Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: dItTjEF/RcEFFdqW7irradYyvqQzFwjAeZyWSBxyz9A=
Subject key identifier: C1:21:9B:9A:15:9D:7F:81:27:BB:02:09:CC:65:7B:7D:5A:0E:B4:4A
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0197B8215C3BA1A924C1E60CA441445B5D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 1202
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: nWE2Hj2wCBnl6hUm9AfrHV7aHlYC5rA8/YeklYHQ6Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5c:3b:a1:a9:24:c1:e6:0c:a4:41:44:5b:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=c1219b9a159d7f8127bb0209cc657b7d5a0eb44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:c9:a8:2d:eb:d1:9a:2e:1a:9e:f6:34:a4:
fd:75:24:73:6b:1e:55:1d:67:46:e9:eb:be:0c:be:
fa:25:15:61:07:06:6b:88:a9:fa:57:cc:02:a4:9e:
90:32:e3:d3:6e:b0:c8:71:e1:7d:a8:2b:98:8e:20:
88:10:a4:c7:53:21:d8:e9:e8:20:f6:8e:e1:ce:0a:
e0:7f:6a:68:39:05:9f:30:7f:57:e8:c3:fd:d0:0e:
2f:d3:1a:a4:9a:7b:c3:db:4c:cf:12:7b:72:03:41:
f2:b7:43:4e:12:5a:9c:3b:98:0e:2c:55:cf:da:9a:
c1:03:82:dd:da:1f:64:7e:05:d5:e3:60:de:4c:41:
dd:cb:59:df:66:62:ef:da:8b:53:7e:d8:bd:d2:1d:
27:93:2b:18:a4:18:60:b6:9a:45:b3:f6:00:34:41:
e2:ec:9b:96:90:7c:3a:e8:ca:79:1b:e6:13:a2:cc:
fa:27:d5:f1:f7:ab:d8:7f:00:6c:7c:f3:e6:0c:dc:
c0:bc:07:e5:1e:d8:08:4f:39:53:8a:ca:d5:0c:3b:
ef:bf:0a:ab:12:46:fc:d9:28:83:30:d0:f3:dc:42:
93:9c:2c:82:63:39:00:21:67:6f:45:17:99:24:22:
1f:4c:ae:06:f2:bb:77:93:49:c1:77:df:eb:9a:f3:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:9B:9A:15:9D:7F:81:27:BB:02:09:CC:65:7B:7D:5A:0E:B4:4A
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fd:01:af:9c:b3:75:d9:08:eb:54:9e:ca:c2:54:92:f7:6b:
12:a9:20:dd:85:2c:84:ce:f5:d8:63:79:f7:fd:1e:00:f5:db:
a3:10:6e:25:e9:6c:bd:d1:43:cf:94:f7:8f:a9:5e:69:f6:28:
1d:9f:e5:7a:8f:7b:86:ca:5c:5a:f0:18:3e:d6:71:26:2c:05:
db:f7:91:84:5b:33:95:a0:02:cb:67:6f:de:87:7e:33:1f:84:
ac:50:d0:c1:ea:b9:04:f9:cc:b1:61:e8:a0:ca:da:28:ba:4b:
c3:79:86:22:3f:0a:13:03:f1:0d:ae:e5:c5:49:cd:c4:82:d1:
b8:88:3e:31:d3:ef:a0:02:86:49:43:85:05:f0:b7:8e:1f:d3:
e0:25:e7:0c:67:c0:17:df:bb:c4:43:7a:70:18:70:0f:98:0d:
08:0d:06:7c:ba:e7:14:73:be:5e:2e:aa:76:7c:e6:28:48:d0:
90:98:84:be:7e:c5:dc:3b:c1:81:97:5e:63:c5:80:11:dc:c2:
e8:c6:df:d4:71:b7:c1:8d:bd:ed:e8:25:01:61:d4:54:f0:1d:
93:ab:3d:8e:6f:46:8d:41:06:d2:01:8a:64:ed:46:1a:5b:96:
0a:24:99:d5:35:6b:c1:b1:4e:ea:29:83:70:04:fe:f2:65:9c:
c6:67:b9:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IVw7oakkweYMpEFEW10LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzQwYzRjMDc5ZjJkMWRlZTg1NDM5ZjgyNzgxYjliYWU3
NTZhOTUwHhcNMjUwNjI4MjAwMTIzWhcNMjUwNjI5MjAwMTIzWjAzMTEwLwYDVQQD
EyhjMTIxOWI5YTE1OWQ3ZjgxMjdiYjAyMDljYzY1N2I3ZDVhMGViNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6/JqC3r0ZouGp72NKT9dSRzax5V
HWdG6eu+DL76JRVhBwZriKn6V8wCpJ6QMuPTbrDIceF9qCuYjiCIEKTHUyHY6egg
9o7hzgrgf2poOQWfMH9X6MP90A4v0xqkmnvD20zPEntyA0Hyt0NOElqcO5gOLFXP
2prBA4Ld2h9kfgXV42DeTEHdy1nfZmLv2otTfti90h0nkysYpBhgtppFs/YANEHi
7JuWkHw66Mp5G+YTosz6J9Xx96vYfwBsfPPmDNzAvAflHtgITzlTisrVDDvvvwqr
Ekb82SiDMNDz3EKTnCyCYzkAIWdvRReZJCIfTK4G8rt3k0nBd9/rmvNHfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEhm5oVnX+BJ7sCCcxle31aDrRKMB8GA1UdIwQY
MBaAFLF0DEwHny0d7oVDn4J4G5uudWqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQt
ZWYwNjcxYzdjMGRmLzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQtZWYwNjcxYzdjMGRm
LzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP0Br5yz
ddkI61SeysJUkvdrEqkg3YUshM712GN59/0eAPXboxBuJelsvdFDz5T3j6leafYo
HZ/leo97hspcWvAYPtZxJiwF2/eRhFszlaACy2dv3od+Mx+ErFDQweq5BPnMsWHo
oMraKLpLw3mGIj8KEwPxDa7lxUnNxILRuIg+MdPvoAKGSUOFBfC3jh/T4CXnDGfA
F9+7xEN6cBhwD5gNCA0GfLrnFHO+Xi6qdnzmKEjQkJiEvn7F3DvBgZdeY8WAEdzC
6Mbf1HG3wY297eglAWHUVPAdk6s9jm9GjUEG0gGKZO1GGluWCiSZ1TVrwbFO6imD
cAT+8mWcxme5Qw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:13 2025 by rpki-client