Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: Xutm/gadN9RDJCfnAejtO+T566CsJg46pYv8/916vHI=
Subject key identifier: D0:8E:70:A5:CE:71:E3:C4:EE:FE:03:8A:E0:AC:73:22:57:EC:F1:90
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019765162E513342A20BCCA930BC035AD36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 17:00:41 +0000
Manifest this update: Thu 12 Jun 2025 17:00:41 +0000
Manifest next update: Fri 13 Jun 2025 17:00:41 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: Aah9KZBUTCdVnOse3gHXeYUAGFDulVDUKZbdROVERbM=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:16:2e:51:33:42:a2:0b:cc:a9:30:bc:03:5a:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jun 12 17:00:41 2025 GMT
Not After : Jun 13 17:00:41 2025 GMT
Subject: CN=d08e70a5ce71e3c4eefe038ae0ac732257ecf190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:22:b2:17:82:82:a6:b5:97:42:54:7c:75:
2f:83:46:af:5e:b9:7e:62:84:1d:47:6a:29:88:cd:
02:e9:44:02:3c:53:3e:6c:5b:2f:c4:12:70:24:6f:
2b:48:39:cb:d5:83:a6:15:c6:73:3d:39:db:3a:c3:
99:d1:1c:21:3e:37:aa:f5:1c:39:8e:2a:8e:e1:60:
fe:ec:14:31:73:66:95:86:21:52:19:8c:6d:0d:37:
67:fa:e3:be:31:b2:70:6b:55:a5:c9:d2:15:76:f5:
86:8e:06:5b:aa:5e:17:e2:a3:6a:c0:9a:9f:b4:de:
2a:52:ec:54:00:71:2c:5b:78:dc:2c:7c:63:b7:0a:
b1:bd:df:f8:50:d9:77:13:8b:71:8c:14:e5:e1:90:
2b:dd:cd:05:84:8e:18:a3:5a:45:42:23:02:42:37:
1d:b0:b5:54:42:6b:e4:7c:fd:be:94:74:99:2a:a2:
7e:be:f7:70:19:2b:d7:ee:3d:62:38:97:a3:c2:7d:
79:e7:7a:c3:a5:e6:42:4a:9e:ab:10:fb:5e:c9:13:
d9:6e:1b:7a:06:5a:b9:2d:68:f9:a1:38:2b:aa:e1:
a2:23:34:84:9d:2e:ff:19:23:31:fe:72:ba:50:dc:
11:7f:6a:de:0e:3c:20:ec:62:50:fb:e4:f1:10:98:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8E:70:A5:CE:71:E3:C4:EE:FE:03:8A:E0:AC:73:22:57:EC:F1:90
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2e:0a:81:48:c2:8d:0e:0f:9c:84:4d:27:d2:d0:e3:b6:2a:
fb:02:16:20:7d:2a:cb:67:8c:16:d8:d4:36:ad:5a:36:ac:b0:
46:69:90:fc:97:44:8b:14:9f:31:fd:88:36:98:bb:40:ac:71:
f4:44:d3:ae:1d:62:a1:89:25:46:f7:b1:98:71:ca:32:e4:20:
57:de:5a:a1:26:75:ef:0f:d3:a9:26:f1:c1:c5:29:d8:de:d1:
42:49:9c:05:73:58:b8:e5:ef:af:3c:f1:0c:d0:cd:da:c0:97:
b2:98:66:84:5e:ec:3f:df:cf:84:51:c6:2c:00:29:8f:8f:10:
54:cf:b2:a3:4d:50:01:fd:90:64:b5:3c:68:89:19:07:21:59:
50:75:7e:76:12:a7:5f:8e:f9:e5:6e:6e:38:ed:c9:e1:c9:0d:
38:e0:96:5b:7d:78:7d:ce:28:52:c0:0a:6a:62:4f:8c:69:b3:
5a:0e:fc:be:22:01:91:b4:cd:83:29:55:70:5a:af:83:e4:a7:
c3:55:15:f2:05:16:25:46:e2:fb:f8:03:6c:ee:10:70:90:84:
fa:d8:03:cb:e8:82:12:94:b6:a1:01:70:fb:80:69:23:59:3a:
eb:6e:6a:0d:f4:01:81:db:7f:75:e7:4c:89:44:03:ec:22:ca:
b4:d3:d6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlFi5RM0KiC8ypMLwDWtNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUwNjEyMTcwMDQxWhcNMjUwNjEzMTcwMDQxWjAzMTEwLwYDVQQD
EyhkMDhlNzBhNWNlNzFlM2M0ZWVmZTAzOGFlMGFjNzMyMjU3ZWNmMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCoisheCgqa1l0JUfHUvg0avXrl+
YoQdR2opiM0C6UQCPFM+bFsvxBJwJG8rSDnL1YOmFcZzPTnbOsOZ0RwhPjeq9Rw5
jiqO4WD+7BQxc2aVhiFSGYxtDTdn+uO+MbJwa1WlydIVdvWGjgZbql4X4qNqwJqf
tN4qUuxUAHEsW3jcLHxjtwqxvd/4UNl3E4txjBTl4ZAr3c0FhI4Yo1pFQiMCQjcd
sLVUQmvkfP2+lHSZKqJ+vvdwGSvX7j1iOJejwn1553rDpeZCSp6rEPteyRPZbht6
Blq5LWj5oTgrquGiIzSEnS7/GSMx/nK6UNwRf2reDjwg7GJQ++TxEJj17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCOcKXOcePE7v4DiuCscyJX7PGQMB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi4KgUjC
jQ4PnIRNJ9LQ47Yq+wIWIH0qy2eMFtjUNq1aNqywRmmQ/JdEixSfMf2INpi7QKxx
9ETTrh1ioYklRvexmHHKMuQgV95aoSZ17w/TqSbxwcUp2N7RQkmcBXNYuOXvrzzx
DNDN2sCXsphmhF7sP9/PhFHGLAApj48QVM+yo01QAf2QZLU8aIkZByFZUHV+dhKn
X4755W5uOO3J4ckNOOCWW314fc4oUsAKamJPjGmzWg78viIBkbTNgylVcFqvg+Sn
w1UV8gUWJUbi+/gDbO4QcJCE+tgDy+iCEpS2oQFw+4BpI1k6625qDfQBgdt/dedM
iUQD7CLKtNPWfQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:41:20 2025 by rpki-client