Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: +rG3rvOnx4CHr1L0njrMMKQd59wkWV3sGSG9e8M3JyI=
Subject key identifier: 0D:24:92:C1:44:4A:8A:0F:70:53:C7:50:BE:90:BD:9E:52:C9:93:6A
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 01993191A0247F53AFC49B68A93497436FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0981
Signing time: Wed 10 Sep 2025 03:00:51 +0000
Manifest this update: Wed 10 Sep 2025 03:00:51 +0000
Manifest next update: Thu 11 Sep 2025 03:00:51 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: IWAalTHv0+hSJjHfhRc9t8aO0sPLEdwAHfH66ECTRdo=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:a0:24:7f:53:af:c4:9b:68:a9:34:97:43:6f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Sep 10 03:00:51 2025 GMT
Not After : Sep 11 03:00:51 2025 GMT
Subject: CN=0d2492c1444a8a0f7053c750be90bd9e52c9936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:cf:1e:18:9a:ae:0f:28:e2:aa:ee:60:91:
3b:94:14:03:2f:5b:b2:74:9c:bc:cd:97:76:e7:f4:
ab:f2:6d:92:34:22:9a:78:76:c8:2a:74:fc:98:64:
24:81:a9:ca:1f:b8:ba:d3:f6:cd:f0:a9:71:2d:86:
c5:27:4c:3b:ef:6c:2b:68:69:6a:5e:5a:16:c2:60:
fd:c4:a0:c5:d5:8b:3b:02:b5:76:e8:a2:5b:42:e2:
f3:ca:5b:b3:cd:4f:8e:3e:80:4c:e7:a3:a2:c9:5e:
6a:4d:01:e9:7e:e7:59:ed:08:34:b1:47:72:35:79:
af:78:db:c3:1e:e6:91:e8:bf:bd:85:d3:45:a4:b4:
ad:03:f9:c8:fc:6c:be:bb:89:77:55:1f:22:81:b4:
2c:6b:d5:5a:0f:b5:3b:28:4b:e3:fb:9b:ef:d3:5b:
aa:62:ac:19:77:54:a0:d0:2b:5e:a5:03:04:65:b5:
27:3b:66:8c:e4:fc:00:9c:70:34:2f:17:b7:9b:e0:
09:5d:60:6b:a9:d4:11:2c:94:5f:12:e3:13:0e:96:
66:8d:eb:87:75:d1:d8:15:80:e1:76:f4:b8:b0:72:
d4:0c:6d:75:56:d1:06:fb:d1:f2:74:6c:d3:90:76:
5e:2c:62:6e:93:0f:ea:5e:e8:82:9a:e6:9a:e4:9f:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:92:C1:44:4A:8A:0F:70:53:C7:50:BE:90:BD:9E:52:C9:93:6A
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f9:b1:59:d8:b9:fb:c5:f3:e4:86:9c:0f:cc:66:94:e7:d7:
7d:1a:19:55:9f:11:73:7f:19:f9:a9:35:32:35:47:d3:d7:09:
2c:c8:38:a4:91:15:19:80:06:fe:d7:0b:81:3c:11:4f:32:b5:
8c:82:e8:75:f1:db:07:53:db:d4:f8:b6:a1:52:f2:4a:54:39:
11:07:c4:d8:c4:9c:b6:97:bf:1d:ed:ad:f0:cd:f6:39:d7:00:
62:8a:1a:72:07:98:33:19:f6:3c:20:8b:57:fc:71:58:3b:c2:
d2:ec:64:10:46:03:9e:fb:8a:00:8e:84:5e:a1:34:f7:3a:c1:
2d:93:b5:b6:49:89:36:34:68:a6:a2:22:47:95:bd:08:97:1c:
fa:50:3f:14:13:9e:b9:f9:f0:88:3d:d2:ac:59:43:a3:85:79:
36:10:21:68:00:8c:10:e2:b1:64:ca:88:32:76:e7:6f:a2:94:
71:51:19:35:a0:19:2c:1f:d8:a5:a1:a5:63:2b:e4:85:49:e1:
ab:bb:1f:96:53:c2:55:1e:82:62:58:52:95:13:d3:dd:82:72:
43:61:fa:68:14:26:ae:4c:5d:ec:d2:87:4d:cd:b8:0c:aa:ca:
07:18:c1:03:46:bd:fa:f2:ca:e5:90:74:88:f6:13:7c:ff:cb:
b1:c6:b2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxkaAkf1OvxJtoqTSXQ2/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3
MmY5NzkwHhcNMjUwOTEwMDMwMDUxWhcNMjUwOTExMDMwMDUxWjAzMTEwLwYDVQQD
EygwZDI0OTJjMTQ0NGE4YTBmNzA1M2M3NTBiZTkwYmQ5ZTUyYzk5MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmLPHhiarg8o4qruYJE7lBQDL1uy
dJy8zZd25/Sr8m2SNCKaeHbIKnT8mGQkganKH7i60/bN8KlxLYbFJ0w772wraGlq
XloWwmD9xKDF1Ys7ArV26KJbQuLzyluzzU+OPoBM56OiyV5qTQHpfudZ7Qg0sUdy
NXmveNvDHuaR6L+9hdNFpLStA/nI/Gy+u4l3VR8igbQsa9VaD7U7KEvj+5vv01uq
YqwZd1Sg0CtepQMEZbUnO2aM5PwAnHA0Lxe3m+AJXWBrqdQRLJRfEuMTDpZmjeuH
ddHYFYDhdvS4sHLUDG11VtEG+9HydGzTkHZeLGJukw/qXuiCmuaa5J8YMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0kksFESooPcFPHUL6QvZ5SyZNqMB8GA1UdIwQY
MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt
NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi
LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/mxWdi5
+8Xz5IacD8xmlOfXfRoZVZ8Rc38Z+ak1MjVH09cJLMg4pJEVGYAG/tcLgTwRTzK1
jILodfHbB1Pb1Pi2oVLySlQ5EQfE2MSctpe/He2t8M32OdcAYooacgeYMxn2PCCL
V/xxWDvC0uxkEEYDnvuKAI6EXqE09zrBLZO1tkmJNjRopqIiR5W9CJcc+lA/FBOe
ufnwiD3SrFlDo4V5NhAhaACMEOKxZMqIMnbnb6KUcVEZNaAZLB/YpaGlYyvkhUnh
q7sfllPCVR6CYlhSlRPT3YJyQ2H6aBQmrkxd7NKHTc24DKrKBxjBA0a9+vLK5ZB0
iPYTfP/LscaytQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 09:42:00 2025 by rpki-client