Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: fVFIDVTvId50yDMudikTHmCkBwMoTC/ARCoDxD/oh3w=
Subject key identifier: 8A:44:F7:8A:96:DE:70:35:0D:5D:FE:6D:39:9D:0A:05:46:6E:FB:89
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 0199179AD042FAA3B403F0C2112F8B6F62A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 08A7
Signing time: Fri 05 Sep 2025 02:00:45 +0000
Manifest this update: Fri 05 Sep 2025 02:00:45 +0000
Manifest next update: Sat 06 Sep 2025 02:00:45 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: ZmFs6EPWGPmET2OKWRRqD+bgFuqufKyDZdoN3niFj+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:d0:42:fa:a3:b4:03:f0:c2:11:2f:8b:6f:62:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Sep 5 02:00:45 2025 GMT
Not After : Sep 6 02:00:45 2025 GMT
Subject: CN=8a44f78a96de70350d5dfe6d399d0a05466efb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:40:14:77:48:d9:58:c3:d4:16:78:b1:95:
fc:80:d6:c9:65:18:19:0d:81:8a:71:18:34:53:7e:
66:31:20:2b:9f:38:04:6f:a5:b8:80:81:ae:65:7f:
31:fa:b6:98:ce:10:1b:89:74:20:9e:2a:b4:7b:c0:
1c:ab:35:25:a8:39:7d:9a:c7:cc:c4:c2:c1:34:90:
86:a8:48:1d:a4:51:c7:96:97:e9:ba:57:69:0d:8e:
e8:53:f2:47:8e:c9:bd:7c:12:3c:01:44:eb:1d:68:
6f:19:0f:09:af:19:3c:15:7f:1b:2d:61:3d:ba:55:
64:72:fc:61:8b:92:a4:e5:17:f9:77:2a:4e:c1:9f:
49:a0:ba:e2:7e:0e:8d:68:8f:38:ae:62:94:fc:5d:
5e:e6:dc:4b:9a:0a:05:d7:c2:de:3c:0b:02:4d:3d:
9e:75:fb:ca:26:bd:05:89:53:30:95:fe:ef:4d:a8:
56:b0:ad:65:ad:01:6f:d4:3c:fa:27:fe:2e:fd:7b:
ee:67:56:1f:c1:7e:fb:23:58:ec:b8:ca:ce:7d:25:
40:dd:d1:09:a1:59:7a:2c:d0:d5:24:23:05:3b:fa:
f6:72:0e:3f:8d:a1:bd:e0:5f:a9:04:11:23:6b:e1:
29:f7:eb:16:82:df:38:6a:76:ba:55:3b:e6:d1:af:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:F7:8A:96:DE:70:35:0D:5D:FE:6D:39:9D:0A:05:46:6E:FB:89
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:43:58:cd:ed:ad:9d:48:17:ae:75:6b:e7:ca:c5:b8:19:1e:
0c:47:e8:9c:8f:fa:be:ac:2b:5d:54:4d:20:2a:10:88:db:da:
a8:34:d2:b2:42:16:b6:5f:20:30:d5:d9:ef:51:26:d9:48:c4:
70:a7:be:cd:f3:19:2d:c1:c0:dc:c3:65:f9:80:32:2f:ab:d8:
8e:fb:7b:7d:85:fe:75:ef:0f:f4:b2:c6:8f:7c:6c:9d:6c:38:
09:10:78:05:8b:00:10:4f:58:aa:d1:93:25:af:bf:a5:dd:85:
5b:0a:4d:41:75:76:c4:12:a8:2e:db:61:b0:42:55:ad:5b:5d:
01:fa:90:e2:cd:a1:5c:af:24:c5:9a:25:b8:70:75:6b:45:38:
be:e5:f6:ce:e7:1e:4b:1f:47:9a:10:a3:eb:fb:93:c6:5e:16:
07:a4:8b:c2:5f:4c:f7:29:ec:eb:55:85:13:08:d2:58:56:b6:
9d:1e:ab:0a:2c:a2:a6:10:b5:60:95:eb:6f:77:7d:f1:47:ce:
6e:84:a9:5b:69:3f:24:73:b7:c7:84:ef:ea:bd:a8:e1:ad:d6:
c3:b5:a3:84:0c:ed:7c:71:7a:12:06:fa:99:a8:c4:4d:f1:a5:
bc:37:29:27:1a:b3:48:35:02:25:cd:54:e7:25:f3:81:f1:ed:
4b:2d:63:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmtBC+qO0A/DCES+Lb2KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi
M2ZiN2EwHhcNMjUwOTA1MDIwMDQ1WhcNMjUwOTA2MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg4YTQ0Zjc4YTk2ZGU3MDM1MGQ1ZGZlNmQzOTlkMGEwNTQ2NmVmYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v9AFHdI2VjD1BZ4sZX8gNbJZRgZ
DYGKcRg0U35mMSArnzgEb6W4gIGuZX8x+raYzhAbiXQgniq0e8AcqzUlqDl9msfM
xMLBNJCGqEgdpFHHlpfpuldpDY7oU/JHjsm9fBI8AUTrHWhvGQ8Jrxk8FX8bLWE9
ulVkcvxhi5Kk5Rf5dypOwZ9JoLrifg6NaI84rmKU/F1e5txLmgoF18LePAsCTT2e
dfvKJr0FiVMwlf7vTahWsK1lrQFv1Dz6J/4u/XvuZ1YfwX77I1jsuMrOfSVA3dEJ
oVl6LNDVJCMFO/r2cg4/jaG94F+pBBEja+Ep9+sWgt84ana6VTvm0a/TMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpE94qW3nA1DV3+bTmdCgVGbvuJMB8GA1UdIwQY
MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt
MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi
LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUNYze2t
nUgXrnVr58rFuBkeDEfonI/6vqwrXVRNICoQiNvaqDTSskIWtl8gMNXZ71Em2UjE
cKe+zfMZLcHA3MNl+YAyL6vYjvt7fYX+de8P9LLGj3xsnWw4CRB4BYsAEE9YqtGT
Ja+/pd2FWwpNQXV2xBKoLtthsEJVrVtdAfqQ4s2hXK8kxZoluHB1a0U4vuX2zuce
Sx9HmhCj6/uTxl4WB6SLwl9M9yns61WFEwjSWFa2nR6rCiyiphC1YJXrb3d98UfO
boSpW2k/JHO3x4Tv6r2o4a3Ww7WjhAztfHF6Egb6majETfGlvDcpJxqzSDUCJc1U
5yXzgfHtSy1j/A==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:07 2025 by rpki-client