Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: A/AZkGObl9/NNHUhxNeed4wgYqvH4frSSt0XvKs/hfA=
Subject key identifier: 10:70:EB:4B:7F:03:46:96:E8:5E:30:E1:28:95:AE:2F:D3:AE:94:27
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 0198D773D733D491DA7A04CAA1B31D90E61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 0DE2
Signing time: Sat 23 Aug 2025 15:02:29 +0000
Manifest this update: Sat 23 Aug 2025 15:02:29 +0000
Manifest next update: Sun 24 Aug 2025 15:02:29 +0000
Files and hashes: 1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=)
2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: aOAC32RxFA+yZpPZAwWATyztUmk+Cp9EzBMRPBppynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d7:33:d4:91:da:7a:04:ca:a1:b3:1d:90:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Aug 23 15:02:29 2025 GMT
Not After : Aug 24 15:02:29 2025 GMT
Subject: CN=1070eb4b7f034696e85e30e12895ae2fd3ae9427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:68:b6:3f:dd:56:8e:7d:11:4a:01:1d:71:
09:f2:43:86:4a:bd:6e:ad:07:52:6e:9c:29:a2:67:
07:9b:a2:3a:2c:5d:c6:aa:78:60:60:3c:cd:a6:81:
be:e3:f2:f9:36:e0:49:68:48:d5:e4:12:62:4a:c1:
90:0d:dc:fb:a2:64:38:ae:86:f6:6c:1d:0c:fc:38:
49:0c:c6:c7:43:a2:0f:0e:d7:37:3a:b4:0f:36:55:
4b:ec:db:f0:7d:71:77:51:35:1a:a8:df:48:8c:f9:
41:2f:f1:52:80:00:34:55:e4:7a:76:5e:63:a5:52:
24:ed:9a:09:ee:53:59:8d:42:dc:67:7a:0a:60:60:
06:5d:1c:ee:62:81:85:43:4c:d7:43:92:f1:f3:e7:
65:5b:8f:39:a5:9a:39:62:5b:a5:49:08:d4:bc:40:
c0:e8:64:b5:7b:68:bb:90:f9:54:d7:44:87:4b:1b:
4a:c0:91:4d:af:57:62:63:f3:23:09:58:0d:31:98:
38:17:65:24:bb:0d:af:90:13:4b:9d:cc:b2:38:5f:
e2:0a:30:b7:b5:4a:33:f7:e3:a6:22:84:bb:d8:f9:
e1:a4:c8:06:3e:e9:70:85:ce:3e:12:30:bf:ed:00:
ec:4b:fb:72:e5:63:81:ba:c6:44:ca:4c:bf:5f:d8:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:EB:4B:7F:03:46:96:E8:5E:30:E1:28:95:AE:2F:D3:AE:94:27
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:50:30:b1:da:26:74:c6:8c:d8:9c:52:ae:a7:db:de:65:c3:
09:84:93:39:c7:b5:51:d8:e8:8c:e3:26:15:3c:4f:47:62:f4:
71:82:f8:91:be:49:23:88:27:37:37:8e:b1:d9:3f:18:47:1e:
c7:eb:62:58:5d:01:9c:da:8a:8f:28:6b:cf:d5:7e:05:7e:2f:
d1:a4:96:65:19:d0:e8:8e:f2:fe:d5:b2:57:45:85:87:ac:76:
19:56:d0:55:93:f1:e5:a1:96:0f:5a:cd:66:a2:2a:05:dd:f0:
68:ab:dc:3f:11:a7:c0:e8:1d:94:9c:f1:a8:6c:61:fc:a0:9c:
9e:f8:97:ba:21:a4:3c:ab:18:3e:31:b8:2f:aa:17:87:c3:b8:
19:a6:99:58:84:c4:89:97:33:03:07:96:d0:c1:f9:01:18:6a:
de:cd:6a:91:79:f5:7a:f1:83:ca:f1:c4:e2:7c:80:78:9c:cc:
21:eb:82:de:0b:a4:f1:2f:88:73:07:d7:89:a4:55:c2:21:84:
ff:88:c7:48:ff:e1:ab:8b:54:26:7a:fc:d4:61:2c:d0:fe:2b:
a0:2a:a6:49:ed:cb:fc:0c:24:23:43:3c:8a:21:f5:20:1b:57:
c7:f7:48:cb:44:42:e5:6b:96:cb:2d:70:1c:ee:d4:6a:92:62:
e7:2f:c7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc9cz1JHaegTKobMdkOYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWEzYjllMTAyMzIwOTVjMThkMjY0NDQ0MGNlNWM1OGEx
MzhiMzUwHhcNMjUwODIzMTUwMjI5WhcNMjUwODI0MTUwMjI5WjAzMTEwLwYDVQQD
EygxMDcwZWI0YjdmMDM0Njk2ZTg1ZTMwZTEyODk1YWUyZmQzYWU5NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X1otj/dVo59EUoBHXEJ8kOGSr1u
rQdSbpwpomcHm6I6LF3GqnhgYDzNpoG+4/L5NuBJaEjV5BJiSsGQDdz7omQ4rob2
bB0M/DhJDMbHQ6IPDtc3OrQPNlVL7NvwfXF3UTUaqN9IjPlBL/FSgAA0VeR6dl5j
pVIk7ZoJ7lNZjULcZ3oKYGAGXRzuYoGFQ0zXQ5Lx8+dlW485pZo5YlulSQjUvEDA
6GS1e2i7kPlU10SHSxtKwJFNr1diY/MjCVgNMZg4F2Ukuw2vkBNLncyyOF/iCjC3
tUoz9+OmIoS72PnhpMgGPulwhc4+EjC/7QDsS/ty5WOBusZEyky/X9gwOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBw60t/A0aW6F4w4SiVri/TrpQnMB8GA1UdIwQY
MBaAFEuaO54QIyCVwY0mREQM5cWKE4s1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjFlZTAtZDczMC00NWRiLTk3YmQt
YzM0YmUwM2MxNWRiLzEvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMjFlZTAtZDczMC00NWRiLTk3YmQtYzM0YmUwM2MxNWRi
LzEvUzVvN25oQWpJSlhCalNaRVJBemx4WW9UaXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlAwsdom
dMaM2JxSrqfb3mXDCYSTOce1UdjojOMmFTxPR2L0cYL4kb5JI4gnNzeOsdk/GEce
x+tiWF0BnNqKjyhrz9V+BX4v0aSWZRnQ6I7y/tWyV0WFh6x2GVbQVZPx5aGWD1rN
ZqIqBd3waKvcPxGnwOgdlJzxqGxh/KCcnviXuiGkPKsYPjG4L6oXh8O4GaaZWITE
iZczAweW0MH5ARhq3s1qkXn1evGDyvHE4nyAeJzMIeuC3guk8S+IcwfXiaRVwiGE
/4jHSP/hq4tUJnr81GEs0P4roCqmSe3L/AwkI0M8iiH1IBtXx/dIy0RC5WuWyy1w
HO7UapJi5y/HbA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:11 2025 by rpki-client