Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: YZWZGp0ALSjORYEfb1dnuZDLusB2ZK9YdrcjQiz4dgs=
Subject key identifier: A3:58:1C:6E:19:AC:45:83:69:35:38:F4:31:3B:0D:FB:F1:F2:01:FD
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019848C04EE7FB4A725144164B8019D98DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 22:00:19 +0000
Manifest this update: Sat 26 Jul 2025 22:00:19 +0000
Manifest next update: Sun 27 Jul 2025 22:00:19 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: I/izRpS5flanIM6/BE5YAKSGoh0EwxjwDGQutrkuq3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4e:e7:fb:4a:72:51:44:16:4b:80:19:d9:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jul 26 22:00:19 2025 GMT
Not After : Jul 27 22:00:19 2025 GMT
Subject: CN=a3581c6e19ac4583693538f4313b0dfbf1f201fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:b8:b9:b4:01:3a:e9:60:c5:57:06:c8:ff:
3c:ce:89:ef:bb:ba:56:16:20:fd:88:e9:c8:70:c1:
51:ac:07:dd:f7:6d:98:20:71:84:75:eb:60:eb:4f:
23:26:35:a5:db:93:29:1c:9c:f8:ed:d4:48:f8:63:
4e:e4:ba:c3:f6:59:eb:77:72:4e:08:98:ea:67:7f:
9c:f4:01:e0:ee:05:1c:58:79:8d:ce:9b:27:65:6a:
ff:dd:a3:1b:0a:cd:bf:f1:2c:23:14:59:a1:d4:be:
b2:d0:c0:08:d9:c3:bf:ca:20:15:0e:7e:47:a1:57:
07:ce:9d:ad:b1:8d:78:cf:15:35:7f:92:df:46:a2:
e4:5e:42:f6:b8:ba:39:87:c0:25:3c:25:e1:cb:88:
d8:77:22:1e:c9:2f:74:76:4d:a9:7b:42:98:64:fc:
fd:e6:15:67:98:e3:0e:fc:0c:9c:e3:63:6f:ff:a4:
e6:10:6c:99:98:6a:b6:87:44:5c:bf:7f:95:43:7e:
04:e4:2e:81:f7:47:1b:0c:76:bc:81:9b:b2:25:8c:
98:28:ef:8c:b4:74:4d:d9:a0:05:e6:b7:8b:3d:e8:
eb:b0:12:4b:1f:47:ad:84:30:4e:bb:6c:a4:73:46:
55:81:f6:85:c5:df:23:d7:36:df:5d:51:bf:2c:89:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:1C:6E:19:AC:45:83:69:35:38:F4:31:3B:0D:FB:F1:F2:01:FD
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fa:51:2f:09:44:6d:54:5f:03:1d:19:18:e6:75:e6:2b:ee:
cb:5f:05:58:e0:49:e4:48:ef:e0:12:ca:0b:84:2b:b5:74:2c:
41:4a:c6:69:e3:9a:fe:82:86:ae:46:f5:5c:64:b4:e3:5f:01:
e1:3c:be:28:8a:e4:3e:17:dd:36:05:5b:3d:e4:5b:15:04:b8:
bd:85:d3:56:cb:1f:ef:4c:8b:b0:b9:84:79:55:e1:e4:0f:0a:
7c:5b:6f:f4:e3:bf:d0:e1:1b:ee:0e:3c:24:c3:90:d6:4a:09:
de:00:7e:8d:be:56:9e:5e:a4:45:da:08:b8:a9:f9:3f:9f:bf:
6f:2b:44:90:95:50:20:8f:8f:40:57:96:2f:2d:ba:40:1d:77:
69:d7:f7:08:94:fe:6b:ce:db:2b:9e:7d:b9:36:21:04:9e:84:
63:5d:f2:1a:96:10:ef:05:18:31:5b:72:a3:b5:78:ce:a5:60:
8e:72:19:f9:16:a1:b5:10:af:4e:5a:9e:40:71:ff:79:bf:ed:
d8:a2:c2:b2:bb:68:c1:bf:ac:05:77:d9:63:b1:41:39:fb:8c:
1a:86:52:0c:0a:29:34:53:22:cd:ed:d4:e0:8b:94:1a:e5:06:
f5:ef:2b:0f:51:5e:04:54:8e:2f:f1:b2:67:8e:6c:f3:12:51:
9b:ca:f7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwE7n+0pyUUQWS4AZ2Y3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm
NDgwMWUwHhcNMjUwNzI2MjIwMDE5WhcNMjUwNzI3MjIwMDE5WjAzMTEwLwYDVQQD
EyhhMzU4MWM2ZTE5YWM0NTgzNjkzNTM4ZjQzMTNiMGRmYmYxZjIwMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FG4ubQBOulgxVcGyP88zonvu7pW
FiD9iOnIcMFRrAfd922YIHGEdetg608jJjWl25MpHJz47dRI+GNO5LrD9lnrd3JO
CJjqZ3+c9AHg7gUcWHmNzpsnZWr/3aMbCs2/8SwjFFmh1L6y0MAI2cO/yiAVDn5H
oVcHzp2tsY14zxU1f5LfRqLkXkL2uLo5h8AlPCXhy4jYdyIeyS90dk2pe0KYZPz9
5hVnmOMO/Ayc42Nv/6TmEGyZmGq2h0Rcv3+VQ34E5C6B90cbDHa8gZuyJYyYKO+M
tHRN2aAF5reLPejrsBJLH0ethDBOu2ykc0ZVgfaFxd8j1zbfXVG/LIn2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNYHG4ZrEWDaTU49DE7Dfvx8gH9MB8GA1UdIwQY
MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt
ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi
LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPpRLwlE
bVRfAx0ZGOZ15ivuy18FWOBJ5Ejv4BLKC4QrtXQsQUrGaeOa/oKGrkb1XGS0418B
4Ty+KIrkPhfdNgVbPeRbFQS4vYXTVssf70yLsLmEeVXh5A8KfFtv9OO/0OEb7g48
JMOQ1koJ3gB+jb5Wnl6kRdoIuKn5P5+/bytEkJVQII+PQFeWLy26QB13adf3CJT+
a87bK559uTYhBJ6EY13yGpYQ7wUYMVtyo7V4zqVgjnIZ+RahtRCvTlqeQHH/eb/t
2KLCsrtowb+sBXfZY7FBOfuMGoZSDAopNFMize3U4IuUGuUG9e8rD1FeBFSOL/Gy
Z45s8xJRm8r3/g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:39:46 2025 by rpki-client