Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: brg9aRlKxQFGav0lDVJbgLUpUkWL9ThN83DJQZqJxco=
Subject key identifier: 46:BD:EE:01:48:21:DD:7D:27:70:42:59:99:C9:79:07:CF:95:01:9E
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 0198D65FCFBAA75AFB32F8FAC635922826ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: HyPwmwNvj6CdMpZdefHGIg4yDzE.roa (hash: OXYxYv21hsNNqtBtEPFKc2/1/qoxMz48zojYmP3J5L8=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: kWxPv2ltPuBHvv8kOw5/SFfQ1fQr0c6zqauR7BBQ74g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cf:ba:a7:5a:fb:32:f8:fa:c6:35:92:28:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=46bdee014821dd7d2770425999c97907cf95019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:2f:26:1e:7e:c2:4d:07:74:45:52:83:01:
49:6d:6a:56:20:b4:bb:14:e9:0b:a9:b4:06:39:8b:
74:f1:23:df:8c:f9:b5:4e:d7:27:ef:73:fa:21:b6:
19:b7:8b:97:e3:69:42:12:d3:6e:74:18:74:2e:5a:
f1:7e:8e:c2:62:a0:3a:c3:bd:ba:b5:5b:18:07:70:
bf:36:0a:0e:de:f4:11:9f:9c:68:67:59:71:88:1f:
48:30:62:64:32:5d:69:8d:8c:81:a4:c4:24:1a:ab:
c1:5d:34:be:04:2f:5d:13:69:fd:48:c6:87:00:ff:
8f:b9:fa:38:97:96:f1:61:ae:3c:fd:93:b6:ef:f7:
45:d2:f4:5a:de:0f:11:22:48:2f:bb:9d:cf:5e:7e:
32:88:34:1e:35:5e:ca:96:a1:0e:21:ff:f5:ea:78:
36:bf:12:62:3f:c4:28:e7:04:b3:bb:5b:f5:e6:1c:
2f:b0:7a:b0:33:9c:d2:f0:7d:59:54:65:e7:b5:a6:
dd:15:5f:09:ac:14:1b:4b:dd:bb:98:dd:03:e1:ca:
15:b9:92:4a:57:18:47:2a:d7:d0:55:ef:1c:aa:89:
1b:5a:03:16:61:8a:23:16:58:b5:88:51:f5:5f:b9:
c8:e9:44:70:f7:20:af:cf:a2:f2:bf:b7:7f:b8:b7:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:EE:01:48:21:DD:7D:27:70:42:59:99:C9:79:07:CF:95:01:9E
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f5:88:ff:e2:30:bb:85:89:f3:72:c1:8c:60:bc:29:75:47:
86:1d:65:21:56:b7:0d:ec:3c:e3:0e:db:cb:74:61:3c:7d:61:
82:f4:29:13:4d:f9:c9:5c:0b:55:ab:34:44:ea:9c:03:57:bc:
cd:ae:48:a3:d2:f2:6d:a4:60:3a:c3:a5:01:03:dd:74:a0:24:
02:85:92:6e:4b:32:c9:66:92:ea:eb:1e:c7:3f:a0:59:d6:84:
d1:c0:2d:4c:94:17:c2:f7:fd:2c:d5:34:83:71:20:c4:d5:ba:
ae:7c:92:5b:9e:35:7c:1d:ee:39:18:c4:02:23:0b:f4:4c:4d:
90:b6:c3:69:89:7f:70:fd:31:6b:41:5c:92:a1:93:9f:dd:ef:
08:ea:97:28:d0:8e:58:1a:38:03:83:ae:4c:61:e3:15:7e:f0:
91:33:d5:ee:59:1a:ac:3d:87:39:24:da:97:b3:a2:30:50:d4:
bd:b2:dd:ed:69:f8:dd:34:df:b5:cc:9b:d3:ed:95:d2:90:36:
7b:0b:10:f0:b7:22:dc:08:49:a3:75:e9:5e:a1:c0:d2:e1:70:
ab:21:06:26:dc:b6:db:54:19:36:08:d1:74:cc:00:22:14:c1:
d7:6a:35:0b:ea:57:73:38:95:55:9f:fc:37:f3:2f:12:5e:16:
ca:79:ce:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8+6p1r7Mvj6xjWSKCbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNDNlNjIxZmUxMDA5NzAxZjYzNjY4NDNjMGFiYzQxZTE4
MGMxNDQwHhcNMjUwODIzMTAwMDU5WhcNMjUwODI0MTAwMDU5WjAzMTEwLwYDVQQD
Eyg0NmJkZWUwMTQ4MjFkZDdkMjc3MDQyNTk5OWM5NzkwN2NmOTUwMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PcvJh5+wk0HdEVSgwFJbWpWILS7
FOkLqbQGOYt08SPfjPm1Ttcn73P6IbYZt4uX42lCEtNudBh0Llrxfo7CYqA6w726
tVsYB3C/NgoO3vQRn5xoZ1lxiB9IMGJkMl1pjYyBpMQkGqvBXTS+BC9dE2n9SMaH
AP+Pufo4l5bxYa48/ZO27/dF0vRa3g8RIkgvu53PXn4yiDQeNV7KlqEOIf/16ng2
vxJiP8Qo5wSzu1v15hwvsHqwM5zS8H1ZVGXntabdFV8JrBQbS927mN0D4coVuZJK
VxhHKtfQVe8cqokbWgMWYYojFli1iFH1X7nI6URw9yCvz6Lyv7d/uLe91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa97gFIId19J3BCWZnJeQfPlQGeMB8GA1UdIwQY
MBaAFLBD5iH+EAlwH2NmhDwKvEHhgMFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2Mt
OGI1ZWE2NjQ4MTc2LzEvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2MtOGI1ZWE2NjQ4MTc2
LzEvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPWI/+Iw
u4WJ83LBjGC8KXVHhh1lIVa3Dew84w7by3RhPH1hgvQpE035yVwLVas0ROqcA1e8
za5Io9LybaRgOsOlAQPddKAkAoWSbksyyWaS6usexz+gWdaE0cAtTJQXwvf9LNU0
g3EgxNW6rnySW541fB3uORjEAiML9ExNkLbDaYl/cP0xa0FckqGTn93vCOqXKNCO
WBo4A4OuTGHjFX7wkTPV7lkarD2HOSTal7OiMFDUvbLd7Wn43TTftcyb0+2V0pA2
ewsQ8Lci3AhJo3XpXqHA0uFwqyEGJty221QZNgjRdMwAIhTB12o1C+pXcziVVZ/8
N/MvEl4WynnOKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:34 2025 by rpki-client