Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: bdqDYfNMG8TAa7eOFCZShlYU8tdH9guZlbD8wDkYRCo=
Subject key identifier: 7D:95:51:E2:DF:2C:FB:B2:CD:1D:A8:31:FE:21:B1:CE:FD:6A:86:6F
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 0198D51593735EAFD06C0A49FBB00654C034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 15A2
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: ImePWO8BstQO3epkm0wXze29znw67/M+M1Fxisuz5ug=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:93:73:5e:af:d0:6c:0a:49:fb:b0:06:54:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=7d9551e2df2cfbb2cd1da831fe21b1cefd6a866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:0b:e9:dd:26:d7:af:79:5a:52:47:89:10:
7e:be:6d:ee:08:37:c2:a8:b4:23:f7:80:11:a7:b8:
13:b2:73:b3:5f:a1:04:5a:f9:04:d1:24:90:52:50:
e3:ca:77:63:31:03:05:52:3a:92:19:0f:33:4c:06:
c0:70:b8:53:80:f6:2d:ed:fb:46:c4:46:1f:85:99:
cc:97:9f:4a:05:4b:29:5b:ba:5a:01:0f:39:df:de:
cb:73:4a:62:d2:38:70:99:73:34:e5:a3:38:25:c9:
04:ea:5b:66:b1:0b:29:d0:a0:bb:c1:6d:fa:6e:59:
13:29:c6:b3:ca:83:c9:23:ae:19:79:5f:c1:d5:ac:
65:fd:23:8b:58:a1:0b:e4:c1:92:b0:9a:4f:de:e9:
4c:3b:e1:b3:f7:6b:45:5d:8f:31:1d:b3:7b:d7:8f:
11:fb:e0:bf:8f:f0:70:58:94:c9:93:7c:52:1d:ba:
43:f8:09:c2:5f:9f:c3:ae:df:90:54:3e:e2:68:27:
13:f4:91:86:aa:d2:ac:cb:63:36:cb:b2:3a:14:d0:
09:53:0d:7b:5d:31:64:d4:84:95:b3:9c:d7:f9:2e:
22:43:0a:ad:30:a5:7f:0e:94:fa:ab:98:d0:c7:ff:
38:a2:43:8b:3d:5a:48:c5:36:ff:b5:d0:4e:7e:59:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:51:E2:DF:2C:FB:B2:CD:1D:A8:31:FE:21:B1:CE:FD:6A:86:6F
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:85:bf:bb:6a:89:36:b1:ca:fe:57:e5:18:bb:f9:d8:62:
47:2f:7b:11:fe:3d:3d:4d:b9:d1:91:dc:fa:b9:bd:60:80:75:
21:08:fe:07:57:37:dc:97:e9:70:6c:a8:f9:b5:1c:0b:28:74:
f9:50:c5:55:77:f9:8a:3c:f6:01:75:c8:23:05:d2:91:15:04:
12:ce:9e:43:a5:05:6f:d2:6f:f3:86:3a:03:fd:e2:76:80:bd:
69:8a:0c:c3:c1:59:66:96:67:ac:e0:46:ff:38:bc:f5:80:5a:
f1:49:5a:db:2f:18:07:e6:07:6f:53:32:c1:a0:a4:da:4f:77:
33:c5:3d:fa:65:46:2f:d8:af:37:e9:59:87:bb:bc:ae:2d:45:
48:b3:44:3e:9c:f7:2a:91:44:35:00:c0:a0:07:f0:c2:20:b2:
10:fb:eb:04:4b:0e:eb:f3:bf:06:32:57:47:5a:66:18:2f:94:
87:77:52:25:e8:9d:d5:b1:2a:ee:58:d1:a7:5d:fa:1b:42:1c:
ef:78:a7:cf:bd:7b:42:eb:06:5d:90:18:f2:d6:0a:3d:11:97:
c5:ab:ac:27:9e:ef:3b:40:19:22:4a:6c:0b:a8:ba:d5:5d:2c:
ea:90:4c:61:a0:b3:74:9e:0b:32:fe:a2:ff:11:da:fb:25:a3:
ba:a0:5f:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZNzXq/QbApJ+7AGVMA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjUwODIzMDQwMDE3WhcNMjUwODI0MDQwMDE3WjAzMTEwLwYDVQQD
Eyg3ZDk1NTFlMmRmMmNmYmIyY2QxZGE4MzFmZTIxYjFjZWZkNmE4NjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkesL6d0m1695WlJHiRB+vm3uCDfC
qLQj94ARp7gTsnOzX6EEWvkE0SSQUlDjyndjMQMFUjqSGQ8zTAbAcLhTgPYt7ftG
xEYfhZnMl59KBUspW7paAQ85397Lc0pi0jhwmXM05aM4JckE6ltmsQsp0KC7wW36
blkTKcazyoPJI64ZeV/B1axl/SOLWKEL5MGSsJpP3ulMO+Gz92tFXY8xHbN7148R
++C/j/BwWJTJk3xSHbpD+AnCX5/Drt+QVD7iaCcT9JGGqtKsy2M2y7I6FNAJUw17
XTFk1ISVs5zX+S4iQwqtMKV/DpT6q5jQx/84okOLPVpIxTb/tdBOfllaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2VUeLfLPuyzR2oMf4hsc79aoZvMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3aFv7tq
iTaxyv5X5Ri7+dhiRy97Ef49PU250ZHc+rm9YIB1IQj+B1c33JfpcGyo+bUcCyh0
+VDFVXf5ijz2AXXIIwXSkRUEEs6eQ6UFb9Jv84Y6A/3idoC9aYoMw8FZZpZnrOBG
/zi89YBa8Ula2y8YB+YHb1MywaCk2k93M8U9+mVGL9ivN+lZh7u8ri1FSLNEPpz3
KpFENQDAoAfwwiCyEPvrBEsO6/O/BjJXR1pmGC+Uh3dSJeid1bEq7ljRp136G0Ic
73inz717QusGXZAY8tYKPRGXxausJ57vO0AZIkpsC6i61V0s6pBMYaCzdJ4LMv6i
/xHa+yWjuqBfCw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:13 2025 by rpki-client