Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier: IWpBQNKVm0LK3MF9vVCcN9OlhCcX9yYpqhiHbkmiHgQ=
Subject key identifier: 68:1C:49:07:7A:C6:D6:E8:09:40:2C:01:92:57:F2:0B:D9:9B:25:59
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 019922FABE7B0E3BCE90CE3D06555C7B0619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: FcZbJ6L41X0uj2bhgyjtqRksoXbB/FKpE/Uu7cDVczc=)
2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:be:7b:0e:3b:ce:90:ce:3d:06:55:5c:7b:06:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=681c49077ac6d6e809402c019257f20bd99b2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:73:ca:9a:42:bc:4a:0e:ac:6d:d9:e9:f8:
00:3e:e4:55:17:50:f1:ba:8f:73:ac:5c:cb:fb:32:
46:79:0a:d9:d2:a1:6e:20:e2:cd:df:16:47:e9:1f:
43:b7:4a:53:29:9f:0b:2f:43:2c:e7:21:1b:e2:07:
d9:b3:1f:2e:90:ea:41:82:f1:2f:ff:80:cf:42:3f:
50:08:4c:d9:29:dd:35:46:26:8e:4e:7b:bd:04:17:
27:96:97:8c:58:33:80:2d:72:09:58:4c:2b:1e:c6:
23:85:70:47:00:a1:70:4f:7e:7b:ef:a4:b0:f7:72:
2b:29:e0:df:50:71:10:08:65:d0:13:10:12:bb:24:
c7:96:5c:e5:b8:2e:b4:7a:56:30:a1:b0:82:f7:58:
04:77:a2:8b:76:9d:d3:f7:07:0b:98:b4:6f:73:3b:
c2:42:1c:9f:dd:b2:3e:a4:19:a1:b1:1b:3c:aa:d6:
b8:f1:95:78:67:2f:e2:19:6d:9d:77:64:08:57:2e:
15:69:2a:a0:6c:59:5c:0e:9a:18:e1:36:89:06:09:
c2:a0:cc:62:ad:a4:2f:78:12:21:6b:4a:60:1c:e1:
91:b4:ed:fd:9b:d7:de:ba:1f:e0:e3:bb:a8:09:7a:
d0:63:aa:5c:93:70:bc:92:32:19:37:e9:b6:1b:81:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:49:07:7A:C6:D6:E8:09:40:2C:01:92:57:F2:0B:D9:9B:25:59
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:e5:9e:21:25:9f:a6:d1:55:2e:fa:a5:e1:64:b3:10:57:
d3:ff:89:2c:81:6f:b8:59:24:d6:ad:30:72:13:69:b9:e7:8a:
f0:d5:6d:76:28:58:88:b2:49:30:0a:4a:80:15:28:36:10:76:
c3:73:a9:a6:2e:07:c7:08:c6:91:0f:c1:04:2d:d7:00:87:e0:
b8:c5:e8:63:90:88:54:ea:c5:5b:68:5f:a1:84:54:4f:4c:3c:
c4:c0:59:21:84:2c:2a:56:8d:43:9b:54:c1:2e:ec:e4:da:2d:
a6:82:ef:a8:2b:77:27:0b:50:f9:01:00:c0:39:d4:86:1c:f7:
ea:7f:d7:bc:d5:d9:f9:1e:60:59:24:e5:70:6c:1b:f7:95:41:
a7:f0:cf:6a:aa:fe:78:c9:53:c6:fa:a3:65:72:36:dd:e0:66:
bb:17:76:c9:50:a3:82:e2:28:3f:04:f7:3c:17:49:2c:3d:1d:
d0:c3:09:d6:6b:e5:cd:21:a1:cf:f8:70:4f:8d:ae:2d:94:82:
00:86:58:4c:3e:c4:6f:33:53:34:9a:fe:46:ba:d9:9c:e2:47:
9c:70:45:b0:66:8a:65:d7:a4:2f:9d:a6:77:6b:5d:97:2b:09:
86:79:82:11:e0:7f:04:dc:ed:28:7d:b9:0f:57:67:c5:de:c2:
b5:75:59:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+r57DjvOkM49BlVcewYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwMzMyOWUzYzBmNzNlYTgzZmI2MzdjYTIwYWVjZTE2
YThlYjQwHhcNMjUwOTA3MDcwMTIyWhcNMjUwOTA4MDcwMTIyWjAzMTEwLwYDVQQD
Eyg2ODFjNDkwNzdhYzZkNmU4MDk0MDJjMDE5MjU3ZjIwYmQ5OWIyNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlRzyppCvEoOrG3Z6fgAPuRVF1Dx
uo9zrFzL+zJGeQrZ0qFuIOLN3xZH6R9Dt0pTKZ8LL0Ms5yEb4gfZsx8ukOpBgvEv
/4DPQj9QCEzZKd01RiaOTnu9BBcnlpeMWDOALXIJWEwrHsYjhXBHAKFwT35776Sw
93IrKeDfUHEQCGXQExASuyTHllzluC60elYwobCC91gEd6KLdp3T9wcLmLRvczvC
Qhyf3bI+pBmhsRs8qta48ZV4Zy/iGW2dd2QIVy4VaSqgbFlcDpoY4TaJBgnCoMxi
raQveBIha0pgHOGRtO39m9feuh/g47uoCXrQY6pck3C8kjIZN+m2G4HheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgcSQd6xtboCUAsAZJX8gvZmyVZMB8GA1UdIwQY
MBaAFOeuAzKePA9z6oP7Y3yiCuzhao60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAt
YTE3ZGFiNzAxYzQxLzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAtYTE3ZGFiNzAxYzQx
LzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQvlniEl
n6bRVS76peFksxBX0/+JLIFvuFkk1q0wchNpueeK8NVtdihYiLJJMApKgBUoNhB2
w3Oppi4HxwjGkQ/BBC3XAIfguMXoY5CIVOrFW2hfoYRUT0w8xMBZIYQsKlaNQ5tU
wS7s5NotpoLvqCt3JwtQ+QEAwDnUhhz36n/XvNXZ+R5gWSTlcGwb95VBp/DPaqr+
eMlTxvqjZXI23eBmuxd2yVCjguIoPwT3PBdJLD0d0MMJ1mvlzSGhz/hwT42uLZSC
AIZYTD7EbzNTNJr+RrrZnOJHnHBFsGaKZdekL52md2tdlysJhnmCEeB/BNztKH25
D1dnxd7CtXVZZA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client