Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: cIpabGccp55Gq2wKu/XqdDehvYjl11/G/z/xtHjxAPU=
Subject key identifier: D6:AA:0F:91:E4:C4:D3:F3:D4:D2:1D:16:14:E4:DE:FF:3D:5E:A6:74
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 0199228CF1BD1EB9F22DD18AA1E1D3E25DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0574
Signing time: Sun 07 Sep 2025 05:01:26 +0000
Manifest this update: Sun 07 Sep 2025 05:01:26 +0000
Manifest next update: Mon 08 Sep 2025 05:01:26 +0000
Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: FqbhK8KKhRzBMSj/hoUXE0/Q8WYap4u031BSDnsKuYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f1:bd:1e:b9:f2:2d:d1:8a:a1:e1:d3:e2:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Sep 7 05:01:26 2025 GMT
Not After : Sep 8 05:01:26 2025 GMT
Subject: CN=d6aa0f91e4c4d3f3d4d21d1614e4deff3d5ea674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:85:d8:de:20:f7:6c:f1:6e:3d:e7:9c:03:
bf:7d:4d:e9:5c:d4:63:9d:4c:75:e6:18:a8:06:2d:
b6:fc:c2:65:91:79:76:84:0b:4a:65:80:92:7b:1c:
37:11:b8:01:42:de:2c:ee:be:ab:6a:b3:37:40:1d:
b2:77:3f:50:9a:6d:e9:23:22:98:d6:c3:6d:b4:d4:
0e:53:87:82:52:d6:c4:4c:49:32:59:ba:09:c4:15:
fc:e2:41:df:0f:8b:57:d2:5f:55:b6:cf:11:52:50:
85:f5:28:97:13:70:9c:10:39:16:f9:2b:78:1c:05:
5a:61:4d:f4:ff:40:3a:35:71:e6:d5:d1:53:57:18:
cb:16:09:b3:75:ed:2c:fd:ac:d9:0f:a0:82:f8:b6:
8a:20:2a:54:9e:a1:7d:c4:fb:9a:4f:f5:ad:42:85:
29:fa:ec:1b:11:8c:40:1f:73:3f:81:ad:a8:4d:f1:
1c:01:5b:1d:85:e8:99:ba:fc:20:e2:07:02:0a:02:
8b:8a:0a:b9:d7:30:89:b6:63:71:19:d2:49:4e:d7:
fa:52:e2:fd:4b:a9:d5:a1:b2:57:3a:49:22:1e:5e:
fe:08:6d:87:1c:64:64:16:b4:2b:1f:b6:de:68:a7:
2a:c8:c6:ef:56:37:25:c5:aa:59:49:bc:50:9b:14:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:0F:91:E4:C4:D3:F3:D4:D2:1D:16:14:E4:DE:FF:3D:5E:A6:74
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:a0:30:2a:95:2d:8e:3b:28:e8:61:17:43:c7:e9:4a:88:
55:8f:87:83:46:aa:1e:38:18:22:58:a9:75:78:93:3c:9f:85:
36:ce:eb:27:f6:f4:58:6a:f2:9f:e5:ec:7e:48:1b:de:b4:5c:
8b:83:80:3a:09:f9:6f:f3:f9:5a:e8:b2:9a:3a:6b:e2:e5:e7:
af:21:02:65:71:0d:a0:07:50:9b:b9:f9:af:66:b0:c1:55:e7:
1d:cf:a3:b5:b7:93:0a:7f:50:a6:0b:39:5e:8c:bd:95:93:f6:
92:e2:b0:d9:02:bc:15:88:83:9e:30:60:81:a9:3f:35:97:9e:
c1:21:3e:d7:33:52:ac:96:c7:81:c5:00:fb:36:bd:63:23:ae:
09:91:17:43:f9:6d:23:32:ed:26:5f:b1:9b:e1:a5:1e:c5:b4:
dd:46:4d:34:c6:da:88:c1:14:0e:8b:66:4f:47:d3:d9:e0:c4:
59:34:ca:cd:d5:fe:fb:9c:5f:00:5d:9a:31:c4:3e:1c:b0:d3:
83:9f:0f:5a:e9:94:e1:4a:6a:64:6c:e8:5d:fd:b3:9c:b7:c7:
0f:45:50:07:3e:ca:1c:44:04:a3:38:4a:85:e3:8b:e8:e0:cb:
b4:84:8f:db:18:de:09:62:9d:20:f3:79:a9:86:94:2a:57:67:
19:23:a3:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijPG9HrnyLdGKoeHT4l3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4
NWU5ZjcwHhcNMjUwOTA3MDUwMTI2WhcNMjUwOTA4MDUwMTI2WjAzMTEwLwYDVQQD
EyhkNmFhMGY5MWU0YzRkM2YzZDRkMjFkMTYxNGU0ZGVmZjNkNWVhNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6F2N4g92zxbj3nnAO/fU3pXNRj
nUx15hioBi22/MJlkXl2hAtKZYCSexw3EbgBQt4s7r6rarM3QB2ydz9Qmm3pIyKY
1sNttNQOU4eCUtbETEkyWboJxBX84kHfD4tX0l9Vts8RUlCF9SiXE3CcEDkW+St4
HAVaYU30/0A6NXHm1dFTVxjLFgmzde0s/azZD6CC+LaKICpUnqF9xPuaT/WtQoUp
+uwbEYxAH3M/ga2oTfEcAVsdheiZuvwg4gcCCgKLigq51zCJtmNxGdJJTtf6UuL9
S6nVobJXOkkiHl7+CG2HHGRkFrQrH7beaKcqyMbvVjclxapZSbxQmxSzHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaqD5HkxNPz1NIdFhTk3v89XqZ0MB8GA1UdIwQY
MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt
MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0
LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHugMCqV
LY47KOhhF0PH6UqIVY+Hg0aqHjgYIlipdXiTPJ+FNs7rJ/b0WGryn+Xsfkgb3rRc
i4OAOgn5b/P5Wuiymjpr4uXnryECZXENoAdQm7n5r2awwVXnHc+jtbeTCn9Qpgs5
Xoy9lZP2kuKw2QK8FYiDnjBggak/NZeewSE+1zNSrJbHgcUA+za9YyOuCZEXQ/lt
IzLtJl+xm+GlHsW03UZNNMbaiMEUDotmT0fT2eDEWTTKzdX++5xfAF2aMcQ+HLDT
g58PWumU4UpqZGzoXf2znLfHD0VQBz7KHEQEozhKheOL6ODLtISP2xjeCWKdIPN5
qYaUKldnGSOjjw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:32 2025 by rpki-client