Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: AFFLEGOggkN655HoR5uywZGwKOVBODnufOvhkpjhfX4=
Subject key identifier: FB:B1:C4:D6:AE:09:69:32:37:29:99:29:3C:14:D7:6D:58:14:B3:31
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 0198D54E649B3B0BAEDCF326F0F62298F4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: s4JrZ6fUWHithnJZdawH2xDqihKjGXNn7yyAgLEfSh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:64:9b:3b:0b:ae:dc:f3:26:f0:f6:22:98:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=fbb1c4d6ae096932372999293c14d76d5814b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:ec:bd:b5:94:35:8c:fc:fa:c5:ff:a3:5f:
c8:b6:8f:d5:19:66:55:65:09:9f:bb:47:7e:4b:1b:
13:8a:5c:54:65:e0:dc:a4:98:7b:5a:20:47:e5:52:
17:d9:56:6e:1e:27:f7:3d:e1:7d:54:a4:b7:86:f0:
15:92:38:75:04:76:41:de:12:f7:f4:7d:c9:e8:9b:
38:48:75:bf:89:6e:ec:1b:21:7f:05:b2:54:6e:c8:
b3:b7:d3:0f:c3:32:90:a1:9f:4b:d6:ef:11:60:da:
c0:e6:64:69:7c:28:25:13:f0:7b:da:f3:1c:47:fa:
b0:76:06:68:5c:d7:fe:b6:c6:35:87:4d:fd:e0:8f:
46:2e:a3:51:58:6c:00:09:d9:75:0c:d8:22:0f:4c:
6e:c4:68:e1:ca:e5:79:19:e4:fe:09:7f:e1:32:ea:
c7:d4:a6:27:7a:25:a3:69:92:82:a9:4b:00:46:a8:
4e:4b:41:a0:fe:d1:04:b6:cb:94:f2:6a:f0:ce:ae:
b9:da:95:53:b3:43:8b:64:3f:ab:0f:84:8d:b1:34:
7d:ca:6d:89:f1:01:92:8e:54:d5:d2:43:0b:7b:c7:
3d:57:9a:ba:71:3e:76:7c:2e:52:c2:7e:8c:a9:93:
4a:14:ff:b9:bc:3c:e6:d2:c3:01:e1:53:bd:aa:66:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:C4:D6:AE:09:69:32:37:29:99:29:3C:14:D7:6D:58:14:B3:31
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:aa:a3:25:76:be:f9:c5:78:20:2f:a8:19:29:b1:84:c0:
5f:1e:f1:5e:de:a2:98:c0:a4:18:61:02:9d:3d:d6:87:72:9c:
d8:4a:c4:0b:e6:9d:cb:fc:61:4f:0c:d1:1e:25:5a:9a:f9:eb:
53:ee:3c:8a:d2:19:ac:97:18:37:32:29:68:fe:f8:2a:41:e0:
2d:45:c5:ee:28:7a:e2:90:39:29:d0:c5:54:cf:03:7d:19:49:
f2:a4:ec:c5:f5:bc:d5:03:62:3f:7c:9d:a3:2d:a0:06:8c:7c:
91:f2:00:89:e6:ea:7f:67:ca:50:c9:6d:89:d0:68:e3:4d:85:
c3:ff:f4:8b:c8:b1:11:83:ba:76:9e:1e:46:86:c8:31:25:36:
7a:c2:8c:3b:21:1d:55:b3:5d:8b:5a:b9:0e:19:c0:18:cf:83:
7a:a5:92:92:95:76:af:79:34:66:33:05:e3:ff:9f:11:bb:4c:
c8:ec:1c:8c:6b:11:d1:f2:35:ab:d1:ab:91:0c:f0:6a:6b:36:
87:bd:46:f4:c9:c0:98:5a:10:39:28:fd:ba:d1:eb:ea:25:ef:
52:f3:76:7d:3e:76:6d:e1:f8:9d:4b:ec:ff:76:42:9c:e6:d9:
f4:68:f1:88:3f:97:4c:9a:e5:3c:8f:be:50:56:34:ba:7c:2d:
8e:53:e4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmSbOwuu3PMm8PYimPTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh
MjgzOTkwHhcNMjUwODIzMDUwMjIxWhcNMjUwODI0MDUwMjIxWjAzMTEwLwYDVQQD
EyhmYmIxYzRkNmFlMDk2OTMyMzcyOTk5MjkzYzE0ZDc2ZDU4MTRiMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37rsvbWUNYz8+sX/o1/Ito/VGWZV
ZQmfu0d+SxsTilxUZeDcpJh7WiBH5VIX2VZuHif3PeF9VKS3hvAVkjh1BHZB3hL3
9H3J6Js4SHW/iW7sGyF/BbJUbsizt9MPwzKQoZ9L1u8RYNrA5mRpfCglE/B72vMc
R/qwdgZoXNf+tsY1h0394I9GLqNRWGwACdl1DNgiD0xuxGjhyuV5GeT+CX/hMurH
1KYneiWjaZKCqUsARqhOS0Gg/tEEtsuU8mrwzq652pVTs0OLZD+rD4SNsTR9ym2J
8QGSjlTV0kMLe8c9V5q6cT52fC5Swn6MqZNKFP+5vDzm0sMB4VO9qmbPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuxxNauCWkyNymZKTwU121YFLMxMB8GA1UdIwQY
MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt
MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx
LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJSqoyV2
vvnFeCAvqBkpsYTAXx7xXt6imMCkGGECnT3Wh3Kc2ErEC+ady/xhTwzRHiVamvnr
U+48itIZrJcYNzIpaP74KkHgLUXF7ih64pA5KdDFVM8DfRlJ8qTsxfW81QNiP3yd
oy2gBox8kfIAiebqf2fKUMltidBo402Fw//0i8ixEYO6dp4eRobIMSU2esKMOyEd
VbNdi1q5DhnAGM+DeqWSkpV2r3k0ZjMF4/+fEbtMyOwcjGsR0fI1q9GrkQzwams2
h71G9MnAmFoQOSj9utHr6iXvUvN2fT52beH4nUvs/3ZCnObZ9GjxiD+XTJrlPI++
UFY0unwtjlPkuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:33 2025 by rpki-client