Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: vmGsomSQKD/EeUdERM8OxTnaZgl0AfohsmeqlcK8KJY=
Subject key identifier: 2D:4D:5A:0B:66:A8:4D:51:7A:F1:0D:69:E8:DB:C4:75:F4:9C:A2:9C
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 0198D5F1605C6B21B23BC020E55F10F814B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 057A
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: vqUrwBmcHHLhUOQSq0qMfjPF5h6mY3VwBENgGWqrVPU=)
2: h9mPBIiEAVg09Wvp-nPwwNfG1HI.roa (hash: FlDtjDfotSf1SuYyQZURv1Yp5xPx0MQ3seyoxZ3Kltw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:60:5c:6b:21:b2:3b:c0:20:e5:5f:10:f8:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=2d4d5a0b66a84d517af10d69e8dbc475f49ca29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:74:00:18:02:c7:f6:fd:2c:05:17:09:65:
bd:26:34:9a:01:1e:f1:da:85:f7:2e:83:59:02:d4:
25:86:60:09:38:02:64:55:e0:59:95:df:7d:7b:a9:
27:7d:1a:7e:2b:99:95:03:b9:70:90:8a:82:a5:f4:
67:2b:ab:88:96:68:da:3f:5a:fd:72:29:b9:5b:f0:
2a:7e:5e:1e:40:fb:6b:1d:b5:ff:1e:01:a5:a3:e1:
d7:bc:3a:c7:e6:97:bc:8b:3f:e2:01:6f:6c:49:8c:
21:78:ea:ac:34:07:b3:17:fb:0c:15:62:86:33:a1:
07:6b:cf:b9:61:76:a7:ac:ec:86:a3:dc:f9:79:07:
64:63:7e:4c:74:aa:ff:bd:ea:4c:cd:7f:3d:3f:ee:
d3:fb:6d:78:db:4f:d2:45:11:81:95:14:db:68:88:
91:4c:28:2e:f3:15:03:ae:f9:33:1f:af:5f:06:c2:
3c:6f:40:fd:7a:2e:92:ac:6d:c8:51:93:0e:1b:39:
07:fe:49:95:48:5f:fc:5b:83:12:ff:c5:4e:07:be:
b5:d1:1d:80:aa:c6:1b:b6:c7:1a:f8:5e:f2:31:83:
f6:13:06:e1:61:45:d7:ba:ee:1e:db:1a:37:0a:7b:
4f:40:17:c9:f4:bc:ec:db:7b:16:c3:03:97:98:81:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:5A:0B:66:A8:4D:51:7A:F1:0D:69:E8:DB:C4:75:F4:9C:A2:9C
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:36:f6:61:ba:f2:0b:f2:1a:89:57:de:55:29:e1:ed:a9:38:
a9:62:58:01:8a:36:40:f3:2a:b1:be:53:2e:7d:ad:9e:5a:a8:
c5:e8:47:38:fb:54:ae:a1:ca:c2:5e:63:dd:18:17:03:bb:e7:
28:83:7c:a5:e4:3e:c8:33:11:01:42:d4:bd:8f:51:f9:b9:92:
01:66:cb:f0:02:e1:bb:14:06:14:7a:7d:e2:fc:62:d5:aa:bf:
15:24:dc:58:02:56:6b:b7:28:98:51:ea:2f:d3:d0:92:69:b8:
99:e3:36:6e:aa:59:89:24:ba:95:d6:a5:64:41:4f:f8:49:4d:
eb:b7:f8:71:b2:fd:cd:94:20:d8:16:a6:ee:59:7e:3c:c3:43:
a1:1c:9c:3d:73:0f:af:86:67:61:71:f4:33:a7:0f:1a:92:3d:
31:15:2e:bc:1b:03:8c:26:02:bb:a0:c9:e8:5e:63:ab:8c:f9:
76:56:06:f1:fa:0d:02:3f:63:e0:5c:8e:ce:a5:e5:23:b3:10:
6a:dd:ce:36:e4:44:f5:3d:a1:87:3a:98:99:57:b2:7d:07:e0:
96:6f:e0:0a:02:82:a9:d6:10:aa:79:7f:6a:a6:f9:be:b7:62:
b2:5e:59:4c:8a:58:a3:5f:05:33:f9:89:7e:8a:6c:bd:5f:84:
41:8b:d3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WBcayGyO8Ag5V8Q+BSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjUwODIzMDgwMDIyWhcNMjUwODI0MDgwMDIyWjAzMTEwLwYDVQQD
EygyZDRkNWEwYjY2YTg0ZDUxN2FmMTBkNjllOGRiYzQ3NWY0OWNhMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYV0ABgCx/b9LAUXCWW9JjSaAR7x
2oX3LoNZAtQlhmAJOAJkVeBZld99e6knfRp+K5mVA7lwkIqCpfRnK6uIlmjaP1r9
cim5W/Aqfl4eQPtrHbX/HgGlo+HXvDrH5pe8iz/iAW9sSYwheOqsNAezF/sMFWKG
M6EHa8+5YXanrOyGo9z5eQdkY35MdKr/vepMzX89P+7T+21420/SRRGBlRTbaIiR
TCgu8xUDrvkzH69fBsI8b0D9ei6SrG3IUZMOGzkH/kmVSF/8W4MS/8VOB7610R2A
qsYbtsca+F7yMYP2EwbhYUXXuu4e2xo3CntPQBfJ9Lzs23sWwwOXmIFcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1NWgtmqE1RevENaejbxHX0nKKcMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTb2Ybry
C/IaiVfeVSnh7ak4qWJYAYo2QPMqsb5TLn2tnlqoxehHOPtUrqHKwl5j3RgXA7vn
KIN8peQ+yDMRAULUvY9R+bmSAWbL8ALhuxQGFHp94vxi1aq/FSTcWAJWa7comFHq
L9PQkmm4meM2bqpZiSS6ldalZEFP+ElN67f4cbL9zZQg2Bam7ll+PMNDoRycPXMP
r4ZnYXH0M6cPGpI9MRUuvBsDjCYCu6DJ6F5jq4z5dlYG8foNAj9j4FyOzqXlI7MQ
at3ONuRE9T2hhzqYmVeyfQfglm/gCgKCqdYQqnl/aqb5vrdisl5ZTIpYo18FM/mJ
fopsvV+EQYvTaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:33 2025 by rpki-client