Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: Qqpmlj/ioVvwFt3BUMWHN4TJIeupP7lHzViRzO5hIUQ=
Subject key identifier: BD:37:E6:C7:1D:09:F1:EF:A8:A3:57:FE:20:69:4B:4E:E0:72:1B:BA
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019A04ED56B153B5FE395F2D7BFAE83D23E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1676
Signing time: Tue 21 Oct 2025 04:00:54 +0000
Manifest this update: Tue 21 Oct 2025 04:00:54 +0000
Manifest next update: Wed 22 Oct 2025 04:00:54 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: Z4yZHxk4Ni6CnOzLCJ6wnp0kkJizcuVCRGBOzNDKpPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:56:b1:53:b5:fe:39:5f:2d:7b:fa:e8:3d:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Oct 21 04:00:54 2025 GMT
Not After : Oct 22 04:00:54 2025 GMT
Subject: CN=bd37e6c71d09f1efa8a357fe20694b4ee0721bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:91:72:d9:1e:7c:cd:df:13:2d:28:2e:b0:
bc:01:c1:a1:e8:9c:1f:00:50:cf:66:42:93:61:cb:
24:eb:5d:2c:c8:97:2f:4d:08:04:11:1a:63:b3:fe:
3d:8c:bc:47:0d:27:0d:8f:7d:ff:66:42:ab:8f:cf:
88:07:84:2a:cc:65:48:c5:fe:ed:10:d2:9e:d4:11:
2d:cb:81:38:9a:c2:4d:3a:29:c5:06:3f:d1:e5:de:
9a:f7:9a:d8:42:42:5d:38:2d:4a:d2:8a:48:2f:89:
d0:43:60:62:30:5c:5a:7a:bb:70:30:89:25:11:63:
6c:3e:05:3e:36:15:45:fb:80:41:b6:e9:6a:a4:f6:
b8:f5:15:e5:c4:93:a7:79:47:94:5a:ab:49:6c:30:
da:42:90:56:31:bd:de:75:bc:1c:34:33:de:b1:28:
62:2f:58:cd:c4:81:81:84:a8:eb:e1:7b:30:c0:50:
39:fb:d3:98:2f:72:09:2c:3a:1f:17:95:ce:7b:cf:
bb:6f:73:3e:2b:7a:45:57:d6:e3:52:dc:f3:0b:51:
af:b0:b5:51:1f:2a:f5:87:38:3f:4d:95:1a:c7:50:
d3:21:8e:6c:a0:24:95:83:44:e7:d2:ca:5d:30:ab:
14:8d:f8:75:fc:3b:2c:5d:ba:5b:f7:df:cc:54:e3:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:37:E6:C7:1D:09:F1:EF:A8:A3:57:FE:20:69:4B:4E:E0:72:1B:BA
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9c:e1:4a:b1:7d:29:c0:1d:0c:49:48:63:6a:27:8d:fb:ac:
20:d2:28:87:90:24:fb:57:61:23:43:f0:2f:97:3f:b0:a0:4e:
07:5f:8a:f8:de:14:f9:3b:3c:47:97:e7:94:df:c1:58:8b:af:
8a:e8:a5:41:70:05:d3:f6:85:b7:a6:c8:95:62:0d:c7:bf:22:
1a:6d:b3:54:8d:25:e8:d3:82:ff:0b:61:2d:6d:1c:53:ce:22:
fe:65:1f:56:bd:b4:4d:3a:c2:a3:28:4d:eb:a1:cf:e5:a8:a4:
a1:79:3c:bc:42:f4:c4:23:5f:33:18:e1:64:0d:77:05:29:13:
f8:2b:66:61:8e:a2:ea:cd:62:f9:5f:b6:ea:c9:4e:1b:de:bc:
9e:d0:58:ac:79:6b:20:39:d4:c8:24:af:10:b7:1e:c8:50:e4:
44:b8:45:bf:ee:7e:e7:91:0f:52:79:55:be:68:94:6c:62:ec:
f4:38:da:8d:1a:b6:e2:c6:cf:e0:b8:ed:aa:c5:96:ed:31:67:
5a:4a:01:bd:c6:21:81:f0:f6:b3:dd:22:cd:16:30:51:b0:bd:
44:85:ae:3a:fb:ea:d5:fb:20:b6:fa:2b:2f:29:9a:91:06:a5:
1f:d5:66:e6:06:04:2d:01:18:f9:6f:ec:23:c2:66:17:7f:81:
8c:ce:85:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoE7VaxU7X+OV8te/roPSPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm
NDgwMWUwHhcNMjUxMDIxMDQwMDU0WhcNMjUxMDIyMDQwMDU0WjAzMTEwLwYDVQQD
EyhiZDM3ZTZjNzFkMDlmMWVmYThhMzU3ZmUyMDY5NGI0ZWUwNzIxYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqyRctkefM3fEy0oLrC8AcGh6Jwf
AFDPZkKTYcsk610syJcvTQgEERpjs/49jLxHDScNj33/ZkKrj8+IB4QqzGVIxf7t
ENKe1BEty4E4msJNOinFBj/R5d6a95rYQkJdOC1K0opIL4nQQ2BiMFxaertwMIkl
EWNsPgU+NhVF+4BBtulqpPa49RXlxJOneUeUWqtJbDDaQpBWMb3edbwcNDPesShi
L1jNxIGBhKjr4XswwFA5+9OYL3IJLDofF5XOe8+7b3M+K3pFV9bjUtzzC1GvsLVR
Hyr1hzg/TZUax1DTIY5soCSVg0Tn0spdMKsUjfh1/DssXbpb99/MVOOIdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL035scdCfHvqKNX/iBpS07gchu6MB8GA1UdIwQY
MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt
ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi
LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpzhSrF9
KcAdDElIY2onjfusINIoh5Ak+1dhI0PwL5c/sKBOB1+K+N4U+Ts8R5fnlN/BWIuv
iuilQXAF0/aFt6bIlWINx78iGm2zVI0l6NOC/wthLW0cU84i/mUfVr20TTrCoyhN
66HP5aikoXk8vEL0xCNfMxjhZA13BSkT+CtmYY6i6s1i+V+26slOG968ntBYrHlr
IDnUyCSvELceyFDkRLhFv+5+55EPUnlVvmiUbGLs9DjajRq24sbP4LjtqsWW7TFn
WkoBvcYhgfD2s90izRYwUbC9RIWuOvvq1fsgtvorLymakQalH9Vm5gYELQEY+W/s
I8JmF3+BjM6F5Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:06:10 2025 by rpki-client