Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: yOKyvom/PG6z+K39OwcXRokS/NF/Wm0IXA1mhebg74A=
Subject key identifier: BD:72:73:65:A9:A4:D0:AE:68:FD:A1:A3:83:C6:0D:73:34:89:DD:AE
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0198D54EBD0D74AFA8374619219891C15D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 026C
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: UnWzPfYurTluX08eckM0O8Zi86U07kMdausC4yCSF18=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:0d:74:af:a8:37:46:19:21:98:91:c1:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=bd727365a9a4d0ae68fda1a383c60d733489ddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:b2:28:8b:e1:9e:eb:36:ec:4b:c5:73:bb:
8b:51:87:8a:6a:e8:60:30:d9:fd:82:7f:be:dc:23:
27:3f:5d:e8:ca:e4:4b:07:da:0c:35:35:30:76:c6:
62:91:59:cf:09:b9:e4:c3:30:b8:74:d4:0a:95:5a:
44:66:9f:be:c6:dc:41:81:3d:af:d8:7d:8a:f7:bc:
fe:97:ed:2d:95:da:ba:56:5a:59:43:03:d7:8f:99:
1e:af:ab:a6:34:20:da:86:7b:e6:37:d7:ed:72:4f:
26:b3:f0:77:67:c2:21:cd:81:22:aa:0f:9c:f0:1e:
ee:75:24:8d:28:61:3b:bc:64:c2:f8:aa:39:92:67:
c9:c6:bf:23:c1:31:07:5c:1c:d2:e0:b7:c9:82:c1:
99:03:32:a8:d0:1f:ea:d3:46:6c:5a:27:4f:85:bf:
fe:7b:dc:82:ac:1f:cb:ce:6d:55:37:fd:cd:75:70:
63:3f:b5:7c:1a:e3:24:8b:a7:b9:7e:3b:ab:78:b9:
a5:6f:9b:07:95:90:17:35:e4:f0:39:8c:34:c8:36:
63:86:38:81:59:7c:d3:ee:44:98:72:f1:e4:e0:57:
98:a9:45:9b:a4:ea:43:48:0b:6c:43:3c:f6:a2:9a:
68:9c:4c:c4:1b:94:d0:6d:2e:db:25:53:b4:01:56:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:73:65:A9:A4:D0:AE:68:FD:A1:A3:83:C6:0D:73:34:89:DD:AE
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:ff:08:22:0e:15:ff:99:84:33:06:c5:47:1a:48:46:2c:
b7:6d:ce:b8:9c:82:2b:ee:46:06:bb:3f:7e:42:b4:09:44:c0:
b7:8c:74:70:83:18:26:52:a1:23:32:ca:fe:e3:59:43:0d:af:
f2:9b:b1:47:08:0f:10:a0:22:64:0d:84:4b:42:0a:68:dd:c0:
a4:77:d6:ea:7b:4f:ab:98:f3:4a:e8:57:b5:f5:62:af:4c:d0:
b8:9e:4a:b6:c3:42:37:ad:d8:92:5f:91:6a:08:6d:f1:83:56:
08:b7:c7:80:1e:38:36:59:34:a9:0b:48:bf:2f:c6:c0:de:ec:
98:ac:c7:98:42:92:c6:27:e1:66:bc:37:b5:ed:a1:ef:e9:ad:
0e:33:3e:0e:30:9d:a2:0b:0c:ed:8f:5c:22:ab:06:5a:8f:7d:
57:ca:92:8f:b7:ea:13:00:c4:93:44:c6:40:e2:c1:17:a4:9b:
d9:48:b4:a4:e4:a4:dc:93:50:26:6d:46:f7:50:a5:3e:f3:30:
d4:ad:65:c6:5e:e8:98:3e:76:f3:11:39:10:bd:ef:5d:23:a4:
7a:3d:a2:eb:40:e6:d5:19:e2:52:ef:01:3f:e4:57:4d:d1:bd:
d7:09:c0:36:4c:a9:4d:7e:a5:a2:67:d0:04:77:4f:11:ad:68:
40:4b:9e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTr0NdK+oN0YZIZiRwV0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh
YmVkNTUwHhcNMjUwODIzMDUwMjQzWhcNMjUwODI0MDUwMjQzWjAzMTEwLwYDVQQD
EyhiZDcyNzM2NWE5YTRkMGFlNjhmZGExYTM4M2M2MGQ3MzM0ODlkZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiyKIvhnus27EvFc7uLUYeKauhg
MNn9gn++3CMnP13oyuRLB9oMNTUwdsZikVnPCbnkwzC4dNQKlVpEZp++xtxBgT2v
2H2K97z+l+0tldq6VlpZQwPXj5ker6umNCDahnvmN9ftck8ms/B3Z8IhzYEiqg+c
8B7udSSNKGE7vGTC+Ko5kmfJxr8jwTEHXBzS4LfJgsGZAzKo0B/q00ZsWidPhb/+
e9yCrB/Lzm1VN/3NdXBjP7V8GuMki6e5fjureLmlb5sHlZAXNeTwOYw0yDZjhjiB
WXzT7kSYcvHk4FeYqUWbpOpDSAtsQzz2opponEzEG5TQbS7bJVO0AVZxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1yc2WppNCuaP2ho4PGDXM0id2uMB8GA1UdIwQY
MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt
ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4
LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5z/CCIO
Ff+ZhDMGxUcaSEYst23OuJyCK+5GBrs/fkK0CUTAt4x0cIMYJlKhIzLK/uNZQw2v
8puxRwgPEKAiZA2ES0IKaN3ApHfW6ntPq5jzSuhXtfVir0zQuJ5KtsNCN63Ykl+R
aght8YNWCLfHgB44Nlk0qQtIvy/GwN7smKzHmEKSxifhZrw3te2h7+mtDjM+DjCd
ogsM7Y9cIqsGWo99V8qSj7fqEwDEk0TGQOLBF6Sb2Ui0pOSk3JNQJm1G91ClPvMw
1K1lxl7omD528xE5EL3vXSOkej2i60Dm1RniUu8BP+RXTdG91wnANkypTX6lomfQ
BHdPEa1oQEue6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:10 2025 by rpki-client