
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: TrqqNyVcYNbf9aZY0P5g4myIJhlLBZjPxi9m2m2W6ds=
Subject key identifier: E2:F0:C0:E2:04:23:A6:6C:8E:CD:1C:9B:B5:DA:7E:16:F9:39:B4:D0
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 019883C349DB381DC2D4C7E934FDCCBB4285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1580
Signing time: Thu 07 Aug 2025 09:01:10 +0000
Manifest this update: Thu 07 Aug 2025 09:01:10 +0000
Manifest next update: Fri 08 Aug 2025 09:01:10 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: RgKhxucI/kO7TCsDRuHPIOE/U8TT1hh+a72bCla8IPo=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:49:db:38:1d:c2:d4:c7:e9:34:fd:cc:bb:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Aug 7 09:01:10 2025 GMT
Not After : Aug 8 09:01:10 2025 GMT
Subject: CN=e2f0c0e20423a66c8ecd1c9bb5da7e16f939b4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:fc:9c:51:54:d0:9d:1d:58:46:43:76:07:
1e:ff:70:e8:c3:86:35:37:ad:ca:91:2e:31:12:2c:
7e:9f:67:22:ef:40:73:12:7f:fe:6f:b1:b5:52:0a:
a3:f0:48:20:07:f2:49:db:6d:43:c4:8b:5d:c7:03:
85:94:ce:40:7c:48:42:85:f6:c4:27:4d:9b:6d:21:
77:30:9a:c5:2a:27:24:92:cb:b0:eb:1e:d3:0e:2f:
d1:00:5b:63:cc:89:f1:fb:4e:12:ab:e1:44:47:75:
6d:21:49:be:7f:7f:10:e1:f1:0e:f6:ed:6a:6b:78:
7f:7f:11:cc:87:dd:15:ca:52:c1:0b:3c:5c:b2:dd:
ca:68:3f:65:c7:05:9e:d2:24:15:b9:25:0c:d2:62:
b9:26:5b:52:d0:72:aa:6d:ee:d9:70:58:eb:9d:6b:
34:7d:a3:f9:dc:3d:1e:27:b6:d7:7b:3f:06:47:cd:
54:b4:e5:5b:44:d9:47:a0:61:36:47:5b:55:b2:a8:
3c:36:b0:6b:9b:70:73:64:a5:8b:b4:e0:8a:8b:07:
e7:11:df:cd:04:12:a7:3a:bf:40:98:bf:4e:f0:59:
c3:fb:cc:a7:52:54:f5:0e:6e:90:44:d2:d8:59:fc:
07:11:d9:06:73:18:33:f2:e9:97:62:9c:2c:92:76:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F0:C0:E2:04:23:A6:6C:8E:CD:1C:9B:B5:DA:7E:16:F9:39:B4:D0
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:be:1c:66:84:5d:33:61:89:50:8d:51:a0:2b:13:91:51:e8:
54:e4:3b:25:0e:aa:42:04:5b:3c:5f:24:b1:53:3f:2d:92:8e:
23:70:c7:dc:94:64:28:52:8b:d3:2c:05:4b:36:e6:a2:0b:17:
de:09:1f:dc:e7:e5:dc:43:25:b9:dd:1a:c9:1f:01:a9:b1:12:
72:82:ff:50:c9:ff:da:55:23:ef:85:8c:7a:5e:97:13:76:fa:
80:a3:e8:7a:4f:5d:d0:28:c7:02:26:8c:af:0e:f5:ca:4a:d6:
e3:a8:43:e9:30:cf:50:d5:92:3c:e6:47:dd:5e:69:c2:a7:05:
cd:7f:72:82:1f:75:e3:5a:ef:10:d6:38:36:27:af:87:d9:f0:
37:02:a4:7f:bd:ce:9e:16:3e:b9:48:02:00:06:91:9f:c4:c2:
1e:b0:0e:56:90:bc:b1:5c:64:ae:de:60:d3:a4:c3:84:ef:5c:
95:f8:90:bd:92:90:72:88:4a:5b:ee:d0:ce:d2:f8:da:d2:35:
c5:07:44:11:ee:cc:5e:1a:2c:1a:34:e3:ce:d6:f5:4f:ff:22:
f2:6e:80:46:af:a4:8a:46:43:d4:5a:b1:d5:b4:c1:d5:a1:4f:
17:32:b4:98:bf:d3:fd:8e:46:1f:27:09:d0:35:f1:3f:9f:49:
48:eb:30:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw0nbOB3C1MfpNP3Mu0KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGIyMjU0NzFmMmQ2ZTQxMDYwYjM0MTg1NzI1NDg1NDgx
MDE0YjgwHhcNMjUwODA3MDkwMTEwWhcNMjUwODA4MDkwMTEwWjAzMTEwLwYDVQQD
EyhlMmYwYzBlMjA0MjNhNjZjOGVjZDFjOWJiNWRhN2UxNmY5MzliNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIL8nFFU0J0dWEZDdgce/3Dow4Y1
N63KkS4xEix+n2ci70BzEn/+b7G1Ugqj8EggB/JJ221DxItdxwOFlM5AfEhChfbE
J02bbSF3MJrFKickksuw6x7TDi/RAFtjzInx+04Sq+FER3VtIUm+f38Q4fEO9u1q
a3h/fxHMh90VylLBCzxcst3KaD9lxwWe0iQVuSUM0mK5JltS0HKqbe7ZcFjrnWs0
faP53D0eJ7bXez8GR81UtOVbRNlHoGE2R1tVsqg8NrBrm3BzZKWLtOCKiwfnEd/N
BBKnOr9AmL9O8FnD+8ynUlT1Dm6QRNLYWfwHEdkGcxgz8umXYpwsknbuNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLwwOIEI6Zsjs0cm7Xafhb5ObTQMB8GA1UdIwQY
MBaAFOvbIlRx8tbkEGCzQYVyVIVIEBS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYt
MDlhNWU4ZDk2MGRkLzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYtMDlhNWU4ZDk2MGRk
LzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ74cZoRd
M2GJUI1RoCsTkVHoVOQ7JQ6qQgRbPF8ksVM/LZKOI3DH3JRkKFKL0ywFSzbmogsX
3gkf3Ofl3EMlud0ayR8BqbEScoL/UMn/2lUj74WMel6XE3b6gKPoek9d0CjHAiaM
rw71ykrW46hD6TDPUNWSPOZH3V5pwqcFzX9ygh9141rvENY4Nievh9nwNwKkf73O
nhY+uUgCAAaRn8TCHrAOVpC8sVxkrt5g06TDhO9clfiQvZKQcohKW+7QztL42tI1
xQdEEe7MXhosGjTjztb1T/8i8m6ARq+kikZD1Fqx1bTB1aFPFzK0mL/T/Y5GHycJ
0DXxP59JSOswng==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:40:23 2025 by rpki-client