Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: JyDX62I/Z8EM+a6d8RVhqJbNXw8JEnurDJLxwdsh7bY=
Subject key identifier: 8E:82:C6:6F:71:C2:E5:BB:5F:0B:3A:A6:18:E0:69:8B:81:29:38:8D
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0198CBA64DBD1395190C017E70AAE513FEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1648
Signing time: Thu 21 Aug 2025 08:02:10 +0000
Manifest this update: Thu 21 Aug 2025 08:02:10 +0000
Manifest next update: Fri 22 Aug 2025 08:02:10 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: iAc/rzYMmPdtEDmQExc/lrSCmWZCI3iI900qVVNxFRA=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a6:4d:bd:13:95:19:0c:01:7e:70:aa:e5:13:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Aug 21 08:02:10 2025 GMT
Not After : Aug 22 08:02:10 2025 GMT
Subject: CN=8e82c66f71c2e5bb5f0b3aa618e0698b8129388d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:23:8f:cd:24:e3:1b:de:15:01:48:49:a0:
7f:62:2c:fe:a6:ee:43:bb:e2:60:a4:35:3e:7c:5b:
f5:10:f9:3e:65:12:2d:ea:0d:73:ba:a3:b4:46:69:
0a:6f:1b:b5:c4:c2:f1:1f:e1:03:cb:4b:8b:ab:84:
b3:e6:17:2d:2b:70:60:fd:66:aa:06:cd:b3:ea:28:
09:03:77:a1:31:25:05:79:5d:d8:c4:a8:6c:e9:f0:
89:2b:8b:bc:10:7c:24:7e:42:47:d9:81:89:c6:67:
a2:5f:73:e8:eb:58:68:bf:98:37:72:55:4b:ce:c9:
ab:2a:a6:dc:c3:cf:07:19:55:b3:35:47:26:fe:28:
dd:3d:b9:9e:11:46:5b:4b:f6:3e:27:40:51:76:db:
fa:40:1c:4a:1c:b1:93:f9:2a:b3:73:3d:c7:67:c5:
0b:ba:b2:1a:bd:35:1e:e6:ad:b2:10:dd:0a:35:77:
eb:5f:8f:75:6d:57:b0:8a:fa:18:1c:36:08:37:b6:
ea:12:76:b3:3b:d8:95:ba:b4:c6:32:e8:60:fa:ba:
8c:cc:aa:6d:f5:5d:a4:ec:74:85:93:e2:dd:35:86:
63:1c:b1:d8:13:d3:e8:92:aa:d9:43:9e:0e:5b:73:
cb:3f:a5:ea:b3:4b:3f:0d:89:1a:65:04:b1:9c:a0:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:C6:6F:71:C2:E5:BB:5F:0B:3A:A6:18:E0:69:8B:81:29:38:8D
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:45:c6:31:56:0d:bf:fc:e2:eb:c0:03:26:ef:1b:50:bc:15:
16:6a:1b:3b:58:a2:82:c4:f3:aa:0e:36:a6:ab:4e:ef:a1:ed:
41:5a:dc:41:5c:e3:ab:b2:ef:21:54:9e:0d:82:11:f4:e1:bc:
35:8b:b3:eb:d9:98:be:d5:1d:16:ba:44:71:f2:fe:f9:24:c5:
0e:cf:5e:e8:b3:f8:40:65:dd:19:1b:77:d3:10:9b:28:62:9d:
fb:8a:35:a5:76:02:c2:0c:12:14:1e:4f:fe:b7:b2:08:6f:db:
d1:36:64:1e:42:50:c8:79:e6:97:49:b1:22:fd:93:e8:dc:bf:
74:d1:49:5c:39:00:66:9d:5a:6f:57:56:bb:38:f5:08:f3:44:
43:8b:35:56:d2:4a:d8:06:62:38:78:32:8c:d8:0f:93:b6:dd:
c4:45:27:36:d7:75:f5:a9:56:25:df:e1:7f:51:03:a5:3a:8c:
09:27:7a:fa:d6:4d:17:a6:b1:04:aa:bb:1e:11:c3:56:9e:d5:
89:80:69:30:dc:47:c9:a2:32:8a:39:30:a3:c8:12:f3:43:45:
27:d2:59:b9:be:5d:92:b3:ba:cd:18:95:29:02:4f:fe:12:cc:
df:bd:88:05:24:99:99:52:67:0b:df:53:eb:8c:e1:20:67:62:
5a:e3:28:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjLpk29E5UZDAF+cKrlE/69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk
NjA0NjgwHhcNMjUwODIxMDgwMjEwWhcNMjUwODIyMDgwMjEwWjAzMTEwLwYDVQQD
Eyg4ZTgyYzY2ZjcxYzJlNWJiNWYwYjNhYTYxOGUwNjk4YjgxMjkzODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzccjj80k4xveFQFISaB/Yiz+pu5D
u+JgpDU+fFv1EPk+ZRIt6g1zuqO0RmkKbxu1xMLxH+EDy0uLq4Sz5hctK3Bg/Waq
Bs2z6igJA3ehMSUFeV3YxKhs6fCJK4u8EHwkfkJH2YGJxmeiX3Po61hov5g3clVL
zsmrKqbcw88HGVWzNUcm/ijdPbmeEUZbS/Y+J0BRdtv6QBxKHLGT+Sqzcz3HZ8UL
urIavTUe5q2yEN0KNXfrX491bVewivoYHDYIN7bqEnazO9iVurTGMuhg+rqMzKpt
9V2k7HSFk+LdNYZjHLHYE9PokqrZQ54OW3PLP6Xqs0s/DYkaZQSxnKAAWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6Cxm9xwuW7Xws6phjgaYuBKTiNMB8GA1UdIwQY
MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt
ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw
LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUXGMVYN
v/zi68ADJu8bULwVFmobO1iigsTzqg42pqtO76HtQVrcQVzjq7LvIVSeDYIR9OG8
NYuz69mYvtUdFrpEcfL++STFDs9e6LP4QGXdGRt30xCbKGKd+4o1pXYCwgwSFB5P
/reyCG/b0TZkHkJQyHnml0mxIv2T6Ny/dNFJXDkAZp1ab1dWuzj1CPNEQ4s1VtJK
2AZiOHgyjNgPk7bdxEUnNtd19alWJd/hf1EDpTqMCSd6+tZNF6axBKq7HhHDVp7V
iYBpMNxHyaIyijkwo8gS80NFJ9JZub5dkrO6zRiVKQJP/hLM372IBSSZmVJnC99T
64zhIGdiWuMocw==
-----END CERTIFICATE-----
Generated at Thu Aug 21 12:46:22 2025 by rpki-client