Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: Pg+fjKXKPB2n7yiPC9rsTWR20c9Eq5GfRLpzX68k4HU=
Subject key identifier: 1A:90:F5:64:E7:F0:17:15:0D:AB:2F:BF:68:9C:32:5A:05:AB:1D:36
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 0199239F3CC40573BF89A19E8E62F79FFA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 0733
Signing time: Sun 07 Sep 2025 10:01:02 +0000
Manifest this update: Sun 07 Sep 2025 10:01:02 +0000
Manifest next update: Mon 08 Sep 2025 10:01:02 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: CWY8QLK0jwVUOgYfi0V1/SXx0jkq2gnY8S+zWw8Arc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3c:c4:05:73:bf:89:a1:9e:8e:62:f7:9f:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Sep 7 10:01:02 2025 GMT
Not After : Sep 8 10:01:02 2025 GMT
Subject: CN=1a90f564e7f017150dab2fbf689c325a05ab1d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:3a:b9:ac:19:2e:63:7f:bf:62:aa:ca:f3:
d3:7c:b2:ac:4a:27:b6:04:1e:f6:66:76:35:dc:ce:
4f:de:0b:d0:4e:05:e4:69:96:6e:1a:4f:59:47:51:
cc:31:0f:77:6e:e4:bb:e0:0c:8d:31:b5:14:92:46:
eb:49:ff:2b:51:e0:8c:e9:23:7f:38:9e:4a:29:4f:
df:02:ff:ae:46:e2:fb:7d:42:12:e6:25:8c:7b:0d:
e6:36:8c:f8:68:a7:e2:14:c6:13:d9:95:e7:53:3b:
18:2c:e1:1e:05:04:f8:84:b8:37:a2:15:0c:9d:dd:
bf:f0:54:f1:16:5b:11:bd:9b:83:51:ed:51:f8:68:
48:cf:b0:0f:e3:4d:7a:79:da:59:ad:84:05:9d:67:
d7:fe:76:9e:a2:97:04:ee:69:da:89:94:22:5f:77:
8a:5d:5c:bb:74:44:c3:82:74:22:65:1f:a9:75:94:
1f:3a:bf:e0:ed:43:02:e6:79:10:2f:96:2b:c3:46:
38:d5:94:d1:ee:4a:d6:47:75:25:97:a4:44:9e:24:
27:f0:36:51:f6:e1:0f:59:03:27:d2:f2:ac:d4:9f:
a9:c1:a6:de:5a:1b:27:c5:14:26:85:21:8a:b4:c5:
2d:74:3f:a4:36:25:2d:0e:b0:e2:e2:ed:79:7f:53:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:F5:64:E7:F0:17:15:0D:AB:2F:BF:68:9C:32:5A:05:AB:1D:36
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:22:80:94:39:82:70:78:98:07:67:65:72:e6:24:43:ec:61:
7d:fa:86:b6:00:de:43:97:a7:5b:af:8d:e9:64:0b:1d:41:bf:
eb:8f:cc:0d:09:a1:b1:9d:00:22:cb:e9:30:0a:a5:e6:d3:e6:
f7:38:43:b1:4e:b3:e1:b1:3e:c3:14:85:6f:d9:96:a9:db:9e:
a4:da:0a:29:b2:0b:90:8a:ef:7d:2c:aa:4a:1d:b0:80:dd:86:
48:46:01:6a:ea:5a:64:23:f2:8d:f9:e6:94:85:e9:5c:b1:31:
2f:29:45:08:5f:57:1c:1a:aa:ad:bf:de:e8:12:b9:ed:f2:a7:
31:2e:8b:32:7c:ee:66:78:de:39:e6:9e:9d:f6:d5:bf:5b:99:
bf:e2:37:a9:0d:e0:d6:a7:ea:a9:53:af:05:62:73:ff:fa:3a:
59:cd:76:8f:7c:34:b7:1a:b6:61:8e:1c:da:6e:41:6d:f3:2b:
02:24:19:2c:ce:23:a5:51:a2:ce:1b:bd:14:93:f6:a7:9b:e1:
76:0b:ac:9d:96:a1:86:dd:79:d4:fa:cd:ea:29:a2:34:00:89:
cf:fd:41:91:74:1a:b6:df:f8:40:31:af:d3:78:ee:78:56:f1:
75:a5:06:f2:e1:18:2a:4d:3e:37:ba:b8:a4:90:66:53:d7:82:
71:6f:5a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnzzEBXO/iaGejmL3n/ojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzRmNGIxZGU0YzMxZTU2MTViZmQwYjNjY2IyZDgxN2U4
M2I5MzMwHhcNMjUwOTA3MTAwMTAyWhcNMjUwOTA4MTAwMTAyWjAzMTEwLwYDVQQD
EygxYTkwZjU2NGU3ZjAxNzE1MGRhYjJmYmY2ODljMzI1YTA1YWIxZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gg6uawZLmN/v2KqyvPTfLKsSie2
BB72ZnY13M5P3gvQTgXkaZZuGk9ZR1HMMQ93buS74AyNMbUUkkbrSf8rUeCM6SN/
OJ5KKU/fAv+uRuL7fUIS5iWMew3mNoz4aKfiFMYT2ZXnUzsYLOEeBQT4hLg3ohUM
nd2/8FTxFlsRvZuDUe1R+GhIz7AP4016edpZrYQFnWfX/naeopcE7mnaiZQiX3eK
XVy7dETDgnQiZR+pdZQfOr/g7UMC5nkQL5Yrw0Y41ZTR7krWR3Ull6REniQn8DZR
9uEPWQMn0vKs1J+pwabeWhsnxRQmhSGKtMUtdD+kNiUtDrDi4u15f1PQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqQ9WTn8BcVDasvv2icMloFqx02MB8GA1UdIwQY
MBaAFDDE9LHeTDHlYVv9CzzLLYF+g7kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUt
Y2Y5NzFkMmMyYTY1LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUtY2Y5NzFkMmMyYTY1
LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICKAlDmC
cHiYB2dlcuYkQ+xhffqGtgDeQ5enW6+N6WQLHUG/64/MDQmhsZ0AIsvpMAql5tPm
9zhDsU6z4bE+wxSFb9mWqduepNoKKbILkIrvfSyqSh2wgN2GSEYBaupaZCPyjfnm
lIXpXLExLylFCF9XHBqqrb/e6BK57fKnMS6LMnzuZnjeOeaenfbVv1uZv+I3qQ3g
1qfqqVOvBWJz//o6Wc12j3w0txq2YY4c2m5BbfMrAiQZLM4jpVGizhu9FJP2p5vh
dgusnZahht151PrN6imiNACJz/1BkXQatt/4QDGv03jueFbxdaUG8uEYKk0+N7q4
pJBmU9eCcW9anA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:51 2025 by rpki-client