Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: NfPN7zDVHOmkPXYBqbCjYH4uZ6+x2V6xCMOC06mkGeU=
Subject key identifier: EF:C9:CD:9E:00:A3:6B:80:FE:55:BC:1D:4A:24:B0:AD:DB:55:20:09
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01992FA3A9681E170B60A96135909A24ECD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 18:01:18 +0000
Manifest this update: Tue 09 Sep 2025 18:01:18 +0000
Manifest next update: Wed 10 Sep 2025 18:01:18 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: /OVvIASCZI6AHifDA8ihadBm9EhxZ56rwlBpfwcNTqo=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:a9:68:1e:17:0b:60:a9:61:35:90:9a:24:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Sep 9 18:01:18 2025 GMT
Not After : Sep 10 18:01:18 2025 GMT
Subject: CN=efc9cd9e00a36b80fe55bc1d4a24b0addb552009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:1d:24:0f:e1:12:2d:24:29:67:fa:f1:6d:
5a:a9:3b:7a:41:74:d3:28:d0:08:63:9e:1e:b2:88:
10:ad:68:95:98:98:d0:16:84:a1:7f:15:49:37:6d:
3a:38:8f:24:6f:c6:c3:94:fa:df:67:9b:6e:6f:ed:
cc:52:f6:7b:64:4b:a7:e1:9f:c5:f2:f3:c3:7b:cf:
c2:a5:cb:85:7c:d6:eb:fb:f1:13:c7:da:0e:b5:4a:
a0:17:7c:ce:e2:2f:9e:6c:bc:8b:5d:7b:33:9a:3e:
e5:7b:be:ae:51:1b:d9:06:13:8a:2f:18:ba:c4:2e:
8f:b8:41:55:83:6b:24:ef:37:93:e8:be:c0:71:23:
ab:ea:89:35:92:00:31:b6:a2:5f:93:df:4b:75:d6:
00:c8:15:86:84:4c:97:dc:5e:48:e0:89:94:0a:a3:
45:f3:da:96:4e:66:d1:1e:8d:34:da:77:94:19:fb:
73:c8:61:05:d6:98:4a:ec:d9:90:4d:af:06:f2:dc:
a4:0f:57:63:36:2d:0d:25:a6:ae:2e:e1:b0:7d:f9:
ef:7d:93:eb:8e:3d:da:43:09:1c:76:b7:54:04:a8:
bc:00:1b:9f:6b:fc:72:af:24:e7:2e:56:dc:5e:eb:
5d:db:f0:aa:4a:8d:73:46:0c:69:80:cd:6f:78:52:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:CD:9E:00:A3:6B:80:FE:55:BC:1D:4A:24:B0:AD:DB:55:20:09
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:38:76:f5:8b:d6:87:45:ca:b5:ea:0e:18:d4:a9:36:11:5c:
67:73:2a:c1:82:d3:91:78:c3:62:3e:17:9a:af:eb:d7:5a:da:
83:79:f4:7f:6c:da:1c:c1:bb:9b:f8:d0:b1:37:67:00:39:c8:
c3:e3:4f:41:f3:50:df:8e:3c:aa:11:22:72:f2:00:3e:06:8b:
c0:3c:80:39:a6:eb:0c:47:b1:39:66:77:d2:65:29:a7:a3:08:
9c:96:ae:9c:41:c0:74:41:67:1e:6d:ca:af:be:1d:82:66:3f:
d7:90:1d:ab:d4:bd:06:9f:28:ed:29:9c:20:70:57:08:d5:c0:
c9:20:69:2b:19:97:c9:12:f2:d2:4f:24:3d:5c:47:92:96:2b:
ae:66:6f:a1:07:43:33:7f:bc:d6:bb:c6:d2:68:52:a4:9b:70:
b8:76:e9:8a:10:6e:bd:a8:2e:b1:3f:15:d3:bc:f5:eb:ca:66:
c2:97:f3:71:6e:64:58:73:d6:e6:58:9a:d2:c7:05:46:4f:60:
5c:af:7f:ea:32:0a:ec:f8:49:8b:db:10:59:18:3a:35:d9:83:
72:59:4d:1a:28:83:4c:92:51:a7:54:6a:d8:9a:b2:15:0a:57:
34:70:09:b0:6d:dd:b0:c9:64:92:6f:a0:83:ca:14:99:2d:ac:
90:66:ee:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvo6loHhcLYKlhNZCaJOzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjUwOTA5MTgwMTE4WhcNMjUwOTEwMTgwMTE4WjAzMTEwLwYDVQQD
EyhlZmM5Y2Q5ZTAwYTM2YjgwZmU1NWJjMWQ0YTI0YjBhZGRiNTUyMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJQdJA/hEi0kKWf68W1aqTt6QXTT
KNAIY54esogQrWiVmJjQFoShfxVJN206OI8kb8bDlPrfZ5tub+3MUvZ7ZEun4Z/F
8vPDe8/CpcuFfNbr+/ETx9oOtUqgF3zO4i+ebLyLXXszmj7le76uURvZBhOKLxi6
xC6PuEFVg2sk7zeT6L7AcSOr6ok1kgAxtqJfk99LddYAyBWGhEyX3F5I4ImUCqNF
89qWTmbRHo002neUGftzyGEF1phK7NmQTa8G8tykD1djNi0NJaauLuGwffnvfZPr
jj3aQwkcdrdUBKi8ABufa/xyryTnLlbcXutd2/CqSo1zRgxpgM1veFJkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/JzZ4Ao2uA/lW8HUoksK3bVSAJMB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTh29YvW
h0XKteoOGNSpNhFcZ3MqwYLTkXjDYj4Xmq/r11rag3n0f2zaHMG7m/jQsTdnADnI
w+NPQfNQ3448qhEicvIAPgaLwDyAOabrDEexOWZ30mUpp6MInJaunEHAdEFnHm3K
r74dgmY/15Adq9S9Bp8o7SmcIHBXCNXAySBpKxmXyRLy0k8kPVxHkpYrrmZvoQdD
M3+81rvG0mhSpJtwuHbpihBuvagusT8V07z168pmwpfzcW5kWHPW5lia0scFRk9g
XK9/6jIK7PhJi9sQWRg6NdmDcllNGiiDTJJRp1Rq2JqyFQpXNHAJsG3dsMlkkm+g
g8oUmS2skGbulQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:59:13 2025 by rpki-client