Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: tmBlGnBVyt7h/1LkCcv5gSvxkRK5wXHZV0XS7/HpxJ8=
Subject key identifier: 3B:3B:7A:E6:C9:72:C0:B4:3D:89:FA:41:22:E6:08:82:39:7C:B7:50
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0199FC5916CBD651B7D03E3D8CBFD5ACB662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0F77
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: OWwYZSJZLPVtcsaKhiIdspgLPOlAbg+lnfCxrc8snT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:16:cb:d6:51:b7:d0:3e:3d:8c:bf:d5:ac:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=3b3b7ae6c972c0b43d89fa4122e60882397cb750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:09:2b:3c:8a:6b:bf:13:b1:01:69:04:2c:
a0:bc:8f:58:01:3a:cd:9f:59:0d:28:80:24:82:81:
c7:d5:14:b6:3d:2c:4c:f8:92:d4:3f:18:13:38:cf:
83:dc:05:2e:1b:6d:6a:99:4f:4f:40:26:23:d3:09:
e4:5b:85:f2:37:22:e7:3c:78:a5:72:85:ba:44:1b:
b9:f9:2c:49:42:9c:b7:47:20:19:27:86:07:f2:75:
79:ca:d5:d5:7f:f4:bb:13:4b:1b:b7:35:01:6e:24:
93:c3:05:36:7b:d3:9c:2e:9b:6b:f8:59:75:4d:c4:
8a:64:a5:13:3b:db:bf:49:61:09:ea:c8:ba:3e:39:
83:64:fb:ad:84:d5:c5:93:e8:79:24:77:13:f2:5a:
a1:45:b4:8b:63:6f:79:c9:eb:76:1e:4b:a4:68:ff:
95:6b:a0:3e:5f:d9:de:68:34:7e:ef:bd:6a:38:fb:
20:c3:0b:e2:d6:fb:85:f7:b3:de:f8:b3:78:cc:cc:
e7:71:94:6f:66:d2:ad:83:d3:8d:ab:1a:88:3f:71:
6b:1a:2d:6d:cf:53:cc:7d:5e:bd:58:6d:74:d0:a0:
f5:0f:12:ff:51:5c:75:92:e6:fa:ab:20:44:9d:be:
6a:70:12:61:4a:8e:3e:1f:86:de:08:c1:70:48:5b:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:7A:E6:C9:72:C0:B4:3D:89:FA:41:22:E6:08:82:39:7C:B7:50
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fd:ec:19:4b:a7:86:a4:cc:6d:86:72:fa:18:33:d1:8a:45:
72:a3:c5:3a:3e:61:b1:5a:d3:41:b6:1d:75:ee:75:24:cf:ab:
ec:c6:fb:45:25:39:ab:f0:fb:7e:1f:d4:21:d8:c1:77:69:77:
4b:a4:b9:66:84:f3:48:f4:12:08:cb:71:4a:4e:4b:9a:2f:d4:
bc:93:ac:2a:71:7c:db:90:60:ab:6c:59:49:c1:6e:d9:8d:1c:
db:16:68:90:e5:5d:aa:96:c3:97:8a:1e:28:9b:5d:ca:51:2e:
a5:cc:1c:fe:62:f7:dc:40:5f:c1:60:e7:8e:e6:95:64:7a:1d:
77:55:00:6a:61:b4:89:ef:ee:80:aa:dc:b8:24:4b:5f:61:6a:
2c:27:29:01:1e:ff:89:55:b5:a3:2a:c9:4c:69:08:b0:94:cb:
ca:c8:99:3b:d1:5a:5e:79:0d:69:4a:9e:94:9e:d5:b6:be:7f:
e5:bc:b5:b2:c2:8b:82:b1:f5:7e:d7:ce:3a:d3:46:5a:df:27:
8d:8f:ba:2e:93:ef:b6:b4:a7:ad:41:f5:41:05:ad:e4:67:47:
83:6f:00:90:51:11:56:55:b5:47:40:d0:bf:8d:b8:72:39:29:
16:23:20:af:44:d0:0b:f0:36:ca:e4:3e:bd:d1:24:b7:8c:00:
65:0f:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:19 2025 by rpki-client