Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: LOpfUzWSMEhtA64JH5h4du3Z0gnHlND91gWEFCrB600=
Subject key identifier: E8:90:69:27:DB:FE:00:83:52:65:01:D5:8D:D7:2F:3F:31:CC:47:B7
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01992DB551545D6EA4C1EC443B4F8A8EF197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 15CE
Signing time: Tue 09 Sep 2025 09:01:21 +0000
Manifest this update: Tue 09 Sep 2025 09:01:21 +0000
Manifest next update: Wed 10 Sep 2025 09:01:21 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: L6L/bsbXplzgK6g/C4GfPDCtxrVD0uIiiN+H6uRUSeE=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:51:54:5d:6e:a4:c1:ec:44:3b:4f:8a:8e:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Sep 9 09:01:21 2025 GMT
Not After : Sep 10 09:01:21 2025 GMT
Subject: CN=e8906927dbfe0083526501d58dd72f3f31cc47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:88:0f:ac:b4:6e:f5:f9:4f:15:1b:98:47:
37:cd:2c:8d:51:19:76:6a:2d:6a:6e:14:2d:42:22:
07:4f:5b:7d:32:70:b0:5b:85:e4:e5:95:31:c3:ea:
4a:c0:24:3f:61:e4:09:06:a6:57:4b:31:93:d7:0a:
fe:05:99:9a:c9:6c:a3:2c:8d:aa:28:30:c9:6e:7c:
ff:6e:0d:36:02:ed:37:19:0b:ff:d4:3e:26:49:1a:
34:93:e6:83:bf:5f:b9:c0:fe:cc:59:f5:03:a6:10:
ea:a2:a1:d4:b7:d1:b0:fe:e0:c3:63:7b:57:61:1c:
ee:fa:2b:32:b4:3d:bb:64:08:bb:4f:5e:3e:61:5e:
bc:18:00:2d:49:4e:72:9f:91:c6:24:1d:fb:f1:3c:
0a:2d:31:bd:e2:52:4d:c0:49:52:e2:e2:0a:25:1f:
d9:5b:0b:26:b8:17:17:75:95:f4:dd:54:41:3b:ad:
11:b4:12:81:14:5f:44:cd:0e:37:d3:73:eb:b1:ad:
88:58:55:04:e9:ae:d0:bf:f7:95:98:d5:2f:6d:cc:
f8:e6:19:26:34:3c:24:4a:81:13:d6:83:67:bd:a5:
7f:40:63:e1:bf:56:d1:13:4c:80:2e:6f:1e:45:47:
87:b1:6b:7d:98:26:50:85:7f:23:aa:ff:98:f6:4f:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:69:27:DB:FE:00:83:52:65:01:D5:8D:D7:2F:3F:31:CC:47:B7
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:2a:68:17:31:08:b4:03:d1:8d:9f:39:9e:ac:a4:cd:81:
b9:c4:ce:44:ed:50:2d:e4:8b:4d:a9:4d:ad:58:bf:aa:e6:c4:
c2:5c:e3:15:d7:ea:2f:af:35:4b:43:d7:d6:57:6c:b2:d4:3c:
34:12:5e:49:50:e0:64:86:5a:c1:ca:80:a1:ab:86:8b:39:d9:
26:99:58:41:bc:93:17:90:f0:58:46:f3:c5:de:bd:ec:7d:e7:
30:3b:1f:58:a2:e2:d2:a7:9c:3b:8a:6e:dc:d1:7e:c9:bd:a7:
91:c3:76:15:fa:29:14:e7:51:a3:ad:3c:21:16:f1:1b:c7:d9:
f7:d5:3b:39:7b:67:2a:31:d3:9e:82:3e:51:da:2b:69:09:9c:
37:cc:70:65:12:cb:ae:e8:81:41:02:00:ad:9a:fc:23:2c:1e:
96:30:f0:2e:37:7c:44:a3:b3:27:14:6f:9a:b9:76:fb:c7:ef:
b9:e7:29:16:b0:f5:23:aa:05:e0:ff:06:60:42:e8:41:67:eb:
f3:8b:11:4b:74:38:af:8f:39:e5:43:73:3b:2c:5b:56:8e:ea:
31:20:a6:56:d4:e4:8c:44:0a:3c:ec:07:5d:97:ca:62:e0:51:
6c:09:12:5c:ce:63:a0:c7:75:b9:31:e7:5d:e3:36:0f:18:bd:
66:66:cf:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttVFUXW6kwexEO0+KjvGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUwOTA5MDkwMTIxWhcNMjUwOTEwMDkwMTIxWjAzMTEwLwYDVQQD
EyhlODkwNjkyN2RiZmUwMDgzNTI2NTAxZDU4ZGQ3MmYzZjMxY2M0N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhqID6y0bvX5TxUbmEc3zSyNURl2
ai1qbhQtQiIHT1t9MnCwW4Xk5ZUxw+pKwCQ/YeQJBqZXSzGT1wr+BZmayWyjLI2q
KDDJbnz/bg02Au03GQv/1D4mSRo0k+aDv1+5wP7MWfUDphDqoqHUt9Gw/uDDY3tX
YRzu+isytD27ZAi7T14+YV68GAAtSU5yn5HGJB378TwKLTG94lJNwElS4uIKJR/Z
WwsmuBcXdZX03VRBO60RtBKBFF9EzQ4303Prsa2IWFUE6a7Qv/eVmNUvbcz45hkm
NDwkSoET1oNnvaV/QGPhv1bRE0yALm8eRUeHsWt9mCZQhX8jqv+Y9k/yEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiQaSfb/gCDUmUB1Y3XLz8xzEe3MB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdi4qaBcx
CLQD0Y2fOZ6spM2BucTORO1QLeSLTalNrVi/qubEwlzjFdfqL681S0PX1ldsstQ8
NBJeSVDgZIZawcqAoauGiznZJplYQbyTF5DwWEbzxd697H3nMDsfWKLi0qecO4pu
3NF+yb2nkcN2FfopFOdRo608IRbxG8fZ99U7OXtnKjHTnoI+UdoraQmcN8xwZRLL
ruiBQQIArZr8IyweljDwLjd8RKOzJxRvmrl2+8fvuecpFrD1I6oF4P8GYELoQWfr
84sRS3Q4r4855UNzOyxbVo7qMSCmVtTkjEQKPOwHXZfKYuBRbAkSXM5joMd1uTHn
XeM2Dxi9ZmbP/A==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:33:38 2025 by rpki-client