Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: TNA2g7OaGi3AEpx/lqyfchkjWTsQIJgYxKIR4h5GJhE=
Subject key identifier: E9:11:A6:0C:71:7A:D0:CE:B9:81:9F:81:39:DE:25:F0:B0:FE:62:09
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0198D4744FF608D1DCE81F56A942105D9564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0B1A
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: Ke6wNk6dp/5HGvJJa52e8IMP+uKQSE+JyXOTAeWOqxI=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4f:f6:08:d1:dc:e8:1f:56:a9:42:10:5d:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=e911a60c717ad0ceb9819f8139de25f0b0fe6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:4c:52:7e:b9:10:3a:80:65:50:ef:e9:a7:
2a:84:57:a9:f8:9b:66:53:dc:43:40:91:18:f1:f7:
78:c9:1b:3b:06:28:96:fe:df:7d:d6:cb:6b:07:a4:
aa:1e:77:fa:43:b4:37:af:46:2e:62:43:f2:d6:cf:
e0:48:00:a4:f4:e3:d3:ec:59:74:86:27:9f:fe:9c:
5c:17:85:9e:cb:50:1c:41:de:32:f3:17:e9:7e:2e:
c0:48:af:12:d4:87:1e:4f:40:cb:d6:db:d4:8b:ff:
5a:f0:a0:f4:6a:39:f9:e7:74:5d:0a:ee:71:70:e0:
30:0f:c4:31:0a:00:88:2e:4b:7d:61:c8:d3:eb:fd:
20:d3:22:ec:3d:43:ec:af:cd:db:79:18:61:dd:61:
29:55:fb:19:e7:f9:74:6c:3d:b7:8f:04:37:10:1e:
94:84:19:61:8e:d0:21:ce:4f:21:e8:15:f4:4a:64:
2b:4a:08:b7:73:88:e7:c3:86:f9:f0:e5:24:ab:0b:
b4:39:cc:d4:81:f6:93:d6:70:d0:57:eb:46:2f:24:
16:06:d8:55:d8:4a:80:76:46:6b:c9:6b:ec:14:60:
60:20:e9:ff:28:07:52:20:29:74:b8:b8:6b:f1:0f:
5a:a6:e8:93:28:73:72:da:a4:7b:c6:9c:ff:be:85:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:A6:0C:71:7A:D0:CE:B9:81:9F:81:39:DE:25:F0:B0:FE:62:09
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:91:9a:ef:6c:44:77:0c:ce:5c:a5:dd:68:63:1d:8c:f1:
cd:4c:da:c0:dc:ea:4e:63:6f:0c:2a:35:21:b7:17:13:64:20:
7b:43:4d:30:30:ed:eb:14:7d:48:8c:79:a4:6c:2d:f3:0d:a3:
37:5f:f3:62:3c:c1:db:1f:f5:19:14:61:ae:00:68:e5:de:50:
7e:c4:31:3c:91:36:34:3b:07:87:39:e5:eb:35:d6:da:44:79:
c0:bb:3e:8c:47:f5:f5:c8:03:57:c1:8a:bd:51:c4:d5:cb:05:
70:e9:b8:29:20:5b:26:fb:96:3f:ca:6b:32:f8:22:be:93:2a:
08:2a:34:00:25:1f:d0:7a:47:77:75:b4:d8:20:19:6d:c1:ca:
39:eb:50:65:21:ce:29:88:a9:da:13:85:e9:75:5e:8e:70:9c:
64:a9:e3:59:d2:f8:65:dc:90:0f:23:5d:bf:ee:d9:4e:ed:cf:
db:89:6e:9d:5f:0e:e3:12:21:9b:2f:a4:2a:5b:57:eb:3e:55:
43:e2:f4:ad:5a:50:7c:50:d9:1a:bd:6c:96:20:8f:6e:ac:7e:
19:72:6a:7d:11:35:6a:1c:d4:bb:41:de:57:36:b4:32:57:6f:
41:bc:a5:c9:bb:d9:b0:af:ef:b5:ef:fe:2e:09:37:e0:07:58:
ea:66:e8:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdE/2CNHc6B9WqUIQXZVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx
ZWRlZmQwHhcNMjUwODIzMDEwNDA5WhcNMjUwODI0MDEwNDA5WjAzMTEwLwYDVQQD
EyhlOTExYTYwYzcxN2FkMGNlYjk4MTlmODEzOWRlMjVmMGIwZmU2MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33hMUn65EDqAZVDv6acqhFep+Jtm
U9xDQJEY8fd4yRs7BiiW/t991strB6SqHnf6Q7Q3r0YuYkPy1s/gSACk9OPT7Fl0
hief/pxcF4Wey1AcQd4y8xfpfi7ASK8S1IceT0DL1tvUi/9a8KD0ajn553RdCu5x
cOAwD8QxCgCILkt9YcjT6/0g0yLsPUPsr83beRhh3WEpVfsZ5/l0bD23jwQ3EB6U
hBlhjtAhzk8h6BX0SmQrSgi3c4jnw4b58OUkqwu0OczUgfaT1nDQV+tGLyQWBthV
2EqAdkZryWvsFGBgIOn/KAdSICl0uLhr8Q9apuiTKHNy2qR7xpz/voVm8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkRpgxxetDOuYGfgTneJfCw/mIJMB8GA1UdIwQY
MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt
ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk
LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkmRmu9s
RHcMzlyl3WhjHYzxzUzawNzqTmNvDCo1IbcXE2Qge0NNMDDt6xR9SIx5pGwt8w2j
N1/zYjzB2x/1GRRhrgBo5d5QfsQxPJE2NDsHhznl6zXW2kR5wLs+jEf19cgDV8GK
vVHE1csFcOm4KSBbJvuWP8prMvgivpMqCCo0ACUf0HpHd3W02CAZbcHKOetQZSHO
KYip2hOF6XVejnCcZKnjWdL4ZdyQDyNdv+7ZTu3P24lunV8O4xIhmy+kKltX6z5V
Q+L0rVpQfFDZGr1sliCPbqx+GXJqfRE1ahzUu0HeVza0MldvQbylybvZsK/vte/+
Lgk34AdY6mbo8A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:31 2025 by rpki-client