Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: r8ggx2TwYPbMkzgluyZ2URNm8MhWyt2ilo1tRYJ2mLw=
Subject key identifier: 37:33:EA:F5:E3:83:A1:17:ED:E7:2A:00:FE:A0:1D:A1:A7:25:9E:26
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 01984AE57B33CD2A9D7B4B2EEE5A50499860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: 9nG/hzCypTHD/8BA6PAwWqKnPGhTupWsRn4jI1CTG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7b:33:cd:2a:9d:7b:4b:2e:ee:5a:50:49:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=3733eaf5e383a117ede72a00fea01da1a7259e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:9b:7e:6d:15:bb:13:93:93:69:3a:ed:a8:
57:ad:27:43:5a:3d:7e:06:29:cb:ce:48:f5:b2:f1:
0f:54:17:7c:bf:a4:e9:80:79:ba:9f:b1:f0:92:96:
2d:d1:55:ff:97:b1:29:b4:bc:fd:f2:5d:1a:25:d5:
e9:c5:07:2d:d1:f6:0b:05:53:6b:f9:f6:6f:e0:e3:
2a:18:21:92:2f:ad:d4:2a:18:00:07:36:6c:ba:dd:
9e:7f:5b:2d:98:d0:dc:be:47:2d:7a:b1:e2:f7:d8:
c7:4f:f3:dc:09:3d:70:f0:a6:7a:76:ce:bf:40:41:
3e:fe:61:8d:94:f7:b2:24:21:2d:1c:77:d4:87:28:
05:1e:43:2a:50:55:57:1a:ca:e0:1d:8f:82:c5:54:
bf:48:ad:d8:ac:00:3f:8d:42:f5:04:af:94:ed:7d:
db:65:9d:87:19:81:ed:f6:44:e5:90:85:dd:35:6c:
52:e0:c9:ee:b5:3b:11:fd:23:f9:1b:f2:16:35:a9:
ea:44:f5:f0:fe:39:23:37:d8:88:ab:da:c3:7c:fb:
1e:7c:82:d0:54:26:12:62:b5:e1:29:01:87:cd:6c:
cf:9a:94:98:5a:67:22:29:1a:48:b9:67:59:55:e1:
0f:4b:41:16:80:f1:ba:99:52:bd:29:0f:3e:d6:a2:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:EA:F5:E3:83:A1:17:ED:E7:2A:00:FE:A0:1D:A1:A7:25:9E:26
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:7d:dd:a0:e2:63:a8:d9:9b:77:a9:e4:40:7c:78:4d:4f:
0f:01:20:82:75:7e:41:9c:27:c2:d1:88:51:cd:d3:0c:be:30:
aa:79:a5:f3:3f:a6:dc:0b:10:f5:a0:01:b2:a0:11:da:fc:61:
74:65:a7:3d:b3:0d:5e:b5:08:99:31:7d:d1:74:57:f7:12:5d:
45:26:7a:3b:48:ef:ec:a3:8f:c8:42:4b:21:ab:70:3e:6e:18:
c8:14:62:89:c9:93:94:97:d0:8d:9a:d7:ee:86:1d:04:95:32:
24:f4:91:09:d3:5a:7a:bc:97:d8:7c:a7:1f:31:65:d6:fe:01:
c4:c2:87:10:88:74:0e:cd:b2:f0:31:80:00:d3:34:90:b0:c0:
23:35:64:ad:93:27:6f:e8:ba:ce:1f:57:44:6c:4d:f3:8e:60:
04:45:58:dd:f3:d0:a7:e5:16:4b:11:35:62:8f:de:c2:0a:ca:
fb:58:c4:c0:75:14:c9:b9:cf:d3:03:26:61:f1:5d:27:fc:ee:
93:5d:a1:f6:d3:71:e8:40:e9:c0:c8:57:99:29:1a:58:c6:c2:
08:ec:83:d1:fe:af:b3:3d:ea:11:25:13:16:a2:25:0f:84:9b:
50:c3:48:26:fd:35:04:b1:7b:a9:40:84:14:b4:4f:20:2a:03:
c1:01:72:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XszzSqde0su7lpQSZhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjUwNzI3MDgwMDA5WhcNMjUwNzI4MDgwMDA5WjAzMTEwLwYDVQQD
EygzNzMzZWFmNWUzODNhMTE3ZWRlNzJhMDBmZWEwMWRhMWE3MjU5ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKmbfm0VuxOTk2k67ahXrSdDWj1+
BinLzkj1svEPVBd8v6TpgHm6n7HwkpYt0VX/l7EptLz98l0aJdXpxQct0fYLBVNr
+fZv4OMqGCGSL63UKhgABzZsut2ef1stmNDcvkcterHi99jHT/PcCT1w8KZ6ds6/
QEE+/mGNlPeyJCEtHHfUhygFHkMqUFVXGsrgHY+CxVS/SK3YrAA/jUL1BK+U7X3b
ZZ2HGYHt9kTlkIXdNWxS4MnutTsR/SP5G/IWNanqRPXw/jkjN9iIq9rDfPsefILQ
VCYSYrXhKQGHzWzPmpSYWmciKRpIuWdZVeEPS0EWgPG6mVK9KQ8+1qLBPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcz6vXjg6EX7ecqAP6gHaGnJZ4mMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9x93aDi
Y6jZm3ep5EB8eE1PDwEggnV+QZwnwtGIUc3TDL4wqnml8z+m3AsQ9aABsqAR2vxh
dGWnPbMNXrUImTF90XRX9xJdRSZ6O0jv7KOPyEJLIatwPm4YyBRiicmTlJfQjZrX
7oYdBJUyJPSRCdNaeryX2HynHzFl1v4BxMKHEIh0Ds2y8DGAANM0kLDAIzVkrZMn
b+i6zh9XRGxN845gBEVY3fPQp+UWSxE1Yo/ewgrK+1jEwHUUybnP0wMmYfFdJ/zu
k12h9tNx6EDpwMhXmSkaWMbCCOyD0f6vsz3qESUTFqIlD4SbUMNIJv01BLF7qUCE
FLRPICoDwQFyDw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:46 2025 by rpki-client