Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: QC1F0zSrDRrEuwbo03CPm8pYifFpNeXTHo1jnPL623Y=
Subject key identifier: AD:B8:FF:42:74:3C:7D:47:52:1A:27:B9:CD:C7:4D:CF:A3:BD:21:9A
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019894ED894C11A486F26060DEFB6AD4B6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 17:00:51 +0000
Manifest this update: Sun 10 Aug 2025 17:00:51 +0000
Manifest next update: Mon 11 Aug 2025 17:00:51 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: YLUgDuEoYdY/R5oN8KHQIpNwZebdSJeDagby+tUmKlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:89:4c:11:a4:86:f2:60:60:de:fb:6a:d4:b6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Aug 10 17:00:51 2025 GMT
Not After : Aug 11 17:00:51 2025 GMT
Subject: CN=adb8ff42743c7d47521a27b9cdc74dcfa3bd219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:c5:13:14:a7:19:61:a2:2d:92:7f:65:66:
65:05:e1:a9:f2:3e:9d:49:e6:06:a2:9a:02:8b:f2:
fa:7d:97:2f:52:83:c0:6a:1c:29:07:0b:3e:4e:88:
89:4b:37:22:20:9f:09:38:e5:d1:3b:97:38:15:18:
0f:fb:b7:5b:c7:bd:df:0b:c0:65:2c:40:db:b4:b3:
59:17:d3:0a:63:e7:92:3b:c9:42:79:7b:cc:6c:ac:
24:ed:03:c3:2c:8c:a4:95:72:95:f8:b8:24:6c:23:
7f:96:01:f6:86:f4:70:29:9a:72:8e:2c:84:34:79:
2f:ad:e7:1c:4b:41:96:16:31:de:27:a7:b7:10:04:
c5:09:9d:c6:92:59:fb:bc:96:a6:b8:f2:95:c1:d1:
f4:a5:73:fa:20:6c:d5:78:bc:5a:3a:fd:6e:55:54:
38:b6:a6:9f:9e:e3:d1:bb:5f:b3:18:87:d6:af:d0:
8e:3f:10:88:5f:71:0b:7b:f2:e5:6a:b8:43:a3:eb:
13:61:2c:70:3d:b2:c2:3f:ee:fe:71:bb:ca:dd:47:
f6:df:e9:a3:30:4b:af:cb:e3:fe:40:01:ee:e8:65:
43:08:4f:28:a9:d7:b1:3a:31:2d:40:6a:8c:89:28:
26:45:d6:51:50:2f:ff:c8:dc:32:9a:cc:34:35:dc:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:FF:42:74:3C:7D:47:52:1A:27:B9:CD:C7:4D:CF:A3:BD:21:9A
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:7b:1f:de:ae:ba:4d:bd:e8:78:c2:17:4d:5c:92:c0:9e:
d7:ee:3c:6e:e3:d6:6b:f0:14:43:f7:68:56:44:ae:c6:df:05:
fb:a8:43:69:c4:f6:46:50:33:20:0c:6b:20:32:6e:d5:c8:d5:
0d:28:d4:a4:94:53:2a:1c:17:0c:b3:0c:7d:6c:5a:e2:d4:fd:
ee:21:9c:40:c2:ca:d9:ff:1b:f3:06:87:64:a1:b3:5a:77:d1:
62:22:69:6b:ec:f2:a2:66:18:0d:72:2c:12:25:73:9e:89:84:
85:94:42:5f:62:6c:ba:62:f3:28:5d:18:2c:31:04:9d:72:c5:
d1:31:12:30:15:63:2a:70:5c:57:05:09:97:bd:60:10:3f:af:
e7:6c:86:39:06:9a:aa:b2:1f:73:0d:bb:46:79:82:51:ab:c5:
d2:02:99:87:db:e1:9b:36:80:83:ba:8d:33:12:76:67:35:ea:
ab:37:be:b4:44:c4:39:32:ed:7f:40:ef:8a:0a:ad:a7:1e:a6:
34:b6:31:d7:be:a1:6b:4e:ec:65:38:f6:c1:03:92:68:88:72:
cf:cf:fb:81:be:89:91:c6:d9:65:05:39:0a:26:fa:17:d6:e5:
b4:ba:d3:83:8b:80:da:10:fe:42:db:27:f8:6d:99:9c:40:b9:
3a:ad:ee:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiU7YlMEaSG8mBg3vtq1LbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl
NGM0Y2YwHhcNMjUwODEwMTcwMDUxWhcNMjUwODExMTcwMDUxWjAzMTEwLwYDVQQD
EyhhZGI4ZmY0Mjc0M2M3ZDQ3NTIxYTI3YjljZGM3NGRjZmEzYmQyMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/FExSnGWGiLZJ/ZWZlBeGp8j6d
SeYGopoCi/L6fZcvUoPAahwpBws+ToiJSzciIJ8JOOXRO5c4FRgP+7dbx73fC8Bl
LEDbtLNZF9MKY+eSO8lCeXvMbKwk7QPDLIyklXKV+LgkbCN/lgH2hvRwKZpyjiyE
NHkvreccS0GWFjHeJ6e3EATFCZ3Gkln7vJamuPKVwdH0pXP6IGzVeLxaOv1uVVQ4
tqafnuPRu1+zGIfWr9COPxCIX3ELe/LlarhDo+sTYSxwPbLCP+7+cbvK3Uf23+mj
MEuvy+P+QAHu6GVDCE8oqdexOjEtQGqMiSgmRdZRUC//yNwymsw0NdzsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK24/0J0PH1HUhonuc3HTc+jvSGaMB8GA1UdIwQY
MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt
MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky
LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxN7H96u
uk296HjCF01cksCe1+48buPWa/AUQ/doVkSuxt8F+6hDacT2RlAzIAxrIDJu1cjV
DSjUpJRTKhwXDLMMfWxa4tT97iGcQMLK2f8b8waHZKGzWnfRYiJpa+zyomYYDXIs
EiVznomEhZRCX2JsumLzKF0YLDEEnXLF0TESMBVjKnBcVwUJl71gED+v52yGOQaa
qrIfcw27RnmCUavF0gKZh9vhmzaAg7qNMxJ2ZzXqqze+tETEOTLtf0Dvigqtpx6m
NLYx176ha07sZTj2wQOSaIhyz8/7gb6JkcbZZQU5Cib6F9bltLrTg4uA2hD+Qtsn
+G2ZnEC5Oq3uzw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:21 2025 by rpki-client