Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: tcAMeaE4gxvDnsLQf4dAiih6vsw6RsjeDWKr5/sGRYM=
Subject key identifier: 54:F5:02:7A:A8:EE:49:5A:E5:F8:09:CD:1D:ED:80:7D:7B:12:3C:F8
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 0198D660C6D2527CA29C3874C74DD910EA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 120C
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: pGRRy+S4zoBB74MKv4DecOh1D8wR8bH0Stz/g+Kq2iQ=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c6:d2:52:7c:a2:9c:38:74:c7:4d:d9:10:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=54f5027aa8ee495ae5f809cd1ded807d7b123cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:ef:8e:54:62:8b:0f:a5:25:ce:91:b0:e3:
8a:4f:8b:ab:cd:55:de:30:f4:00:4b:26:ad:5a:c6:
7a:70:54:0b:00:96:29:49:7a:a0:56:c9:ef:c4:90:
58:ae:9f:a1:1a:3a:bf:7b:ed:50:8f:00:8b:3a:41:
41:99:bf:b0:bb:f8:e6:26:13:c2:35:11:82:79:14:
27:97:44:6f:af:ed:fd:c2:2b:27:fd:38:d1:77:ca:
2a:7e:c4:39:a1:0d:05:67:8a:9a:bd:c2:95:39:5b:
53:96:43:30:ec:78:86:3e:2e:9b:28:aa:8d:af:78:
92:2a:58:82:89:40:3c:8d:77:af:f7:ce:d4:ed:52:
a1:99:1d:55:4d:9f:63:3b:87:57:87:8a:0a:c6:8c:
0c:82:db:34:f8:78:42:90:87:f8:eb:d1:d3:4f:17:
b5:40:ea:18:9b:c1:cf:f1:94:b7:64:e4:61:4a:7f:
ad:5b:d7:d1:e7:08:a0:f5:9c:69:ee:f8:c6:f8:4f:
c6:84:0f:9c:ea:91:db:8e:a0:fc:14:c0:94:51:62:
79:32:c0:54:54:30:23:5b:36:94:e8:6c:df:38:fc:
f2:07:a4:9a:e8:1b:7c:7c:3e:84:60:c2:fc:97:54:
01:9a:4e:b3:63:9e:40:bf:f9:cb:7b:fc:ae:bf:2e:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:02:7A:A8:EE:49:5A:E5:F8:09:CD:1D:ED:80:7D:7B:12:3C:F8
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:4b:2d:ab:28:7e:af:c2:d5:3e:62:08:f1:37:aa:7a:d8:
c9:08:39:7e:cc:8b:26:2c:33:a7:06:33:19:82:83:82:99:f6:
9b:d1:c9:39:bc:b2:53:6c:cf:86:50:a3:b7:7e:b3:4c:38:e4:
6a:2b:0b:ab:dc:2e:be:fa:48:b3:0a:cd:1c:a0:32:eb:ba:b2:
03:e0:20:aa:a7:2f:e6:61:b9:0e:33:df:22:d0:20:16:6f:bc:
7e:6b:f4:98:e8:a8:77:90:02:2c:47:94:47:2d:ad:a2:d4:ad:
92:b2:43:4e:b8:70:80:87:a5:57:b2:56:45:2b:6f:0b:70:8f:
fc:fd:92:5b:6a:3b:2e:32:49:af:e4:27:5e:ce:e5:83:21:fe:
42:25:94:22:21:1f:e9:4e:ad:f1:6c:a1:16:03:55:5e:8a:c9:
f2:c4:fa:eb:b3:81:ee:44:51:ae:15:08:52:aa:a7:8b:10:52:
b0:c0:c6:18:43:44:16:36:2c:0b:75:ed:69:5a:e4:9e:ad:44:
e3:20:4a:46:7a:c0:f3:f3:56:79:c8:7d:e4:94:cb:3f:ed:d6:
2d:6f:66:29:43:5e:d1:42:25:8d:3f:b2:8b:6d:99:18:29:07:
2a:32:87:5d:10:c5:c0:f9:cd:c8:c5:0f:10:d5:c1:f9:b8:10:
57:03:a0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMbSUnyinDh0x03ZEOo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj
ZTU5ZmQwHhcNMjUwODIzMTAwMjAzWhcNMjUwODI0MTAwMjAzWjAzMTEwLwYDVQQD
Eyg1NGY1MDI3YWE4ZWU0OTVhZTVmODA5Y2QxZGVkODA3ZDdiMTIzY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uPvjlRiiw+lJc6RsOOKT4urzVXe
MPQASyatWsZ6cFQLAJYpSXqgVsnvxJBYrp+hGjq/e+1QjwCLOkFBmb+wu/jmJhPC
NRGCeRQnl0Rvr+39wisn/TjRd8oqfsQ5oQ0FZ4qavcKVOVtTlkMw7HiGPi6bKKqN
r3iSKliCiUA8jXev987U7VKhmR1VTZ9jO4dXh4oKxowMgts0+HhCkIf469HTTxe1
QOoYm8HP8ZS3ZORhSn+tW9fR5wig9Zxp7vjG+E/GhA+c6pHbjqD8FMCUUWJ5MsBU
VDAjWzaU6GzfOPzyB6Sa6Bt8fD6EYML8l1QBmk6zY55Av/nLe/yuvy6UIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT1Anqo7kla5fgJzR3tgH17Ejz4MB8GA1UdIwQY
MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt
NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl
LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7NLLaso
fq/C1T5iCPE3qnrYyQg5fsyLJiwzpwYzGYKDgpn2m9HJObyyU2zPhlCjt36zTDjk
aisLq9wuvvpIswrNHKAy67qyA+Agqqcv5mG5DjPfItAgFm+8fmv0mOiod5ACLEeU
Ry2totStkrJDTrhwgIelV7JWRStvC3CP/P2SW2o7LjJJr+QnXs7lgyH+QiWUIiEf
6U6t8WyhFgNVXorJ8sT667OB7kRRrhUIUqqnixBSsMDGGENEFjYsC3XtaVrknq1E
4yBKRnrA8/NWech95JTLP+3WLW9mKUNe0UIljT+yi22ZGCkHKjKHXRDFwPnNyMUP
ENXB+bgQVwOg/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:33 2025 by rpki-client