Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: F5gqqmcMxyAAuhDMt2stKInBfB5OoIEtcXv7isoLxa4=
Subject key identifier: B6:87:0D:15:4E:24:3B:26:3F:B1:BF:C1:7A:11:96:49:B8:8D:E0:59
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0198D4E0CCEF0D47480581C96778E12E38AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0CC2
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: Cd6A8HdMV_hMwNvSjXP9Yvk91SE.roa (hash: XWcdd7x7brcdYxv0iQ9eqPIIfN43ZARzqkSY7W4em2k=)
2: HOFuYJA21RRv709Gkqp-YVI1pnc.roa (hash: /Ilnzb7fkIj0wD4Gc1ajFjx70b+0n8vZYhfy5zJo85s=)
3: MowoECV5lDW6azcCpIq4fvtLDfg.roa (hash: vAZ4UDoygSJ5vTlsidd9Ct+y4mALVJS5sangnD4H6Eo=)
4: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: noF95itxfv+CI5EzhUANDu9/poCmR6F1Sv/zx82lRiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cc:ef:0d:47:48:05:81:c9:67:78:e1:2e:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=b6870d154e243b263fb1bfc17a119649b88de059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:06:4c:9b:7a:15:65:fe:d4:d5:e4:47:b9:
bf:b6:a0:b5:89:19:5a:46:a1:d4:5e:bf:84:3a:c5:
69:a8:ac:46:87:b7:98:c6:09:9f:fc:85:49:84:44:
f1:5c:a3:c3:5f:72:a6:c6:53:83:59:ee:d6:f9:65:
3b:44:ab:91:40:f6:51:9d:c7:59:5e:9d:17:52:49:
0e:2d:39:5b:52:9c:cb:cc:22:ed:e1:0c:73:b7:05:
85:9c:85:b9:c9:e3:66:c8:73:7c:12:0e:ec:5c:cd:
c2:c1:5a:b2:fc:a7:7f:4d:1d:2a:42:c9:f7:58:50:
c8:ba:6b:68:62:b4:cd:10:b8:7c:2a:7e:9c:0b:e4:
fb:d1:33:e6:5a:79:56:c5:66:d4:e0:84:d8:ec:c1:
aa:67:6a:34:56:b1:a0:09:d1:82:85:83:55:79:16:
9e:4f:9f:5d:d5:0b:53:1e:33:53:12:3e:e5:d4:f3:
d1:f9:d9:ef:8c:2f:b2:20:37:d0:4e:66:81:c7:a5:
bf:88:da:cf:26:69:43:c8:fd:49:49:db:75:8c:67:
6b:a7:3c:77:e5:29:7b:58:38:1e:40:14:ac:4a:71:
40:3f:17:bd:5f:95:88:13:5d:d4:c8:9e:ee:07:95:
b4:db:7b:48:60:c6:bd:87:01:4a:78:a2:2b:54:e6:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:87:0D:15:4E:24:3B:26:3F:B1:BF:C1:7A:11:96:49:B8:8D:E0:59
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:81:02:f9:1b:e4:b2:75:63:68:f1:90:6f:c0:c1:80:f0:a9:
d9:50:fa:78:ce:94:2e:a5:10:ac:76:16:da:46:6f:8c:eb:68:
fa:a5:9f:23:e7:d4:4b:b6:e6:80:c7:83:44:0d:d6:2c:82:46:
51:b1:bd:dd:83:9a:f4:45:e6:89:4a:1a:5d:77:ef:0f:17:64:
44:d8:74:e8:eb:87:9e:1d:3e:83:57:27:30:3d:bf:e2:45:0d:
e2:fd:cb:0f:6a:b5:be:dc:7d:55:b0:89:00:9e:d3:4e:c6:46:
4d:6d:da:aa:50:23:9e:5e:24:a9:72:4b:5d:58:b0:1c:1a:0a:
21:5e:ca:8a:ff:50:53:b7:f3:5c:2e:af:92:56:eb:40:b0:d2:
1c:a4:86:80:31:ed:52:e1:48:77:89:9f:47:9c:d6:48:6c:ea:
9b:c3:c3:41:c1:23:0e:2b:24:ce:44:c1:99:4a:8b:98:07:f4:
94:d6:a8:a1:cd:da:aa:f9:b8:cf:3d:28:43:2d:82:7c:18:b9:
97:41:9a:a6:85:86:69:4f:1e:d6:c9:84:56:a1:8e:56:2e:9b:
c8:74:66:c3:12:7a:af:05:1a:19:dd:c7:91:91:56:ba:7f:ca:
a6:04:5e:0f:cc:b3:b2:40:88:2a:ac:8f:ae:46:6e:87:a1:da:
bc:df:57:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MzvDUdIBYHJZ3jhLjivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjUwODIzMDMwMjM4WhcNMjUwODI0MDMwMjM4WjAzMTEwLwYDVQQD
EyhiNjg3MGQxNTRlMjQzYjI2M2ZiMWJmYzE3YTExOTY0OWI4OGRlMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqMGTJt6FWX+1NXkR7m/tqC1iRla
RqHUXr+EOsVpqKxGh7eYxgmf/IVJhETxXKPDX3KmxlODWe7W+WU7RKuRQPZRncdZ
Xp0XUkkOLTlbUpzLzCLt4QxztwWFnIW5yeNmyHN8Eg7sXM3CwVqy/Kd/TR0qQsn3
WFDIumtoYrTNELh8Kn6cC+T70TPmWnlWxWbU4ITY7MGqZ2o0VrGgCdGChYNVeRae
T59d1QtTHjNTEj7l1PPR+dnvjC+yIDfQTmaBx6W/iNrPJmlDyP1JSdt1jGdrpzx3
5Sl7WDgeQBSsSnFAPxe9X5WIE13UyJ7uB5W023tIYMa9hwFKeKIrVOac1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaHDRVOJDsmP7G/wXoRlkm4jeBZMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoEC+Rvk
snVjaPGQb8DBgPCp2VD6eM6ULqUQrHYW2kZvjOto+qWfI+fUS7bmgMeDRA3WLIJG
UbG93YOa9EXmiUoaXXfvDxdkRNh06OuHnh0+g1cnMD2/4kUN4v3LD2q1vtx9VbCJ
AJ7TTsZGTW3aqlAjnl4kqXJLXViwHBoKIV7Kiv9QU7fzXC6vklbrQLDSHKSGgDHt
UuFId4mfR5zWSGzqm8PDQcEjDiskzkTBmUqLmAf0lNaooc3aqvm4zz0oQy2CfBi5
l0GapoWGaU8e1smEVqGOVi6byHRmwxJ6rwUaGd3HkZFWun/KpgReD8yzskCIKqyP
rkZuh6HavN9XZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:50 2025 by rpki-client