Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: zVzzbyWYw0in27JGNXE5faHPivKptvGJaV533d7CuAo=
Subject key identifier: 3D:BA:44:73:94:20:8A:D8:32:41:36:40:7D:E4:D3:43:7C:C0:10:AD
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019873E311BEF5575C309FD0A9190770E3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0939
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: H5HN433w7fFkNo7X73+P161Yw4mFjCkxFioz5zfLuWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:11:be:f5:57:5c:30:9f:d0:a9:19:07:70:e3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=3dba447394208ad8324136407de4d3437cc010ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:e8:4a:3e:40:e5:d9:da:39:bd:e0:e8:17:
e6:a1:d5:3d:5a:0c:f3:84:7f:1f:fe:2d:71:c8:0b:
ef:2c:1f:59:09:54:78:b8:9a:1d:a7:e6:65:87:b1:
d6:80:49:32:e0:de:39:19:b9:30:48:ef:37:02:64:
32:c6:31:51:39:aa:a2:8a:a0:7c:dc:9f:e3:1f:c9:
4a:ea:a1:a6:63:cc:89:06:af:33:13:32:05:ae:0f:
03:b2:bb:14:0b:4f:5f:66:63:49:35:48:e1:5f:80:
f0:1a:d8:ab:94:c9:14:9d:2d:44:01:26:a2:e4:cd:
d0:8b:cf:55:f9:a0:c7:cc:30:7b:c2:40:5b:2f:ec:
75:6b:5b:61:ba:c2:0c:97:d1:90:3a:88:57:24:4e:
c2:fd:f2:52:7c:6d:65:5e:2b:1b:7f:9f:d3:e9:a8:
1f:5d:9c:03:6f:ef:ea:94:7b:53:28:47:61:6f:26:
4d:f4:5f:a2:f3:7b:5d:50:d1:66:be:cf:0c:f1:4d:
bd:ab:cb:45:57:83:0a:b7:45:53:ed:27:14:2b:22:
66:39:d5:b3:f2:2c:7b:36:6b:a0:4d:e4:2d:a9:a9:
ef:8a:73:cf:b4:bb:69:df:cb:0c:d1:d2:fa:80:bc:
db:65:fa:b9:0f:84:b2:de:b1:0b:77:18:0c:a0:da:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:44:73:94:20:8A:D8:32:41:36:40:7D:E4:D3:43:7C:C0:10:AD
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:71:a5:7f:ad:f9:58:37:77:fc:7f:46:55:49:5f:0d:77:
3d:a3:b4:7b:6b:09:8d:2f:e9:8a:be:2c:50:76:ec:34:62:bc:
c7:49:eb:dd:ff:79:c2:e8:f1:8b:03:43:44:95:7a:37:b3:f0:
88:ff:cc:e3:09:48:7b:a8:80:d7:f9:3d:20:26:cb:40:1a:ab:
10:0e:5d:58:14:4d:2e:dd:94:b9:d9:c0:64:54:b9:74:7a:3a:
4d:23:cb:14:7c:8c:2d:d2:49:71:11:8d:65:5f:c9:c4:fa:af:
4c:0a:30:c7:47:05:17:02:5d:57:6a:87:04:aa:02:e7:4a:8d:
2f:bc:46:f3:6c:d5:ae:5e:6f:a1:36:c8:48:b8:39:ee:90:64:
20:8e:ed:36:80:4b:66:ba:13:7d:6d:17:f6:79:79:69:38:55:
e6:65:ae:4f:89:76:8a:42:cf:75:60:96:da:64:0c:92:6c:7d:
6e:21:b3:88:aa:00:8b:52:1e:40:08:0e:05:8b:b9:7d:d0:29:
69:8b:7b:9f:01:d5:5b:94:45:70:7b:81:e2:41:9b:a9:5a:f0:
cf:53:fa:63:7b:9b:68:40:15:ca:e1:0f:37:7a:8e:55:cf:ca:
9a:39:b5:52:0c:f1:76:ed:9b:22:78:91:c3:77:58:01:d7:56:
25:dd:ea:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4xG+9VdcMJ/QqRkHcOPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk
ZjQwY2MwHhcNMjUwODA0MDcwMTU3WhcNMjUwODA1MDcwMTU3WjAzMTEwLwYDVQQD
EygzZGJhNDQ3Mzk0MjA4YWQ4MzI0MTM2NDA3ZGU0ZDM0MzdjYzAxMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP7oSj5A5dnaOb3g6BfmodU9Wgzz
hH8f/i1xyAvvLB9ZCVR4uJodp+Zlh7HWgEky4N45GbkwSO83AmQyxjFROaqiiqB8
3J/jH8lK6qGmY8yJBq8zEzIFrg8DsrsUC09fZmNJNUjhX4DwGtirlMkUnS1EASai
5M3Qi89V+aDHzDB7wkBbL+x1a1thusIMl9GQOohXJE7C/fJSfG1lXisbf5/T6agf
XZwDb+/qlHtTKEdhbyZN9F+i83tdUNFmvs8M8U29q8tFV4MKt0VT7ScUKyJmOdWz
8ix7NmugTeQtqanvinPPtLtp38sM0dL6gLzbZfq5D4Sy3rELdxgMoNoKLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD26RHOUIIrYMkE2QH3k00N8wBCtMB8GA1UdIwQY
MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt
NjA0YjIwMWU2NWY4LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4
LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTxxpX+t
+Vg3d/x/RlVJXw13PaO0e2sJjS/pir4sUHbsNGK8x0nr3f95wujxiwNDRJV6N7Pw
iP/M4wlIe6iA1/k9ICbLQBqrEA5dWBRNLt2UudnAZFS5dHo6TSPLFHyMLdJJcRGN
ZV/JxPqvTAowx0cFFwJdV2qHBKoC50qNL7xG82zVrl5voTbISLg57pBkII7tNoBL
ZroTfW0X9nl5aThV5mWuT4l2ikLPdWCW2mQMkmx9biGziKoAi1IeQAgOBYu5fdAp
aYt7nwHVW5RFcHuB4kGbqVrwz1P6Y3ubaEAVyuEPN3qOVc/Kmjm1Ugzxdu2bIniR
w3dYAddWJd3qBw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:50 2025 by rpki-client