Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: HcOe5SoktT/VZunS7i3nwJrSWhrRG94Bnsw/yMXVKjk=
Subject key identifier: 21:7B:6E:F4:53:9B:EE:B8:40:CC:C5:6A:A1:75:8F:7B:A7:F4:74:9B
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 01974C69F69268C61315F7FE94D8CDB7BEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0947
Signing time: Sat 07 Jun 2025 22:01:42 +0000
Manifest this update: Sat 07 Jun 2025 22:01:42 +0000
Manifest next update: Sun 08 Jun 2025 22:01:42 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: dzMkGT046XAHS6xLy/PIEGHniHA49IbCaQq7eWKOeLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:f6:92:68:c6:13:15:f7:fe:94:d8:cd:b7:be:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Jun 7 22:01:42 2025 GMT
Not After : Jun 8 22:01:42 2025 GMT
Subject: CN=217b6ef4539beeb840ccc56aa1758f7ba7f4749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:5c:8c:f1:81:cf:a4:c2:27:0e:19:14:5e:
a6:6c:d8:86:3c:83:8d:09:03:1c:ea:11:64:0d:35:
70:f8:76:7b:a5:cb:9d:ce:80:87:fe:ee:29:f1:ac:
8c:fd:7d:6a:3d:34:bd:bb:3a:61:9b:b9:81:36:9d:
31:cd:0c:e8:c1:e8:b0:94:f2:3c:32:3a:cb:92:66:
88:bc:31:55:0c:d2:55:7b:e2:b7:a5:00:3c:ee:8d:
ec:f1:a7:27:18:e7:ba:a2:d5:d9:1c:bc:e3:dc:e1:
0d:2d:48:04:f5:55:27:3d:42:4f:4f:27:0c:3a:1f:
64:29:39:80:0c:9c:1d:03:93:4a:12:8e:4c:89:60:
8e:91:1f:8e:86:11:d6:c6:c5:fa:b6:46:33:df:8a:
d3:83:87:ed:6c:fe:c8:53:b6:cd:9a:46:8c:70:93:
32:e7:75:0f:c6:7a:cf:73:0a:e8:d4:16:58:26:cd:
c6:49:36:55:2d:62:29:ac:45:67:71:1c:e7:44:7d:
ce:15:66:d5:be:a5:a0:6f:4d:5e:b2:e4:fa:d8:90:
fe:e3:21:67:bd:75:03:35:4c:f0:72:1d:15:32:70:
1c:a5:24:0b:92:9c:b1:1f:71:71:36:f4:30:f7:ba:
54:0c:72:70:86:37:cd:c2:c0:4c:9a:c4:9d:a0:f6:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:6E:F4:53:9B:EE:B8:40:CC:C5:6A:A1:75:8F:7B:A7:F4:74:9B
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:2d:45:4b:3b:27:0b:1d:7e:23:81:78:86:8d:69:ef:99:
00:a9:a8:49:eb:1a:da:78:7b:8b:5c:64:3f:d6:b6:c0:79:3b:
2b:09:6c:a3:61:ea:41:4d:96:e5:6b:d5:e3:bf:71:0a:de:35:
a1:e1:f9:9b:e9:e9:4f:17:d3:63:78:b6:82:d9:7d:8d:42:64:
13:8f:f1:0d:09:d9:c1:c0:d7:de:a3:ca:6d:33:ae:83:b4:bc:
81:34:7b:cd:40:83:05:99:a3:72:e9:38:6b:e3:cd:02:53:7b:
a2:b6:18:cb:30:d8:41:5a:06:5c:e2:21:aa:d2:0f:d5:0d:7f:
cf:2d:db:38:75:60:e9:4e:46:c0:64:52:03:d8:5c:b4:2d:22:
fb:bb:33:59:57:74:e7:0e:b8:70:80:e9:4b:38:b6:60:c2:21:
21:07:56:fd:0e:6a:a4:0f:54:03:38:a7:32:81:13:3f:2f:53:
61:70:e5:bb:d1:91:29:16:88:b4:22:4e:93:38:76:4c:9e:b2:
95:b9:24:6f:8d:3a:c1:5d:6f:8b:94:b3:be:43:e7:13:d3:7a:
11:84:90:c4:95:87:cd:34:60:9e:dd:37:27:b6:66:6e:e6:d2:
d3:1d:27:39:f1:43:57:9e:01:44:57:46:5f:2b:c4:11:f3:81:
89:bb:4b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMafaSaMYTFff+lNjNt77EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk
ZDk5MmQwHhcNMjUwNjA3MjIwMTQyWhcNMjUwNjA4MjIwMTQyWjAzMTEwLwYDVQQD
EygyMTdiNmVmNDUzOWJlZWI4NDBjY2M1NmFhMTc1OGY3YmE3ZjQ3NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOFcjPGBz6TCJw4ZFF6mbNiGPION
CQMc6hFkDTVw+HZ7pcudzoCH/u4p8ayM/X1qPTS9uzphm7mBNp0xzQzoweiwlPI8
MjrLkmaIvDFVDNJVe+K3pQA87o3s8acnGOe6otXZHLzj3OENLUgE9VUnPUJPTycM
Oh9kKTmADJwdA5NKEo5MiWCOkR+OhhHWxsX6tkYz34rTg4ftbP7IU7bNmkaMcJMy
53UPxnrPcwro1BZYJs3GSTZVLWIprEVncRznRH3OFWbVvqWgb01esuT62JD+4yFn
vXUDNUzwch0VMnAcpSQLkpyxH3FxNvQw97pUDHJwhjfNwsBMmsSdoPaa7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF7bvRTm+64QMzFaqF1j3un9HSbMB8GA1UdIwQY
MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt
OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl
LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGwtRUs7
JwsdfiOBeIaNae+ZAKmoSesa2nh7i1xkP9a2wHk7Kwlso2HqQU2W5WvV479xCt41
oeH5m+npTxfTY3i2gtl9jUJkE4/xDQnZwcDX3qPKbTOug7S8gTR7zUCDBZmjcuk4
a+PNAlN7orYYyzDYQVoGXOIhqtIP1Q1/zy3bOHVg6U5GwGRSA9hctC0i+7szWVd0
5w64cIDpSzi2YMIhIQdW/Q5qpA9UAzinMoETPy9TYXDlu9GRKRaItCJOkzh2TJ6y
lbkkb406wV1vi5SzvkPnE9N6EYSQxJWHzTRgnt03J7ZmbubS0x0nOfFDV54BRFdG
XyvEEfOBibtLXw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:43 2025 by rpki-client