Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: mUdDXAoj2lmIKq2xci9KXmwngTjeiNAwBvCvaLEXTkc=
Subject key identifier: DC:3B:27:87:F9:19:E9:10:F6:E4:C6:67:3B:E3:37:C7:64:0A:02:6F
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 0198D5157D0E5640201AFDAAF426A149427D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 05F2
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: TC0uUl5TzF5uCSkze08bFW+MENEx3YJs288MVLKRu1g=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7d:0e:56:40:20:1a:fd:aa:f4:26:a1:49:42:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=dc3b2787f919e910f6e4c6673be337c7640a026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:33:74:8e:5a:bc:12:df:19:0d:5f:30:48:
e0:45:c9:0d:a7:e9:64:78:38:d7:b9:7a:5c:2d:77:
40:e3:6e:c7:6c:84:bf:bb:3b:37:9e:02:94:2f:1f:
fb:60:a6:67:c3:b2:d9:59:2a:27:17:a1:4e:da:c5:
db:8a:e1:75:3e:5f:78:43:14:31:e8:42:16:b1:2a:
c2:96:4d:2c:82:5e:08:00:cb:80:0a:60:15:51:be:
fd:cf:65:f7:77:0b:ff:30:6a:ce:d7:7a:6c:c3:08:
2e:48:ca:d4:16:c1:9a:17:f3:e6:bb:b6:1c:f2:43:
82:bf:04:27:e7:81:59:72:d3:8f:21:d9:0f:64:e6:
66:b9:a5:5e:eb:24:61:28:61:74:60:d6:5c:aa:c0:
79:c0:fd:da:e3:db:a3:2b:b6:72:41:5a:dd:c2:5f:
e7:ac:af:3b:bd:0b:bf:89:1c:51:a1:7d:1f:fa:37:
a5:30:3a:d2:1d:c3:cb:69:e2:eb:93:ea:5a:fa:ed:
da:8f:46:b5:c3:b8:0e:0f:89:20:f0:a2:8b:f7:7d:
12:f8:6f:8d:5e:6b:19:8a:78:ba:4f:93:83:0f:8e:
d5:76:ad:4b:a8:98:df:90:7d:55:ea:c9:2b:8e:35:
9e:e9:fc:aa:7e:5f:80:8b:ed:55:d1:43:a7:30:17:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:27:87:F9:19:E9:10:F6:E4:C6:67:3B:E3:37:C7:64:0A:02:6F
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:de:47:e5:5b:f0:a0:67:34:c1:0f:43:bd:bf:de:3e:e7:de:
d6:c6:00:d8:0c:a4:87:b2:9c:e9:75:d5:7e:e5:9e:74:cd:de:
30:16:3a:da:21:5b:e9:0b:92:0d:9a:8c:73:e6:dd:b9:68:77:
30:79:a8:d7:da:a8:84:e1:ca:bf:30:e0:dc:29:83:86:0b:e5:
5c:c3:a4:71:98:08:ac:e9:2d:89:d7:5d:df:a9:40:1a:2f:25:
c4:ee:10:36:82:2a:77:3a:91:9d:d8:f2:d9:52:5b:20:63:d8:
0b:2e:17:a8:90:0d:d0:6e:82:b6:44:86:28:e2:bc:b5:da:e2:
bd:02:38:41:9e:0a:12:40:6e:39:7d:9b:55:3f:fd:95:73:a7:
fe:35:e2:e0:15:94:7e:95:c2:f9:55:c9:38:bf:25:8a:99:54:
15:79:54:ac:f8:0b:81:e5:c1:49:98:2f:d8:00:33:60:59:cd:
48:3c:24:c6:3e:0e:b2:14:6e:ab:7e:31:06:4a:02:6b:42:38:
e1:07:da:fa:26:0d:4c:8a:5f:fd:21:2e:1c:69:7f:26:3b:f3:
17:65:86:32:81:ce:d8:f7:b7:f5:5f:de:ef:64:3e:1d:3b:51:
61:ce:bb:9d:39:d5:89:5f:a3:6e:1a:ea:f3:f8:b7:d8:61:60:
a4:ca:2a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFX0OVkAgGv2q9CahSUJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjUwODIzMDQwMDExWhcNMjUwODI0MDQwMDExWjAzMTEwLwYDVQQD
EyhkYzNiMjc4N2Y5MTllOTEwZjZlNGM2NjczYmUzMzdjNzY0MGEwMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUIzdI5avBLfGQ1fMEjgRckNp+lk
eDjXuXpcLXdA427HbIS/uzs3ngKULx/7YKZnw7LZWSonF6FO2sXbiuF1Pl94QxQx
6EIWsSrClk0sgl4IAMuACmAVUb79z2X3dwv/MGrO13pswwguSMrUFsGaF/Pmu7Yc
8kOCvwQn54FZctOPIdkPZOZmuaVe6yRhKGF0YNZcqsB5wP3a49ujK7ZyQVrdwl/n
rK87vQu/iRxRoX0f+jelMDrSHcPLaeLrk+pa+u3aj0a1w7gOD4kg8KKL930S+G+N
XmsZini6T5ODD47Vdq1LqJjfkH1V6skrjjWe6fyqfl+Ai+1V0UOnMBfrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw7J4f5GekQ9uTGZzvjN8dkCgJvMB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt5H5Vvw
oGc0wQ9Dvb/ePufe1sYA2Aykh7Kc6XXVfuWedM3eMBY62iFb6QuSDZqMc+bduWh3
MHmo19qohOHKvzDg3CmDhgvlXMOkcZgIrOktiddd36lAGi8lxO4QNoIqdzqRndjy
2VJbIGPYCy4XqJAN0G6CtkSGKOK8tdrivQI4QZ4KEkBuOX2bVT/9lXOn/jXi4BWU
fpXC+VXJOL8liplUFXlUrPgLgeXBSZgv2AAzYFnNSDwkxj4OshRuq34xBkoCa0I4
4Qfa+iYNTIpf/SEuHGl/JjvzF2WGMoHO2Pe39V/e72Q+HTtRYc67nTnViV+jbhrq
8/i32GFgpMoqcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:21 2025 by rpki-client