Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier: mCrtVeWEmtIi4ugHgEa/8b9PI0eDuWzqpz4D5dzmI8w=
Subject key identifier: 73:BB:2F:77:E9:4A:D2:A2:44:C8:12:6A:B3:26:26:90:0C:FD:88:75
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 019A73014C8F9553D2B53B7CE08D884D48A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:55 +0000
Manifest this update: Tue 11 Nov 2025 13:00:55 +0000
Manifest next update: Wed 12 Nov 2025 13:00:55 +0000
Files and hashes: 1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: CMh8DalZ0dTsZ/kXGE/B5P6HFRW303zl4PYuvy8DXaI=)
2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4c:8f:95:53:d2:b5:3b:7c:e0:8d:88:4d:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: Nov 11 13:00:55 2025 GMT
Not After : Nov 12 13:00:55 2025 GMT
Subject: CN=73bb2f77e94ad2a244c8126ab32626900cfd8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:51:72:40:54:38:5a:7d:ec:00:25:d1:ae:
ed:e2:72:a3:61:ed:6c:da:39:de:51:f3:00:48:10:
af:62:07:95:d1:ed:cf:12:a6:eb:fd:e5:fc:b2:ae:
6d:49:3b:af:cc:52:46:89:d9:91:d7:fc:c9:67:d3:
fe:f9:83:2d:6e:10:90:b1:af:66:7f:b4:73:e3:d6:
a3:82:42:29:b7:d1:9f:03:3c:6a:82:03:ee:0e:17:
b0:e0:b2:20:a2:84:01:86:8b:c7:a8:b8:c7:0f:60:
21:70:05:0d:2c:23:6d:db:6f:fd:eb:c3:be:14:e3:
ed:8b:03:66:6a:dc:63:0d:fb:b3:a6:12:8a:8f:25:
13:6c:37:4a:42:2d:18:37:cb:3d:e5:9d:a2:87:8b:
b5:1e:9f:5d:3c:e7:ee:12:6a:73:b1:17:91:16:7b:
66:a4:af:cc:2a:e1:c3:c9:6c:5b:bd:35:92:d8:4c:
26:45:f6:db:9f:d6:82:34:30:bf:90:b9:1e:82:92:
1e:76:75:65:60:f3:ec:67:d2:e2:23:85:ba:c0:b9:
6f:cb:b3:0c:2c:f9:1f:c5:89:1d:11:4b:87:63:9c:
30:e2:05:90:a5:59:c4:12:1b:70:2c:a8:47:33:ab:
24:1a:bd:1b:2e:f2:0f:3f:ce:48:1a:8e:5d:cb:c9:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:2F:77:E9:4A:D2:A2:44:C8:12:6A:B3:26:26:90:0C:FD:88:75
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:06:20:20:26:98:c1:a6:a2:5c:5a:f9:98:1d:46:a9:f0:
79:4f:3b:ec:d9:15:a4:7e:05:8d:48:6f:0a:5f:e2:af:e2:ed:
43:b0:e2:49:16:2c:41:ce:26:4f:fe:1e:95:f3:dd:01:90:77:
ec:36:13:be:68:6e:63:a4:58:c9:11:70:d7:c5:0d:97:84:5b:
60:1b:76:20:a7:63:61:e2:b1:ea:bf:23:f7:1c:c3:43:ea:c4:
44:fb:a1:c8:5c:4e:6c:3d:ac:fb:4f:f7:80:0f:63:25:ef:43:
ca:6c:19:3f:8a:bf:63:6f:fe:1f:32:e6:54:7c:1d:e7:2c:d6:
44:2a:b9:6f:2d:ab:78:78:6c:b0:3a:40:9f:3a:ea:7d:db:da:
5b:d3:97:c6:71:df:22:43:4a:51:3f:16:03:79:6c:1e:46:af:
b7:52:8a:f9:ce:21:e0:12:e7:f2:fa:fd:db:b5:ab:a1:2b:87:
a8:f9:17:4a:3f:19:e4:0f:a7:fb:c9:44:66:01:92:07:4d:b3:
f2:e5:77:2d:2f:ee:a5:a7:35:e8:00:01:a6:08:9c:11:8a:99:
97:b6:86:b8:bf:42:c6:f7:97:4d:d8:92:f6:82:42:96:ef:f1:
7a:14:17:24:da:e5:70:22:dd:81:7a:8b:ff:fd:c5:36:08:4a:
1b:a8:59:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAUyPlVPStTt84I2ITUihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwMzMyOWUzYzBmNzNlYTgzZmI2MzdjYTIwYWVjZTE2
YThlYjQwHhcNMjUxMTExMTMwMDU1WhcNMjUxMTEyMTMwMDU1WjAzMTEwLwYDVQQD
Eyg3M2JiMmY3N2U5NGFkMmEyNDRjODEyNmFiMzI2MjY5MDBjZmQ4ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH1RckBUOFp97AAl0a7t4nKjYe1s
2jneUfMASBCvYgeV0e3PEqbr/eX8sq5tSTuvzFJGidmR1/zJZ9P++YMtbhCQsa9m
f7Rz49ajgkIpt9GfAzxqggPuDhew4LIgooQBhovHqLjHD2AhcAUNLCNt22/968O+
FOPtiwNmatxjDfuzphKKjyUTbDdKQi0YN8s95Z2ih4u1Hp9dPOfuEmpzsReRFntm
pK/MKuHDyWxbvTWS2EwmRfbbn9aCNDC/kLkegpIednVlYPPsZ9LiI4W6wLlvy7MM
LPkfxYkdEUuHY5ww4gWQpVnEEhtwLKhHM6skGr0bLvIPP85IGo5dy8l+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO7L3fpStKiRMgSarMmJpAM/Yh1MB8GA1UdIwQY
MBaAFOeuAzKePA9z6oP7Y3yiCuzhao60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAt
YTE3ZGFiNzAxYzQxLzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAtYTE3ZGFiNzAxYzQx
LzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQAGICAm
mMGmolxa+ZgdRqnweU877NkVpH4FjUhvCl/ir+LtQ7DiSRYsQc4mT/4elfPdAZB3
7DYTvmhuY6RYyRFw18UNl4RbYBt2IKdjYeKx6r8j9xzDQ+rERPuhyFxObD2s+0/3
gA9jJe9DymwZP4q/Y2/+HzLmVHwd5yzWRCq5by2reHhssDpAnzrqfdvaW9OXxnHf
IkNKUT8WA3lsHkavt1KK+c4h4BLn8vr927WroSuHqPkXSj8Z5A+n+8lEZgGSB02z
8uV3LS/upac16AABpgicEYqZl7aGuL9CxveXTdiS9oJClu/xehQXJNrlcCLdgXqL
//3FNghKG6hZsQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:03 2025 by rpki-client