Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: TAuUGJDyUslcHUp9rMDKME9zEE2rdPBjx4xqWT4kQEo=
Subject key identifier: 39:E9:29:C4:A6:A1:C1:F2:C1:EB:86:29:C5:3A:BA:C2:56:43:09:92
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 0198D773938B7705572B8E0CFF967A9FEDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0D46
Signing time: Sat 23 Aug 2025 15:02:12 +0000
Manifest this update: Sat 23 Aug 2025 15:02:12 +0000
Manifest next update: Sun 24 Aug 2025 15:02:12 +0000
Files and hashes: 1: BB5_8BhJDTnxTKWGMNqj5oXCwds.roa (hash: LuNPA32mjFH0EXTfiP4dDNt0mH4g6yoGsaPQD7tGC9s=)
2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: Fc7XniUcNPVAEFe3Gcnnwxx80Fwk2CaIBX3Eiz+kIaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:93:8b:77:05:57:2b:8e:0c:ff:96:7a:9f:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Aug 23 15:02:12 2025 GMT
Not After : Aug 24 15:02:12 2025 GMT
Subject: CN=39e929c4a6a1c1f2c1eb8629c53abac256430992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:db:60:af:5b:e8:09:90:eb:f5:21:d8:69:
b6:9a:92:ba:8d:7f:51:a1:d8:90:9c:d3:58:82:12:
ef:82:07:c3:29:bd:77:0e:cd:cc:10:d9:c9:48:c9:
3a:02:24:2b:a7:b7:00:a9:74:34:27:d0:cd:ca:50:
81:04:0e:9a:7d:37:08:7a:b3:b3:1b:ae:6a:18:cf:
ef:e7:f4:0c:7b:28:83:da:db:7a:58:04:50:a7:74:
ee:d5:37:a1:61:49:2d:86:b7:55:e9:2b:99:a0:d0:
2d:77:83:ed:1b:c0:1e:b2:f9:94:72:dd:6e:43:9d:
f4:0c:1a:3a:36:bd:3d:69:70:9c:14:1d:38:f9:fd:
f3:6e:5a:e7:e1:72:04:5d:38:c5:a2:e4:ed:9b:d9:
19:ed:a0:83:05:f1:fe:95:e7:ad:45:ac:4c:18:68:
3b:46:db:91:e8:a6:f7:66:03:76:40:8a:40:52:bc:
86:10:f6:a2:06:b5:c7:69:af:1a:4f:5e:86:79:64:
18:41:ad:0f:a8:00:1c:7d:84:3b:69:ac:10:4c:1f:
8f:82:ce:96:cd:82:10:67:de:9d:d6:c3:4d:bc:25:
e8:0e:ec:c6:b2:5a:24:b0:4a:9e:e3:8a:e0:a3:ee:
64:66:5d:86:e9:88:dd:51:0d:e7:17:a6:4a:ea:ba:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:29:C4:A6:A1:C1:F2:C1:EB:86:29:C5:3A:BA:C2:56:43:09:92
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:b3:47:27:4e:93:ff:04:68:ed:4d:64:2f:51:fc:b1:eb:
42:a1:a4:43:c8:7e:58:21:4d:8e:25:60:76:f2:cf:58:2b:fc:
82:2f:1b:e0:b8:68:7d:b3:5c:e3:27:3f:87:9c:65:15:66:97:
ba:2d:1f:2a:a2:be:27:cc:6c:13:7c:ee:c5:16:4d:ef:51:f3:
54:c3:85:a5:d8:0c:2e:6f:0a:5c:83:84:be:de:ef:69:e1:d7:
d0:3e:34:c2:fb:ae:28:0b:64:3d:6d:b6:e5:12:67:e3:69:a6:
29:27:b2:0b:8b:7b:94:e3:25:53:26:45:b7:76:24:59:98:0b:
f6:1e:74:80:e9:a9:da:e0:4b:43:97:fe:52:74:f5:21:68:ee:
ad:da:ce:7d:f1:f4:c4:df:9e:60:65:cb:73:50:64:f5:b9:1a:
66:4a:9e:94:9d:b0:b4:e9:e3:dc:1a:75:3c:f5:a3:d3:5a:13:
c3:e2:06:95:09:0f:f3:e0:f2:45:ac:e7:7e:c8:e0:bd:cd:c6:
a6:af:08:9e:c1:82:f1:96:4f:b3:d1:eb:2d:d2:c8:62:c0:5d:
f4:df:a9:b4:b1:65:75:aa:b0:3d:d4:d7:89:88:dd:ba:7f:09:
d4:04:8e:6a:55:7a:34:83:59:e4:e4:dc:ee:dc:77:de:59:8e:
38:9a:a3:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc5OLdwVXK44M/5Z6n+3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MmQyNGFkZTM3YTIyMzM5MzI4NDA5ZDc1N2Q0N2Y5Nzk0
M2I3YTAwHhcNMjUwODIzMTUwMjEyWhcNMjUwODI0MTUwMjEyWjAzMTEwLwYDVQQD
EygzOWU5MjljNGE2YTFjMWYyYzFlYjg2MjljNTNhYmFjMjU2NDMwOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIfbYK9b6AmQ6/Uh2Gm2mpK6jX9R
odiQnNNYghLvggfDKb13Ds3MENnJSMk6AiQrp7cAqXQ0J9DNylCBBA6afTcIerOz
G65qGM/v5/QMeyiD2tt6WARQp3Tu1TehYUkthrdV6SuZoNAtd4PtG8AesvmUct1u
Q530DBo6Nr09aXCcFB04+f3zblrn4XIEXTjFouTtm9kZ7aCDBfH+leetRaxMGGg7
RtuR6Kb3ZgN2QIpAUryGEPaiBrXHaa8aT16GeWQYQa0PqAAcfYQ7aawQTB+Pgs6W
zYIQZ96d1sNNvCXoDuzGsloksEqe44rgo+5kZl2G6YjdUQ3nF6ZK6roPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnpKcSmocHyweuGKcU6usJWQwmSMB8GA1UdIwQY
MBaAFEktJK3jeiIzkyhAnXV9R/l5Q7egMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAt
ZTI0YjU3OWM5OTE0LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAtZTI0YjU3OWM5OTE0
LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT6zRydO
k/8EaO1NZC9R/LHrQqGkQ8h+WCFNjiVgdvLPWCv8gi8b4LhofbNc4yc/h5xlFWaX
ui0fKqK+J8xsE3zuxRZN71HzVMOFpdgMLm8KXIOEvt7vaeHX0D40wvuuKAtkPW22
5RJn42mmKSeyC4t7lOMlUyZFt3YkWZgL9h50gOmp2uBLQ5f+UnT1IWjurdrOffH0
xN+eYGXLc1Bk9bkaZkqelJ2wtOnj3Bp1PPWj01oTw+IGlQkP8+DyRaznfsjgvc3G
pq8InsGC8ZZPs9HrLdLIYsBd9N+ptLFldaqwPdTXiYjdun8J1ASOalV6NINZ5OTc
7tx33lmOOJqj7Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:25 2025 by rpki-client