Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: fCTE3SHD6BZt5VO5Xsh/zhpNZXDUv3cwFOfc2pA6C5A=
Subject key identifier: 9C:04:DC:12:F6:01:AC:BE:50:58:1C:B1:CC:E8:19:AC:5A:D2:D3:B9
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 0198548DB761735E60D81B41FD3495F58B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 11CC
Signing time: Tue 29 Jul 2025 05:00:30 +0000
Manifest this update: Tue 29 Jul 2025 05:00:30 +0000
Manifest next update: Wed 30 Jul 2025 05:00:30 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: dI0MFi89pcLN9xYQjVynD3gpjjss2TzSVB9ZHHWqJIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:b7:61:73:5e:60:d8:1b:41:fd:34:95:f5:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Jul 29 05:00:30 2025 GMT
Not After : Jul 30 05:00:30 2025 GMT
Subject: CN=9c04dc12f601acbe50581cb1cce819ac5ad2d3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:41:d0:21:f3:79:c0:a5:6e:12:55:4c:5f:
01:86:f0:a8:94:a4:48:ca:8b:92:70:e6:af:67:2c:
57:f3:fb:42:02:50:88:58:c9:f2:2b:9f:d6:a5:fb:
08:de:68:93:2e:2e:48:6e:b2:b9:ab:d4:40:de:03:
1d:dd:54:3f:e7:a3:62:1d:6d:f9:d3:44:b4:05:79:
cc:0c:fe:c8:e2:70:75:3f:63:94:ca:34:be:5b:56:
58:b2:20:8f:8d:6d:b9:28:30:89:2c:83:c3:18:5a:
7a:4f:87:b5:d9:26:dc:22:c3:34:48:e3:94:9e:3b:
45:74:c8:c6:51:84:f3:80:98:59:c5:0b:22:5a:2e:
ee:8f:87:73:19:d8:cf:af:9d:51:d5:4e:ca:c9:f3:
47:91:06:54:f2:30:b5:7b:f6:32:9a:fe:a6:25:fa:
6c:28:69:4d:38:dd:9a:76:95:4a:ed:73:1c:d0:e4:
a6:38:b8:c3:60:96:64:a5:3c:d3:31:db:09:08:07:
f5:a9:e6:64:ec:f4:eb:9a:ab:a2:30:d9:9b:94:80:
8e:f4:c9:5e:b8:8a:56:a4:4a:48:b9:34:0a:8b:80:
92:13:cd:ed:c7:85:b8:26:cc:7c:ee:bf:9f:ae:4c:
36:db:d2:6f:32:b8:14:28:0e:34:67:a1:55:73:53:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:DC:12:F6:01:AC:BE:50:58:1C:B1:CC:E8:19:AC:5A:D2:D3:B9
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:24:d2:0c:21:75:c5:29:58:fc:ec:d4:19:26:6a:b3:e4:0c:
81:59:86:5b:63:2c:d1:64:59:d4:ec:52:8d:4f:23:2a:83:ab:
59:d2:70:98:93:7f:a6:7a:85:a5:dd:c3:9f:85:4b:ee:6d:1b:
53:11:b2:98:49:8b:60:14:74:50:af:dc:c5:dc:83:10:db:63:
3f:db:6b:39:02:70:b6:cb:14:c7:bc:5e:66:69:ff:09:28:7d:
6b:98:cb:cc:7c:84:dc:82:2a:d8:5f:7c:26:0b:3b:27:ed:3c:
90:42:78:51:0e:2a:f8:ab:66:b6:b0:a8:9e:ee:64:77:31:f9:
ac:5c:9b:d1:cc:54:ee:a2:06:41:d9:f5:ff:f4:28:05:16:8f:
99:9e:19:e2:d5:78:b3:80:7d:19:3c:71:cd:bf:d8:61:1f:36:
d1:7f:38:35:ab:2c:22:73:0d:e2:61:83:7d:ed:49:e8:1c:df:
3c:23:f4:f8:67:56:0b:42:f0:b5:ac:04:c4:74:a3:52:0a:7a:
61:c2:ac:81:f6:20:aa:cf:88:db:92:f0:3b:6b:d7:3c:f0:0d:
5e:7f:d0:7d:03:31:63:56:75:26:52:ba:b8:98:a8:4a:2e:55:
28:e6:55:40:06:83:c6:cd:03:6e:b3:5f:86:bd:39:04:81:21:
67:25:c5:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjbdhc15g2BtB/TSV9YsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4
ZjZjNjQwHhcNMjUwNzI5MDUwMDMwWhcNMjUwNzMwMDUwMDMwWjAzMTEwLwYDVQQD
Eyg5YzA0ZGMxMmY2MDFhY2JlNTA1ODFjYjFjY2U4MTlhYzVhZDJkM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqStB0CHzecClbhJVTF8BhvColKRI
youScOavZyxX8/tCAlCIWMnyK5/WpfsI3miTLi5IbrK5q9RA3gMd3VQ/56NiHW35
00S0BXnMDP7I4nB1P2OUyjS+W1ZYsiCPjW25KDCJLIPDGFp6T4e12SbcIsM0SOOU
njtFdMjGUYTzgJhZxQsiWi7uj4dzGdjPr51R1U7KyfNHkQZU8jC1e/Yymv6mJfps
KGlNON2adpVK7XMc0OSmOLjDYJZkpTzTMdsJCAf1qeZk7PTrmquiMNmblICO9Mle
uIpWpEpIuTQKi4CSE83tx4W4Jsx87r+frkw229JvMrgUKA40Z6FVc1MYJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwE3BL2Aay+UFgcsczoGaxa0tO5MB8GA1UdIwQY
MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt
M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0
LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiTSDCF1
xSlY/OzUGSZqs+QMgVmGW2Ms0WRZ1OxSjU8jKoOrWdJwmJN/pnqFpd3Dn4VL7m0b
UxGymEmLYBR0UK/cxdyDENtjP9trOQJwtssUx7xeZmn/CSh9a5jLzHyE3IIq2F98
Jgs7J+08kEJ4UQ4q+KtmtrConu5kdzH5rFyb0cxU7qIGQdn1//QoBRaPmZ4Z4tV4
s4B9GTxxzb/YYR820X84NassInMN4mGDfe1J6BzfPCP0+GdWC0LwtawExHSjUgp6
YcKsgfYgqs+I25LwO2vXPPANXn/QfQMxY1Z1JlK6uJioSi5VKOZVQAaDxs0DbrNf
hr05BIEhZyXFuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:50:21 2025 by rpki-client