2:fd:27:04:10:d6:b2:18:
e8:c4:b1:e9:6e:d7:dc:2e:17:9e:87:a4:ab:01:16:74:c7:36:
f5:6f:4d:57:f2:dd:33:f0:38:9f:80:50:b5:22:c3:04:87:8b:
02:d9:49:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2gO7KbJVk8+6qP7fvZzZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjUwOTExMDIwMDQzWhcNMjUwOTEyMDIwMDQzWjAzMTEwLwYDVQQD
Eyg2NDk0MDczODYyNTQyZmZkMmFkNTFlYWY4MzhiNjY1YWY1MWNjOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMiAjQE6RHkqJJ9fgthzlo3nVFrw
p4bzlbybtkMQOTsaaiDs8k1X8yivf0JXKeXer8oq73ZRWEl3quh4shloSJLDxYyi
GydIlBeehxGkrdFVrlX6h5O157E3ZMN5qN4BahYx0phbLar3ERwNDh83obfIbEqN
D3JQ7ttnaZIjw5MEbIn5Bw8FTlO+Y8qk6cQghOXynoxHb6oo7jjU0CrDju0BOJeM
wh3jGNSWpzQU2ZOZCptQnekuta/3wcL3yw7Y1FQPawWI5tKbOBsy+gaYoVv4Y4Uy
E6d6bAbhYVyv0OSD+CTjqbTxvJXkIbZ1IhbI0muT5icVfBMN5KeYhvoaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSUBzhiVC/9KtUer4OLZlr1HMl3MB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE2mh6ur
5vofYfbSbWLMezyVde7ORyAALCaj32/WzibsLu3SS5IhbxGPi6Z4ngtVO/uW5Ace
Nky+/cDC+vjyFro/XkrmFDVjeZB2MXGPxDnaD/EKmh1y2Izgl4dlK5jEwj1vxg65
PXfMvAISUVTdgEc0LGWxKHnZfuqMeVqgZ1gsPa/Utv/PMP4CbTAn5VZMYPMw5TsL
GovB3Zm+vKJlorLuPb0u/psxXoU0cf5IwPGBpYkIvaL6dK44+PP4mr/0ptE37n8z
+OQY1wbEzOkc8qL9JwQQ1rIY6MSx6W7X3C4XnoekqwEWdMc29W9NV/LdM/A4n4BQ
tSLDBIeLAtlJ2w==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:25:20 2025 by rpki-client