Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: FHxS/oHf8Keu57H6RoiqlSrMdDGXkfJuHuc0xIoIkac=
Subject key identifier: FA:EF:44:6A:E8:9A:87:6E:66:08:30:28:F3:3D:31:ED:59:3A:4A:10
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0199239F97508BBC10FFD4BCE3A9E348C71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0994
Signing time: Sun 07 Sep 2025 10:01:25 +0000
Manifest this update: Sun 07 Sep 2025 10:01:25 +0000
Manifest next update: Mon 08 Sep 2025 10:01:25 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: 6vWWhifRaFA6iO8r6ULpcAsZ087RjkRjr/f9OJQQMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:97:50:8b:bc:10:ff:d4:bc:e3:a9:e3:48:c7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Sep 7 10:01:25 2025 GMT
Not After : Sep 8 10:01:25 2025 GMT
Subject: CN=faef446ae89a876e66083028f33d31ed593a4a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:c7:9c:1d:cd:e1:b3:8f:c8:c4:89:b0:3c:
97:4e:2d:49:f0:be:54:f4:42:7d:9a:49:e8:2e:67:
33:28:13:09:e4:9d:e3:ee:26:34:f2:f8:c7:1e:5d:
54:5f:97:79:a5:cc:4a:7f:c0:45:69:bc:b5:fb:2a:
ea:b0:b4:fe:c0:2c:0f:2e:06:3a:c8:af:32:67:f6:
b4:cf:34:00:ba:6d:c0:ba:f4:77:cd:f8:a1:2d:62:
42:51:9a:73:bd:dc:10:60:33:b8:04:93:a9:28:24:
3e:75:65:d7:3f:c0:eb:83:92:ca:ff:af:1a:1b:4e:
ef:2b:e6:4a:0c:2e:41:04:b7:9b:3c:3e:b8:03:e6:
1c:e8:69:a2:16:6b:59:b1:57:ca:00:e5:b4:4c:fe:
49:e0:53:ee:a6:c3:4c:c2:bf:be:34:2d:da:3e:66:
a4:b3:be:35:20:f8:43:cf:38:c3:bd:41:98:3f:0d:
be:43:ee:2a:4f:04:9c:0a:c3:f8:b4:6e:12:c8:2d:
60:0f:3e:7d:92:5d:ad:26:cf:15:87:03:0c:59:35:
b6:27:2c:2e:0c:69:99:3e:25:ed:51:ab:d8:5b:f3:
88:ef:ef:9a:c2:a7:23:55:99:42:dc:14:9f:40:ff:
80:82:28:93:da:9a:fb:4f:09:c8:26:38:0e:13:10:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:44:6A:E8:9A:87:6E:66:08:30:28:F3:3D:31:ED:59:3A:4A:10
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d0:5c:2f:ba:59:1a:e9:a7:91:ba:aa:5f:3f:eb:44:f9:72:
c2:fc:d4:1b:5f:10:cf:bc:8d:81:83:84:7b:1d:4a:46:09:c2:
1a:8f:be:c9:0b:a9:71:ac:69:44:21:14:57:f1:92:32:8e:20:
19:f5:f8:93:ad:f0:1a:08:22:a5:35:c9:35:63:5e:80:82:ee:
c8:bc:e0:66:7b:5a:45:c9:16:38:dd:51:8c:53:d0:45:ec:1e:
d7:e3:30:4a:5e:d8:b6:f6:47:60:bb:81:75:cd:5a:44:0b:fa:
02:36:cf:d4:73:c9:4d:66:80:0a:8f:0c:57:ac:b9:5b:ab:f4:
00:20:53:4d:3c:78:e5:25:fe:37:b3:b2:d6:6a:2a:8b:1f:ff:
8e:f7:05:76:30:ab:f9:31:3a:56:f8:e5:78:6d:7f:e4:15:08:
f9:5b:dc:4f:a1:dc:a2:f2:a1:25:25:af:0f:63:ac:ea:6f:5e:
2a:22:d6:91:3f:32:f8:2f:e9:ba:f8:82:b5:92:0c:ae:b1:d5:
58:93:a6:f1:4c:8f:46:7e:79:6e:a1:92:85:44:39:a0:32:6e:
a7:c0:b9:09:00:86:d9:44:9f:2a:14:de:f8:92:93:c8:9d:11:
32:71:83:0f:74:06:49:a1:66:f2:d3:58:d4:cb:02:3a:05:27:
da:19:c7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn5dQi7wQ/9S846njSMccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk
ZjQwY2MwHhcNMjUwOTA3MTAwMTI1WhcNMjUwOTA4MTAwMTI1WjAzMTEwLwYDVQQD
EyhmYWVmNDQ2YWU4OWE4NzZlNjYwODMwMjhmMzNkMzFlZDU5M2E0YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTHnB3N4bOPyMSJsDyXTi1J8L5U
9EJ9mknoLmczKBMJ5J3j7iY08vjHHl1UX5d5pcxKf8BFaby1+yrqsLT+wCwPLgY6
yK8yZ/a0zzQAum3AuvR3zfihLWJCUZpzvdwQYDO4BJOpKCQ+dWXXP8Drg5LK/68a
G07vK+ZKDC5BBLebPD64A+Yc6GmiFmtZsVfKAOW0TP5J4FPupsNMwr++NC3aPmak
s741IPhDzzjDvUGYPw2+Q+4qTwScCsP4tG4SyC1gDz59kl2tJs8VhwMMWTW2Jywu
DGmZPiXtUavYW/OI7++awqcjVZlC3BSfQP+AgiiT2pr7TwnIJjgOExCaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrvRGromoduZggwKPM9Me1ZOkoQMB8GA1UdIwQY
MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt
NjA0YjIwMWU2NWY4LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4
LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9BcL7pZ
GumnkbqqXz/rRPlywvzUG18Qz7yNgYOEex1KRgnCGo++yQupcaxpRCEUV/GSMo4g
GfX4k63wGggipTXJNWNegILuyLzgZntaRckWON1RjFPQRewe1+MwSl7YtvZHYLuB
dc1aRAv6AjbP1HPJTWaACo8MV6y5W6v0ACBTTTx45SX+N7Oy1moqix//jvcFdjCr
+TE6VvjleG1/5BUI+VvcT6HcovKhJSWvD2Os6m9eKiLWkT8y+C/puviCtZIMrrHV
WJOm8UyPRn55bqGShUQ5oDJup8C5CQCG2USfKhTe+JKTyJ0RMnGDD3QGSaFm8tNY
1MsCOgUn2hnHfQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:40 2025 by rpki-client