Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: O5v5kWnbrs/44TJlvdMlk2FvkmB6bYfG/AVGf/GFJFU=
Subject key identifier: 9E:BD:80:1A:27:54:45:B3:4D:C3:3F:D7:E9:5F:57:41:10:0C:FE:8C
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019880542D6D80BB16729F40F4D693D01A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 17:00:56 +0000
Manifest this update: Wed 06 Aug 2025 17:00:56 +0000
Manifest next update: Thu 07 Aug 2025 17:00:56 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: 8rpcxTvp1yr0OIHp7entGCy/lMYKkZ1UsW5Tmpzrrmw=)
2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:2d:6d:80:bb:16:72:9f:40:f4:d6:93:d0:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Aug 6 17:00:56 2025 GMT
Not After : Aug 7 17:00:56 2025 GMT
Subject: CN=9ebd801a275445b34dc33fd7e95f5741100cfe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:58:ce:ea:e4:9e:9b:16:72:85:b5:43:75:
c9:d3:b8:b0:67:d4:ce:b5:da:88:68:bd:bb:5d:77:
bb:63:d7:54:de:25:57:fa:e1:30:8f:ca:15:16:1b:
75:ce:42:d1:ef:1f:24:cd:8a:38:e0:fd:13:b2:71:
70:ad:c4:6f:bf:8b:de:bd:91:0d:53:17:70:3c:90:
7a:95:1e:96:e8:fa:6c:b6:84:69:f2:d5:cf:85:3a:
52:89:ca:9d:a3:bf:b8:a5:47:1f:78:7e:4f:f0:ad:
bd:d7:f0:61:d9:94:71:a5:db:e6:f8:ba:98:eb:62:
a9:bd:16:d4:a1:c1:72:31:0f:78:e0:19:c4:38:ce:
b0:7c:eb:d7:7c:57:e8:ff:33:ed:03:4c:aa:62:03:
8c:79:57:41:f6:73:64:67:59:c4:b3:1e:75:7e:e5:
cd:6c:19:ac:b9:bd:ba:07:89:54:ea:50:c2:f8:fd:
93:0d:ef:c9:fd:d8:8a:46:f4:7c:88:da:d0:37:57:
28:ce:00:e0:06:ea:39:82:40:7a:b6:3b:1b:bc:c9:
14:9c:0c:01:7b:41:5f:d2:4f:ab:16:c3:85:39:3f:
c7:ae:a9:d6:22:57:0d:fe:49:23:d2:c4:03:c6:d0:
eb:c1:60:60:a8:1e:65:14:72:cc:90:23:e4:74:81:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:80:1A:27:54:45:B3:4D:C3:3F:D7:E9:5F:57:41:10:0C:FE:8C
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:28:25:c5:e5:45:23:f5:44:61:23:e6:87:bc:49:c7:97:
62:52:7d:43:2b:40:f8:5d:1e:67:08:21:1c:89:5e:55:a6:af:
c2:99:4d:f1:f0:05:23:05:11:7e:3b:39:fc:14:c7:0b:87:c4:
e7:70:05:b9:76:9c:c8:99:9e:2b:e8:b8:7f:e7:3e:d9:e5:44:
63:14:13:9a:b4:e7:d4:6a:fd:1e:44:8b:4c:57:e7:b1:ae:2b:
ac:5c:83:0e:3c:18:9d:07:1d:e4:dd:f2:0a:57:8b:60:99:67:
c9:02:d1:f8:7c:42:26:37:ee:d0:bb:e7:02:c8:78:ac:85:b3:
de:30:3f:5c:ba:2f:93:4f:c0:bb:09:7a:24:f8:cb:04:71:ba:
06:b8:91:13:35:e2:ca:7d:40:d1:29:b4:9f:fa:20:04:2f:be:
67:0a:b2:6d:a5:94:b3:19:7d:19:0e:90:6d:4a:92:88:22:32:
c9:38:54:8a:4e:96:6e:92:73:a5:8f:70:e2:e4:29:e1:02:0c:
de:ca:69:0a:4a:d2:ab:b4:cc:af:a1:3a:dc:ea:66:e5:60:ce:
c2:f0:86:78:a8:db:5d:f2:be:b3:06:23:82:74:d5:a1:59:41:
c5:15:44:88:c9:ea:5c:d9:0d:47:0f:17:d6:3c:d5:cb:59:dd:
6b:0e:dc:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVC1tgLsWcp9A9NaT0BoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2NkYmM0YjRkZTU0OTVlZTYxMzE3ZDJlNzM3YzJjM2Y3
ZjgzYmEwHhcNMjUwODA2MTcwMDU2WhcNMjUwODA3MTcwMDU2WjAzMTEwLwYDVQQD
Eyg5ZWJkODAxYTI3NTQ0NWIzNGRjMzNmZDdlOTVmNTc0MTEwMGNmZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssBYzurknpsWcoW1Q3XJ07iwZ9TO
tdqIaL27XXe7Y9dU3iVX+uEwj8oVFht1zkLR7x8kzYo44P0TsnFwrcRvv4vevZEN
UxdwPJB6lR6W6PpstoRp8tXPhTpSicqdo7+4pUcfeH5P8K291/Bh2ZRxpdvm+LqY
62KpvRbUocFyMQ944BnEOM6wfOvXfFfo/zPtA0yqYgOMeVdB9nNkZ1nEsx51fuXN
bBmsub26B4lU6lDC+P2TDe/J/diKRvR8iNrQN1cozgDgBuo5gkB6tjsbvMkUnAwB
e0Ff0k+rFsOFOT/HrqnWIlcN/kkj0sQDxtDrwWBgqB5lFHLMkCPkdIEZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ69gBonVEWzTcM/1+lfV0EQDP6MMB8GA1UdIwQY
MBaAFDE828S03lSV7mExfS5zfCw/f4O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQt
ZmU1YWVkNTlhN2Q5LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQtZmU1YWVkNTlhN2Q5
LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjcoJcXl
RSP1RGEj5oe8SceXYlJ9QytA+F0eZwghHIleVaavwplN8fAFIwURfjs5/BTHC4fE
53AFuXacyJmeK+i4f+c+2eVEYxQTmrTn1Gr9HkSLTFfnsa4rrFyDDjwYnQcd5N3y
CleLYJlnyQLR+HxCJjfu0LvnAsh4rIWz3jA/XLovk0/Auwl6JPjLBHG6BriREzXi
yn1A0Sm0n/ogBC++ZwqybaWUsxl9GQ6QbUqSiCIyyThUik6WbpJzpY9w4uQp4QIM
3sppCkrSq7TMr6E63Opm5WDOwvCGeKjbXfK+swYjgnTVoVlBxRVEiMnqXNkNRw8X
1jzVy1ndaw7cUg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:27 2025 by rpki-client