Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: 0zch8KS2Xg+fWntpzS5DdjhzwMcE1FRSKm6G2Wo8Bkg=
Subject key identifier: 94:AB:D9:6D:FB:87:2E:16:E8:39:5B:63:06:56:72:33:79:79:40:91
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 01992367CB95B4AB7FC3C27F843175268C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 09:00:28 +0000
Manifest this update: Sun 07 Sep 2025 09:00:28 +0000
Manifest next update: Mon 08 Sep 2025 09:00:28 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: RczTEHxXYDr83kkZjNyN6mgXuWQOanQdyQ+HcAZf0mo=)
2: _Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa (hash: FdNGdivbErVK+wy3cLN3R/5P7Vdb7XC+9BhTqtmgBiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:cb:95:b4:ab:7f:c3:c2:7f:84:31:75:26:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Sep 7 09:00:28 2025 GMT
Not After : Sep 8 09:00:28 2025 GMT
Subject: CN=94abd96dfb872e16e8395b630656723379794091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:f7:6b:4a:c1:4d:a7:9f:ed:74:e4:05:f7:
f1:d3:17:74:67:b3:6d:fd:44:91:59:96:ae:45:eb:
65:61:8b:99:a2:dd:ce:db:c4:2d:1b:96:59:87:ba:
59:37:6d:84:dc:bf:91:3d:0a:bc:25:d6:98:81:02:
1c:92:a6:2f:a5:af:f4:4f:00:33:77:38:35:d1:77:
ed:e3:58:2d:91:2b:e0:24:e2:52:b9:18:0f:31:28:
a4:05:a8:e6:9a:48:8b:93:db:ce:28:74:08:73:af:
da:88:e0:ad:e4:4e:61:7b:f9:f2:9f:4e:87:9f:b9:
d5:b7:9c:04:53:02:4f:67:3c:f2:09:b7:88:2a:08:
74:1b:57:f9:5b:01:76:46:da:15:3d:d5:d0:80:b2:
3d:c1:33:bf:e8:2e:1a:26:eb:42:17:40:10:a8:f9:
f4:36:37:c7:9d:c9:bb:da:5a:e6:b2:1e:aa:38:1a:
96:0c:27:6a:bb:ca:3a:f3:30:b1:90:5a:ab:a5:16:
8e:e6:d1:6c:d5:3b:4b:af:8d:73:3d:d3:7b:1c:45:
8c:16:b5:1a:62:4d:ea:99:62:fc:52:54:a8:e6:21:
bb:78:91:95:e3:f5:72:38:d0:d1:d5:98:6e:92:18:
8f:d6:6a:20:cb:59:c6:77:2a:53:cb:5c:84:6d:cc:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:D9:6D:FB:87:2E:16:E8:39:5B:63:06:56:72:33:79:79:40:91
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:a3:d2:28:e2:7d:c8:05:ac:5c:9e:ad:17:da:3c:29:d4:
c3:c8:2f:fb:d6:70:54:50:82:e2:09:db:a0:41:8f:e8:a7:dc:
e4:2f:bc:d9:02:91:fe:5e:dd:c6:03:83:f9:58:2b:48:a5:c2:
85:c5:b7:e0:bd:37:b2:7d:8a:cf:92:7f:23:c4:72:0c:2c:71:
81:5b:02:44:70:8e:17:00:9e:b1:9c:d1:2e:60:ea:c2:cd:a8:
7b:b6:34:38:da:5d:6b:93:bf:29:d0:33:e8:09:85:d5:cd:08:
5e:88:6b:03:63:cc:a5:4a:a7:85:98:a9:03:e0:85:7a:95:ec:
29:61:98:8e:48:cb:83:eb:44:00:ff:4e:f3:be:fe:64:c7:9f:
9f:45:38:1e:23:00:7c:ca:96:6c:bc:01:4c:bd:63:fb:e2:e7:
24:8d:ee:8b:9f:9e:5c:26:b3:1e:73:bf:02:5b:3e:33:60:0e:
8c:ac:ac:cf:59:51:ab:43:42:35:02:dc:48:d8:c8:bc:fe:10:
76:8f:e9:f4:08:9b:93:c4:99:95:65:5b:b4:48:02:f4:ee:78:
d7:d1:57:c6:86:cf:da:ee:d1:c6:1f:3f:ed:f1:42:df:aa:53:
74:e0:d1:02:07:34:a1:20:09:29:6c:38:35:ad:fd:88:d6:83:
26:c8:29:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ8uVtKt/w8J/hDF1JoyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmE3MzQ4ZDZjMWQ3MTg2MzI4MzI4NzIwNzMwZjY4NGZh
MjBlZGMwHhcNMjUwOTA3MDkwMDI4WhcNMjUwOTA4MDkwMDI4WjAzMTEwLwYDVQQD
Eyg5NGFiZDk2ZGZiODcyZTE2ZTgzOTViNjMwNjU2NzIzMzc5Nzk0MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdX3a0rBTaef7XTkBffx0xd0Z7Nt
/USRWZauRetlYYuZot3O28QtG5ZZh7pZN22E3L+RPQq8JdaYgQIckqYvpa/0TwAz
dzg10Xft41gtkSvgJOJSuRgPMSikBajmmkiLk9vOKHQIc6/aiOCt5E5he/nyn06H
n7nVt5wEUwJPZzzyCbeIKgh0G1f5WwF2RtoVPdXQgLI9wTO/6C4aJutCF0AQqPn0
NjfHncm72lrmsh6qOBqWDCdqu8o68zCxkFqrpRaO5tFs1TtLr41zPdN7HEWMFrUa
Yk3qmWL8UlSo5iG7eJGV4/VyONDR1ZhukhiP1mogy1nGdypTy1yEbcxk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSr2W37hy4W6DlbYwZWcjN5eUCRMB8GA1UdIwQY
MBaAFAv6c0jWwdcYYygyhyBzD2hPog7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2Qt
ODU3MDY2NDVlNzM0LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2QtODU3MDY2NDVlNzM0
LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUGj0iji
fcgFrFyerRfaPCnUw8gv+9ZwVFCC4gnboEGP6Kfc5C+82QKR/l7dxgOD+VgrSKXC
hcW34L03sn2Kz5J/I8RyDCxxgVsCRHCOFwCesZzRLmDqws2oe7Y0ONpda5O/KdAz
6AmF1c0IXohrA2PMpUqnhZipA+CFepXsKWGYjkjLg+tEAP9O877+ZMefn0U4HiMA
fMqWbLwBTL1j++LnJI3ui5+eXCazHnO/Als+M2AOjKysz1lRq0NCNQLcSNjIvP4Q
do/p9Aibk8SZlWVbtEgC9O5419FXxobP2u7Rxh8/7fFC36pTdODRAgc0oSAJKWw4
Na39iNaDJsgpqw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:08 2025 by rpki-client