
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File: rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier: Pmd06+qwdzEqZgvpxNpCrpm4BNVuP3Rt4HoENTuLRCs=
Subject key identifier: 59:8D:23:A1:9B:97:24:C7:1F:9D:38:F0:67:08:2B:AD:44:B2:6E:FF
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial: 0198496571E2F117D3838463DACC703497C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number: 0846
Signing time: Sun 27 Jul 2025 01:00:41 +0000
Manifest this update: Sun 27 Jul 2025 01:00:41 +0000
Manifest next update: Mon 28 Jul 2025 01:00:41 +0000
Files and hashes: 1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: sb3gtxmOrOBslucWLORnlwIlZjfcq6Cs9aR0RupFyKc=)
2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:71:e2:f1:17:d3:83:84:63:da:cc:70:34:97:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Validity
Not Before: Jul 27 01:00:41 2025 GMT
Not After : Jul 28 01:00:41 2025 GMT
Subject: CN=598d23a19b9724c71f9d38f067082bad44b26eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:d9:d4:49:68:55:87:b6:f6:48:f9:29:17:
e4:a6:29:51:1d:d5:6a:53:08:7d:36:3e:3d:a0:13:
0f:cc:eb:65:47:03:c5:cb:bd:af:dd:50:4e:85:97:
97:f0:84:53:37:3c:e0:f2:14:70:82:e3:56:6e:7d:
8c:db:b1:ab:00:18:42:03:74:95:d1:db:bc:e6:d2:
eb:5f:19:bd:42:a3:a8:44:df:dc:84:5d:f6:3f:3d:
a8:59:80:7e:26:1b:01:9c:bb:34:38:a8:74:bd:26:
85:35:47:cd:6e:4b:a7:95:45:33:46:e0:fb:a4:d8:
71:15:08:b5:6d:c6:5a:9f:78:a5:9f:00:69:35:1b:
aa:58:c6:9c:6e:f4:39:52:a8:f9:e6:d5:a0:cb:43:
24:83:14:0f:57:88:4a:e4:98:6e:36:60:f5:ef:a9:
96:70:49:cb:37:a1:5c:c3:2a:c5:f5:d0:aa:ee:b6:
41:b1:49:d6:c0:18:89:ba:ce:a1:84:d2:04:b5:4f:
c9:7c:c8:1e:a4:a2:09:d6:c2:24:73:c1:4c:9a:56:
c6:6d:8e:cc:0e:8f:cf:59:c5:f6:93:5c:de:0a:a7:
fd:f2:2e:d3:36:7a:ad:16:fd:11:bc:39:46:fe:86:
06:5a:da:b9:69:3d:7c:eb:4e:70:4a:37:aa:07:ba:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:23:A1:9B:97:24:C7:1F:9D:38:F0:67:08:2B:AD:44:B2:6E:FF
X509v3 Authority Key Identifier:
keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:58:c7:24:81:c7:87:9d:9a:9c:06:2c:7f:67:69:69:47:a9:
58:fc:e4:a9:7d:28:4b:e8:35:f8:ec:e2:a5:2f:12:ae:b3:9e:
0c:98:17:86:8e:1a:70:ab:4a:8e:4b:1e:3a:6d:63:84:f1:eb:
9b:d2:a2:5a:15:0d:a8:c8:a5:0f:8a:3e:d3:dc:dc:62:a4:e8:
06:ea:40:64:2e:d1:78:34:e6:98:51:a2:55:f3:3e:b5:c3:b7:
24:39:52:71:94:fc:c6:50:25:ee:f2:68:4b:58:e3:52:8c:68:
8a:d4:a1:b1:ec:ca:eb:53:a7:7a:08:96:5d:09:03:a1:59:c5:
b9:66:7e:a6:64:6a:0d:f7:b5:c6:7e:31:2a:11:3b:07:73:18:
cf:55:e2:c5:ff:44:69:cd:cf:4b:cc:34:0b:1f:b3:3f:45:db:
b5:c1:3d:19:0b:76:3b:ce:ac:44:b4:54:09:eb:07:f1:ef:a0:
d6:42:56:ad:bb:bd:0b:fb:e1:ab:a2:fc:59:a0:98:77:e0:c0:
2b:ae:1e:97:84:a5:ec:ff:7b:6f:7b:1a:e9:48:36:cf:e4:a3:
83:8e:e3:f8:11:3b:b8:f9:28:ec:04:19:a0:ad:dc:3f:c1:80:
06:c6:c9:92:37:30:be:4c:b4:64:9a:93:31:0a:cf:e1:12:4a:
0c:83:04:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZXHi8RfTg4Rj2sxwNJfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2NjMWE3ODcwYjYxMGMzNTVjNmVjMjk5YjE2NmVkYWJh
M2RmMDQwHhcNMjUwNzI3MDEwMDQxWhcNMjUwNzI4MDEwMDQxWjAzMTEwLwYDVQQD
Eyg1OThkMjNhMTliOTcyNGM3MWY5ZDM4ZjA2NzA4MmJhZDQ0YjI2ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt3Z1EloVYe29kj5KRfkpilRHdVq
Uwh9Nj49oBMPzOtlRwPFy72v3VBOhZeX8IRTNzzg8hRwguNWbn2M27GrABhCA3SV
0du85tLrXxm9QqOoRN/chF32Pz2oWYB+JhsBnLs0OKh0vSaFNUfNbkunlUUzRuD7
pNhxFQi1bcZan3ilnwBpNRuqWMacbvQ5Uqj55tWgy0MkgxQPV4hK5JhuNmD176mW
cEnLN6FcwyrF9dCq7rZBsUnWwBiJus6hhNIEtU/JfMgepKIJ1sIkc8FMmlbGbY7M
Do/PWcX2k1zeCqf98i7TNnqtFv0RvDlG/oYGWtq5aT18605wSjeqB7osVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmNI6GblyTHH5048GcIK61Esm7/MB8GA1UdIwQY
MBaAFK08waeHC2EMNVxuwpmxZu2ro98EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAt
NzRkNTZjNDQxZGMxLzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAtNzRkNTZjNDQxZGMx
LzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVjHJIHH
h52anAYsf2dpaUepWPzkqX0oS+g1+OzipS8SrrOeDJgXho4acKtKjkseOm1jhPHr
m9KiWhUNqMilD4o+09zcYqToBupAZC7ReDTmmFGiVfM+tcO3JDlScZT8xlAl7vJo
S1jjUoxoitShsezK61OnegiWXQkDoVnFuWZ+pmRqDfe1xn4xKhE7B3MYz1Xixf9E
ac3PS8w0Cx+zP0XbtcE9GQt2O86sRLRUCesH8e+g1kJWrbu9C/vhq6L8WaCYd+DA
K64el4Sl7P97b3sa6Ug2z+Sjg47j+BE7uPko7AQZoK3cP8GABsbJkjcwvky0ZJqT
MQrP4RJKDIMEgg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:22 2025 by rpki-client