Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: fUgW5lqRqsR7vo0anY8m2kb4+qnCh5ibcnhffqrKcYc=
Subject key identifier: CA:F3:43:A5:6D:4F:06:94:C9:B1:19:3D:E8:3E:42:2A:85:80:B2:C4
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019938DEC709B3D665E553678871E9B663FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0B4E
Signing time: Thu 11 Sep 2025 13:02:27 +0000
Manifest this update: Thu 11 Sep 2025 13:02:27 +0000
Manifest next update: Fri 12 Sep 2025 13:02:27 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: i/n1KbUoTyDcfDDGvBwzehCCEkGIG1UOLMKa2XKKDtQ=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:c7:09:b3:d6:65:e5:53:67:88:71:e9:b6:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Sep 11 13:02:27 2025 GMT
Not After : Sep 12 13:02:27 2025 GMT
Subject: CN=caf343a56d4f0694c9b1193de83e422a8580b2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:8e:1a:98:c1:b7:50:e5:5f:28:49:76:eb:
81:4c:43:74:8f:f3:54:64:08:4c:68:40:d8:e8:18:
85:18:b2:c3:6b:f3:49:de:5c:14:46:55:ac:aa:2c:
1c:7a:82:a1:37:0a:18:81:7a:4f:39:57:32:83:73:
dc:3e:bb:cd:6c:f7:09:e7:7c:57:25:98:29:6b:50:
b2:f6:99:68:7a:5a:17:0d:c0:8f:0c:58:da:53:31:
d8:dc:24:15:1f:89:61:e4:7c:50:17:3c:74:77:37:
83:b0:cd:6b:fb:c8:e6:ef:03:7b:82:e4:46:84:8d:
26:76:3b:2b:e8:b4:fc:6c:3f:0b:7b:6a:65:4c:57:
46:75:e7:af:db:db:a0:f3:33:b7:fe:f0:1e:a3:2b:
3f:a1:1d:53:98:c0:e1:55:8f:11:1f:c3:56:c4:f8:
88:99:55:b1:6c:ff:c9:fd:b9:d4:41:48:ba:a1:9f:
ac:d5:42:58:85:b8:3d:bc:7a:f2:1c:74:ea:b6:bd:
40:d4:dd:8c:58:53:6a:67:ca:d5:c1:97:41:bc:cb:
8d:a2:73:b0:ac:6f:d7:5d:01:da:cb:a1:a2:89:83:
b6:56:ad:c2:67:eb:5e:bc:2a:54:62:2c:cc:ba:5c:
dd:10:d3:8d:03:dd:ec:05:91:31:6e:8d:c9:15:d7:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:43:A5:6D:4F:06:94:C9:B1:19:3D:E8:3E:42:2A:85:80:B2:C4
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7e:0b:92:ed:bc:03:db:1e:97:07:1d:26:1e:71:62:f6:cf:
a1:47:e9:c8:03:d5:48:84:7b:f7:e8:7b:08:a7:b0:57:00:f5:
64:00:86:51:59:8a:04:26:0b:25:46:03:a1:6a:db:40:ee:04:
5b:88:61:c1:8b:d9:2a:ee:9b:58:c7:c9:6a:5b:20:ef:bb:a6:
dc:8a:5b:6c:d5:e9:f6:82:fe:9b:78:34:24:22:fa:bc:98:86:
72:6c:d9:9f:54:b4:fd:02:8d:d7:a3:2b:3d:5e:8a:41:45:ce:
c7:ad:6c:ee:d2:dc:e8:8e:69:25:3a:57:2d:7d:e6:6a:eb:e2:
5f:59:80:40:6c:f0:d2:a2:5a:35:ac:56:4a:19:ac:31:2b:2e:
f8:6a:92:95:a3:50:a8:ae:c9:71:88:f2:98:57:c5:5b:c4:7e:
7d:83:f4:62:89:a7:5a:71:41:ea:17:c4:28:d9:e1:33:12:db:
69:42:fb:59:54:02:e4:fd:db:9a:32:8e:23:d7:7b:15:a6:ec:
ac:8e:fd:ae:23:d4:af:ee:af:f3:1a:cc:ce:6c:f9:a6:71:f0:
56:a1:60:ce:97:01:b8:3a:a6:cd:56:3e:1d:9a:08:51:2b:64:
67:a4:46:41:be:17:eb:7b:a8:04:be:76:64:04:29:64:70:75:
85:db:4a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk43scJs9Zl5VNniHHptmP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx
ZWRlZmQwHhcNMjUwOTExMTMwMjI3WhcNMjUwOTEyMTMwMjI3WjAzMTEwLwYDVQQD
EyhjYWYzNDNhNTZkNGYwNjk0YzliMTE5M2RlODNlNDIyYTg1ODBiMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmreOGpjBt1DlXyhJduuBTEN0j/NU
ZAhMaEDY6BiFGLLDa/NJ3lwURlWsqiwceoKhNwoYgXpPOVcyg3PcPrvNbPcJ53xX
JZgpa1Cy9ploeloXDcCPDFjaUzHY3CQVH4lh5HxQFzx0dzeDsM1r+8jm7wN7guRG
hI0mdjsr6LT8bD8Le2plTFdGdeev29ug8zO3/vAeoys/oR1TmMDhVY8RH8NWxPiI
mVWxbP/J/bnUQUi6oZ+s1UJYhbg9vHryHHTqtr1A1N2MWFNqZ8rVwZdBvMuNonOw
rG/XXQHay6GiiYO2Vq3CZ+tevCpUYizMulzdENONA93sBZExbo3JFdfzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrzQ6VtTwaUybEZPeg+QiqFgLLEMB8GA1UdIwQY
MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt
ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk
LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn4Lku28
A9selwcdJh5xYvbPoUfpyAPVSIR79+h7CKewVwD1ZACGUVmKBCYLJUYDoWrbQO4E
W4hhwYvZKu6bWMfJalsg77um3IpbbNXp9oL+m3g0JCL6vJiGcmzZn1S0/QKN16Mr
PV6KQUXOx61s7tLc6I5pJTpXLX3mauviX1mAQGzw0qJaNaxWShmsMSsu+GqSlaNQ
qK7JcYjymFfFW8R+fYP0YomnWnFB6hfEKNnhMxLbaUL7WVQC5P3bmjKOI9d7Fabs
rI79riPUr+6v8xrMzmz5pnHwVqFgzpcBuDqmzVY+HZoIUStkZ6RGQb4X63uoBL52
ZAQpZHB1hdtK0w==
-----END CERTIFICATE-----
Generated at Thu Sep 11 20:26:59 2025 by rpki-client