Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: gnC1cx7eji/vIIOJcvP+bT7+VhQ7VnmAhhFd0H0hhYM=
Subject key identifier: 1E:AC:AA:32:08:87:59:EB:14:47:F5:05:E5:AD:BD:7A:91:8A:F3:EC
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019874F4B745A5BF2477DA95400354F66031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 07C9
Signing time: Mon 04 Aug 2025 12:00:51 +0000
Manifest this update: Mon 04 Aug 2025 12:00:51 +0000
Manifest next update: Tue 05 Aug 2025 12:00:51 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: 9ruTTeKeDoLpPSI2DaXBKU8mu+9JA5lnXULFDXyJ3HM=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b7:45:a5:bf:24:77:da:95:40:03:54:f6:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Aug 4 12:00:51 2025 GMT
Not After : Aug 5 12:00:51 2025 GMT
Subject: CN=1eacaa32088759eb1447f505e5adbd7a918af3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:0f:31:2b:67:f1:f0:78:d5:56:5c:3a:89:
09:bc:aa:45:6d:0a:97:d6:c0:9c:95:d0:95:83:49:
86:9a:73:72:cc:51:b2:71:22:e3:95:a7:01:77:86:
57:2e:48:78:27:52:b2:8f:74:55:7a:91:ca:3c:ae:
5e:49:0a:76:6c:0f:3b:9f:60:b0:c1:ff:f6:09:0a:
b0:5f:d9:d7:51:71:48:d9:d2:4b:3b:de:98:7a:11:
30:08:ba:f8:57:45:60:d6:32:39:0c:0b:48:42:7f:
19:91:b9:f4:f5:ca:12:f3:24:ca:c0:a2:b7:b6:8c:
d3:5c:ab:d2:f3:49:42:62:b2:78:2d:ba:39:99:7b:
8a:33:4e:20:a7:bc:b8:89:25:f4:95:82:ec:3d:0e:
bc:dc:3d:47:9e:d2:ff:1a:42:87:7f:c9:46:04:02:
5f:3e:87:bd:c6:6e:c0:89:c6:7e:39:8f:0c:73:f2:
35:b1:e4:7d:52:31:ae:36:cc:ae:02:02:55:95:9b:
06:4e:97:72:75:2e:68:db:a1:ce:a4:90:be:31:fa:
91:15:37:75:52:1e:70:57:00:ce:25:31:7f:bc:4d:
f0:1a:7c:be:2d:b4:3b:90:9b:1e:d2:6c:cc:20:ee:
23:f8:f9:3c:ab:aa:c1:08:57:f6:79:08:9a:52:e0:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AC:AA:32:08:87:59:EB:14:47:F5:05:E5:AD:BD:7A:91:8A:F3:EC
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:05:a7:ed:06:68:b1:4d:95:ab:bb:d9:81:5c:f0:4e:45:
ea:00:83:b1:da:e8:ec:e1:c0:18:b3:4a:6d:25:1c:c7:e9:ad:
eb:b5:97:f4:67:49:97:73:ee:3d:a2:94:79:30:61:60:0a:23:
10:bc:ef:fc:1e:8e:c7:7e:77:68:8f:41:88:3a:9d:6b:26:0b:
bd:ff:25:e1:1d:c5:68:10:30:ec:68:95:53:5c:be:11:63:64:
a0:84:c5:e7:4d:26:de:6c:93:a0:07:a4:6c:d0:78:1c:83:55:
66:8c:e5:d2:ac:4e:fe:01:ba:3f:f9:59:20:79:de:94:1b:1e:
3a:d7:ec:a0:4c:7a:36:9b:56:ab:b6:f0:6c:02:7a:ed:64:32:
42:10:6a:dd:df:7a:02:3f:a5:5e:9f:98:c0:df:fc:96:4e:d6:
bb:cf:09:92:18:6c:f7:c1:61:e0:e8:3c:9d:1b:04:45:8b:5a:
e1:26:19:03:c4:1a:a8:4a:83:5f:74:00:1f:d8:13:54:c5:75:
6d:83:d4:a9:c1:74:3e:cf:92:e5:d2:03:3a:de:37:b1:b5:a7:
7d:6c:ca:4c:1b:d0:61:2c:76:98:25:ec:4a:4c:92:85:92:e1:
07:5e:61:ba:70:58:a2:1f:87:b7:11:cc:1f:48:7d:65:ca:69:
15:8a:9a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09LdFpb8kd9qVQANU9mAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz
MzZkZDAwHhcNMjUwODA0MTIwMDUxWhcNMjUwODA1MTIwMDUxWjAzMTEwLwYDVQQD
EygxZWFjYWEzMjA4ODc1OWViMTQ0N2Y1MDVlNWFkYmQ3YTkxOGFmM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF0PMStn8fB41VZcOokJvKpFbQqX
1sCcldCVg0mGmnNyzFGycSLjlacBd4ZXLkh4J1Kyj3RVepHKPK5eSQp2bA87n2Cw
wf/2CQqwX9nXUXFI2dJLO96YehEwCLr4V0Vg1jI5DAtIQn8Zkbn09coS8yTKwKK3
tozTXKvS80lCYrJ4Lbo5mXuKM04gp7y4iSX0lYLsPQ683D1HntL/GkKHf8lGBAJf
Poe9xm7AicZ+OY8Mc/I1seR9UjGuNsyuAgJVlZsGTpdydS5o26HOpJC+MfqRFTd1
Uh5wVwDOJTF/vE3wGny+LbQ7kJse0mzMIO4j+Pk8q6rBCFf2eQiaUuDdHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6sqjIIh1nrFEf1BeWtvXqRivPsMB8GA1UdIwQY
MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt
OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw
LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIUFp+0G
aLFNlau72YFc8E5F6gCDsdro7OHAGLNKbSUcx+mt67WX9GdJl3PuPaKUeTBhYAoj
ELzv/B6Ox353aI9BiDqdayYLvf8l4R3FaBAw7GiVU1y+EWNkoITF500m3myToAek
bNB4HINVZozl0qxO/gG6P/lZIHnelBseOtfsoEx6NptWq7bwbAJ67WQyQhBq3d96
Aj+lXp+YwN/8lk7Wu88Jkhhs98Fh4Og8nRsERYta4SYZA8QaqEqDX3QAH9gTVMV1
bYPUqcF0Ps+S5dIDOt43sbWnfWzKTBvQYSx2mCXsSkyShZLhB15hunBYoh+HtxHM
H0h9ZcppFYqaSw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:41 2025 by rpki-client