Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: 8wbyhvi93dTjvXXSCvEYGUJc1rl/sP0euZbcX/g5kZ4=
Subject key identifier: 28:32:A3:B7:7F:00:C9:B0:CC:7A:72:A2:1E:BA:A6:2A:6B:70:EF:BE
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 01988C8F89723555F7EBBFCB3969723B75E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 03EC
Signing time: Sat 09 Aug 2025 02:01:13 +0000
Manifest this update: Sat 09 Aug 2025 02:01:13 +0000
Manifest next update: Sun 10 Aug 2025 02:01:13 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: b8Uj7bLlnYHuoWCKPNJEriMdiH7EhPR0/gyDY/a/Ptk=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:89:72:35:55:f7:eb:bf:cb:39:69:72:3b:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Aug 9 02:01:13 2025 GMT
Not After : Aug 10 02:01:13 2025 GMT
Subject: CN=2832a3b77f00c9b0cc7a72a21ebaa62a6b70efbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:22:87:63:ab:5e:d2:df:c8:88:b8:a0:fe:
3f:b5:08:80:83:53:00:b0:bc:c4:50:3d:09:51:c1:
96:e0:b3:8d:7e:4b:5a:30:db:a5:48:3a:86:87:7e:
ec:d7:b6:11:9a:d1:38:54:5b:69:55:8e:8a:4f:ba:
5d:3e:00:03:fa:19:a6:9f:7a:41:cd:de:f6:49:09:
a3:4c:7a:5e:66:0e:7b:fe:c8:1f:78:a1:2d:c5:8e:
18:25:77:bc:3a:54:bf:1c:b9:d4:f7:8c:a2:5d:22:
b1:96:62:b8:af:89:d3:e3:e5:ae:8d:f7:8b:57:29:
65:57:7b:44:09:84:30:be:8c:a7:93:1e:30:d7:80:
87:6e:67:6a:3c:38:57:c2:42:cd:72:e3:f1:80:9f:
28:65:3f:33:66:f2:22:a9:1a:12:32:26:5c:8e:fd:
1c:ae:d7:57:74:8a:7e:36:4c:e1:e2:70:73:5e:a4:
9c:c1:36:1d:91:67:f7:3e:c9:58:b6:e4:fe:0e:58:
3a:ae:78:0f:5d:e0:d0:41:2d:ef:bf:ba:87:d7:7e:
ba:05:bd:d9:42:6d:ef:cb:f9:6b:b8:1c:89:4b:25:
d5:0f:a6:22:05:a9:24:bb:86:83:31:20:8c:ab:31:
83:4a:df:84:c7:ef:6b:1b:ff:2a:1f:10:79:68:1f:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:A3:B7:7F:00:C9:B0:CC:7A:72:A2:1E:BA:A6:2A:6B:70:EF:BE
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:84:23:9c:b9:be:10:00:cf:58:f7:5d:10:5b:8c:60:07:
5f:44:3b:75:06:03:1b:44:ec:be:20:46:03:2a:96:08:0f:cb:
f5:35:2f:3e:19:4d:56:d7:88:16:28:b5:a0:4b:fd:bf:c4:09:
6b:45:6c:cf:6e:0e:81:32:37:0c:41:96:1a:66:d1:1d:54:03:
11:86:b2:ec:1d:ec:4f:4e:43:b2:6c:54:d1:e4:48:2c:20:72:
58:4f:54:3b:fd:34:eb:2c:2e:74:05:ed:16:13:21:33:31:8b:
a1:a9:9d:a1:e5:0a:ff:f6:56:e3:32:d8:40:82:64:c3:97:dc:
29:be:b7:73:1d:cf:b2:af:b2:6f:38:29:be:e5:73:53:b2:03:
f7:47:9a:d1:7a:4b:19:bb:e9:53:fb:b4:ad:64:28:00:d3:bf:
b1:f2:50:46:35:8c:00:b1:b1:7c:2a:16:38:03:9d:15:9e:ba:
ea:01:16:a2:68:7a:aa:a4:1b:de:3e:ba:18:33:f0:4e:f5:3f:
ee:44:ba:a9:e3:16:bb:5f:20:e5:3e:d5:08:45:5e:64:ef:4c:
32:14:8f:fa:52:7a:93:05:d0:cf:7c:6b:86:dd:9c:a8:25:33:
85:50:22:7b:f3:2a:b5:b8:b1:9c:18:e1:d7:9b:fd:41:41:56:
c5:c6:e5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj4lyNVX367/LOWlyO3XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUwODA5MDIwMTEzWhcNMjUwODEwMDIwMTEzWjAzMTEwLwYDVQQD
EygyODMyYTNiNzdmMDBjOWIwY2M3YTcyYTIxZWJhYTYyYTZiNzBlZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIgih2OrXtLfyIi4oP4/tQiAg1MA
sLzEUD0JUcGW4LONfktaMNulSDqGh37s17YRmtE4VFtpVY6KT7pdPgAD+hmmn3pB
zd72SQmjTHpeZg57/sgfeKEtxY4YJXe8OlS/HLnU94yiXSKxlmK4r4nT4+WujfeL
VyllV3tECYQwvoynkx4w14CHbmdqPDhXwkLNcuPxgJ8oZT8zZvIiqRoSMiZcjv0c
rtdXdIp+Nkzh4nBzXqScwTYdkWf3PslYtuT+Dlg6rngPXeDQQS3vv7qH1366Bb3Z
Qm3vy/lruByJSyXVD6YiBakku4aDMSCMqzGDSt+Ex+9rG/8qHxB5aB/QoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgyo7d/AMmwzHpyoh66piprcO++MB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoqEI5y5
vhAAz1j3XRBbjGAHX0Q7dQYDG0TsviBGAyqWCA/L9TUvPhlNVteIFii1oEv9v8QJ
a0Vsz24OgTI3DEGWGmbRHVQDEYay7B3sT05DsmxU0eRILCByWE9UO/006ywudAXt
FhMhMzGLoamdoeUK//ZW4zLYQIJkw5fcKb63cx3Psq+ybzgpvuVzU7ID90ea0XpL
GbvpU/u0rWQoANO/sfJQRjWMALGxfCoWOAOdFZ666gEWomh6qqQb3j66GDPwTvU/
7kS6qeMWu18g5T7VCEVeZO9MMhSP+lJ6kwXQz3xrht2cqCUzhVAie/MqtbixnBjh
15v9QUFWxcblrQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:14 2025 by rpki-client