Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File: Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier: MFhoLdljYP0O8l2PCpMRE+YbFcpqczAdp1H+8aecMYc=
Subject key identifier: 81:9D:C8:7D:67:D5:98:A0:7D:E6:9C:E4:14:2A:F3:51:E2:6D:EE:4D
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 0197512171D8FA85DA7EC4A7C10DB62A4ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number: 158A
Signing time: Sun 08 Jun 2025 20:00:35 +0000
Manifest this update: Sun 08 Jun 2025 20:00:35 +0000
Manifest next update: Mon 09 Jun 2025 20:00:35 +0000
Files and hashes: 1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: E8D4MPVcla1i7dNKKcSp8tT2w4m9PdnL2LS+1yZiZ+w=)
3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:71:d8:fa:85:da:7e:c4:a7:c1:0d:b6:2a:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Jun 8 20:00:35 2025 GMT
Not After : Jun 9 20:00:35 2025 GMT
Subject: CN=819dc87d67d598a07de69ce4142af351e26dee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:d0:d2:e5:49:2a:4c:3d:08:e9:54:e5:27:
3e:15:66:45:5e:5e:4f:eb:5d:74:04:66:3d:86:9f:
84:9f:0f:95:89:e2:c8:91:86:11:7b:8d:a0:18:63:
9c:72:3d:63:8a:46:05:bd:16:f1:14:01:b6:b2:4f:
0a:4b:3c:1f:46:b5:29:3f:d4:3a:8f:5e:85:b1:41:
95:43:05:01:0b:00:31:5f:6a:82:9a:9d:5f:25:33:
ef:61:56:0a:29:a6:a0:e0:db:26:63:0b:3d:ff:ce:
df:0d:f6:37:0f:f9:d2:1a:45:50:1c:83:12:f7:79:
da:47:45:5b:bd:8e:5f:9e:78:14:48:3a:41:e1:6b:
04:b8:ae:fd:53:aa:ab:64:71:4f:a4:ef:87:6a:2f:
3a:f6:09:95:2b:57:5a:55:96:cc:27:e1:fb:17:de:
91:1b:6b:c9:14:e3:84:13:b8:6f:24:49:3e:52:9f:
d3:66:7c:8e:bd:80:bb:9a:eb:a8:dc:6b:55:eb:09:
66:56:5c:49:e0:8a:78:81:4d:83:e0:d8:cb:4a:8c:
42:9b:bc:1e:45:4f:33:ac:32:aa:f0:72:9d:06:5b:
1e:5d:95:76:98:66:b7:75:b0:ef:10:9c:70:aa:67:
f6:7c:71:c8:32:01:c7:2a:cb:e5:d3:f4:6e:54:6d:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:C8:7D:67:D5:98:A0:7D:E6:9C:E4:14:2A:F3:51:E2:6D:EE:4D
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:4f:c2:d6:7a:e1:7b:d0:43:44:16:a0:bb:e1:09:39:17:
b0:62:27:e3:11:db:4b:10:20:98:92:b4:0e:77:03:bd:79:ab:
4c:b8:e5:af:42:81:e3:97:be:44:11:06:41:24:4f:7d:71:23:
a2:88:97:ec:16:a3:10:2d:48:7f:cb:c6:57:af:1e:48:6e:a0:
c4:f5:df:0d:0a:72:34:ba:a7:cb:14:e4:b8:13:05:5e:02:bf:
f0:ae:b2:63:bf:fa:82:d7:17:84:8f:6b:f9:2f:12:8d:1f:0d:
24:fb:01:79:80:4d:7b:26:57:d5:33:b3:6a:86:3d:7b:e7:1b:
11:20:ab:e0:ed:b9:25:c0:96:f6:25:43:db:dc:72:de:1d:0e:
6f:7b:48:31:72:5f:84:6f:e6:d0:d0:02:84:40:c7:9b:1a:8a:
be:b4:56:d4:19:f3:7e:c3:f7:be:1b:1a:06:8d:4f:f8:ed:1c:
98:df:17:b4:40:db:24:7d:41:fd:d7:01:58:01:e3:dd:1e:83:
9e:95:44:81:cd:17:d2:b7:0b:e5:65:a3:84:10:ee:dc:fe:6f:
51:60:5d:18:ce:f8:df:6c:8a:8f:d7:93:44:f7:52:1f:9a:5e:
24:ab:df:34:08:f3:09:ad:65:66:08:b3:c7:95:ce:d7:f4:cf:
97:5d:5d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIXHY+oXafsSnwQ22Kk7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGU2NDBmOWQ2M2JhOTQzYTk3YjNkYzEwZDRjNjg0NGE1
ZDNkYzEwHhcNMjUwNjA4MjAwMDM1WhcNMjUwNjA5MjAwMDM1WjAzMTEwLwYDVQQD
Eyg4MTlkYzg3ZDY3ZDU5OGEwN2RlNjljZTQxNDJhZjM1MWUyNmRlZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIHQ0uVJKkw9COlU5Sc+FWZFXl5P
6110BGY9hp+Enw+VieLIkYYRe42gGGOccj1jikYFvRbxFAG2sk8KSzwfRrUpP9Q6
j16FsUGVQwUBCwAxX2qCmp1fJTPvYVYKKaag4NsmYws9/87fDfY3D/nSGkVQHIMS
93naR0VbvY5fnngUSDpB4WsEuK79U6qrZHFPpO+Hai869gmVK1daVZbMJ+H7F96R
G2vJFOOEE7hvJEk+Up/TZnyOvYC7muuo3GtV6wlmVlxJ4Ip4gU2D4NjLSoxCm7we
RU8zrDKq8HKdBlseXZV2mGa3dbDvEJxwqmf2fHHIMgHHKsvl0/RuVG2T6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGdyH1n1Zigfeac5BQq81Hibe5NMB8GA1UdIwQY
MBaAFDMOZA+dY7qUOpez3BDUxoRKXT3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYt
NWExNzcxOWQ0NDllLzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYtNWExNzcxOWQ0NDll
LzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdJPwtZ6
4XvQQ0QWoLvhCTkXsGIn4xHbSxAgmJK0DncDvXmrTLjlr0KB45e+RBEGQSRPfXEj
ooiX7BajEC1If8vGV68eSG6gxPXfDQpyNLqnyxTkuBMFXgK/8K6yY7/6gtcXhI9r
+S8SjR8NJPsBeYBNeyZX1TOzaoY9e+cbESCr4O25JcCW9iVD29xy3h0Ob3tIMXJf
hG/m0NAChEDHmxqKvrRW1BnzfsP3vhsaBo1P+O0cmN8XtEDbJH1B/dcBWAHj3R6D
npVEgc0X0rcL5WWjhBDu3P5vUWBdGM7432yKj9eTRPdSH5peJKvfNAjzCa1lZgiz
x5XO1/TPl11d9w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:00 2025 by rpki-client